{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-09-11T13:48:58Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "tomcat11-11.0.25-0.2.hum1", "documentNamespace": "https://fedoraproject.org/tomcat11-11.0.25-0.2.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "tomcat11", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-11.0.25-0.2.hum1.src.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11@11.0.25-0.2.hum1?arch=src&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "a2b56ecbe4d6fefbf4ede19980796b002c30a08f9d60f0364079b7f4767cf8a9"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b\"',\\xca\\xb1\\xbaS\\xcb\\tw\\xd5Y\\xe7\\xe8[MQ\""}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: 62338959db933068b6c91f2f1c60790a387dae351624429dbef6b8612b600596"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11", "name": "tomcat11", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "618dc11da3cb22ce37965ce2471343ccadd477963f60b0d1c385490bcba5e0ce"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'\\x07\\xe1P9\\xe1\\x7f\\x1a\\xd9\\xbc\\xc5O\\x1cHJ\\xfe\\x08'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: c708468aba83c3bc80c3fbc110ba070441d4888f2608bb3dc3ca3677406db42f"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-admin-webapps", "name": "tomcat11-admin-webapps", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-admin-webapps-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-admin-webapps@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "16e107bad8b20c87144fd9b6c22a2d58f028bc2e4fb3e51f3bee8b209fb5c367"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'<\\x12\\xee\\xb0\\x1e\\x16\\x1d/6\\x82\\xb8\\x037amb'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: f38fb7edb867a626ae5ba33cd353fcb12551778ac1e1474f6660061cb62129ae"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-common", "name": "tomcat11-common", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-common-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-common@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "64fa15ad57ddbffe27a3763d18a88035f44337fee619945e562225cedfdd7170"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'\\x86\\x99\\x11\\xdc:\\xc1\\x14\\xf6\\x8cR\\xf6t\\x87/\\xc9\\x86'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: 30772397d6eb0865c19db2ea2c09c14abbe2ab362124a9f228cd767945bf612c"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-docs-webapp", "name": "tomcat11-docs-webapp", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-docs-webapp-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-docs-webapp@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "6d8277cf063337db3a400b0a20ad82b41c82d499877b62eed87c7286ea904963"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'\\xdc(\\x9a\\xd6\\x19\\x1f\\r\\xfcCi\\xe0L`\\xa4\\xfe\\xd6'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: 16f26b5f4f8b46db46e0f27a1d5551c5219f57155bddaace240c1d03e10b85b9"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-el-6.0-api", "name": "tomcat11-el-6.0-api", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-el-6.0-api-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-el-6.0-api@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "1012ac0f69010dddbe844a52c283a94828fac7830021f8d41c5c3c524fd51f1a"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'I;\\xdb9\\xf6\\x18|y\\x83\\xcf\\x0f\\xb5\\x0b\\x82H\\xc5'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: e7315e420dd767e78027d4c987f535503b38e35cab8cd8044d05979ab2036849"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-jsp-4.0-api", "name": "tomcat11-jsp-4.0-api", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-jsp-4.0-api-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-jsp-4.0-api@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "2735a04a2c107bd402997acd4dc4430444fa894f2b1294bce30b9a8702547779"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'_\\xd4\\xf6\\xf0\\xe2\\\\BW\\xfa\\xc8\\xbf|({\\x85\\xc9'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: 352bf03f13f06645e2186d80fb65f04eeb9fe8144b214cf937eee46a63dd8b61"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-lib", "name": "tomcat11-lib", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-lib-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-lib@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "55c8a9e42ec2c2665d8ea1cf94bfccca76bcf9fe0f79a12c134d981dd6209575"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'|\"t\\xa3\\xbf<\\x89\\xe2*\\x0e\\xe2\\xfe\\xb0\\xc3\\xfc\\xc0'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: ca950565e79f537efb145eeb1af441c045e4b01554425a0f37344699f9711510"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-servlet-6.1-api", "name": "tomcat11-servlet-6.1-api", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-servlet-6.1-api-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-servlet-6.1-api@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "d6d103d7b69281b426a2a258730ce18a6237f33f9979bb81b3ad64f3d8723762"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b\"4\\x97 \\xf9'\\xf9~GVf\\x87\\xad\\x1f\\xb7\\xda+\""}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: 4b62d8dee81a13f1bf6560025bac4f384647e5b93cab8cd0e7b0b2699e86e4bd"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-user-instance", "name": "tomcat11-user-instance", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-user-instance-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-user-instance@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "dc9da1626a7881fd531a13a6b41aaef8aa102472ab3a8770aedfb6c3abbde0f4"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b'\\x1dT3s|a;\\x89\\xe2\\x17qw\\xedy+6'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: 69767233860680cd4e381bca9e8631dda234ab71f535d336655bedfce757de32"}]}, {"SPDXID": "SPDXRef-noarch-tomcat11-webapps", "name": "tomcat11-webapps", "versionInfo": "11.0.25:11.0.25-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat11-webapps-11.0.25-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat11-webapps@11.0.25-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "66e0ab4fa129e89cab61937669eddb5348b3231f725a4e08427889bfb700e746"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b\"\\x9dq\\x84\\xa23<\\xb8VD\\x1c[\\xd9'\\x1b\\xb7\\x83\""}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sha256header: e89b56705db2a6221f60feb62640da455d98957b98ad0b42181cabb1c47c587c"}]}, {"SPDXID": "SPDXRef-Source0", "name": "apache-tomcat-11.0.25", "versionInfo": "src", "packageFileName": "apache-tomcat-11.0.25-src.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/tomcat11/apache-tomcat-11.0.25-src.tar.gz/sha512/726f68024ae3774e83441814b1bb34970b0c86754b03a2990c6f8f69c23afa985ec00fd7b0367cc855f7d8347e0b88c86be70dc1a319bc0c1874f2e00d15d073/apache-tomcat-11.0.25-src.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "1bc5dfb885f9cd0f86c2538280891dca457522f74cd6c7e0574c7a1b2814ee98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/apache-tomcat-11.0.25@src?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/tomcat11/apache-tomcat-11.0.25-src.tar.gz/sha512/726f68024ae3774e83441814b1bb34970b0c86754b03a2990c6f8f69c23afa985ec00fd7b0367cc855f7d8347e0b88c86be70dc1a319bc0c1874f2e00d15d073/apache-tomcat-11.0.25-src.tar.gz&checksum=sha512:726f68024ae3774e83441814b1bb34970b0c86754b03a2990c6f8f69c23afa985ec00fd7b0367cc855f7d8347e0b88c86be70dc1a319bc0c1874f2e00d15d073"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "apache-tomcat-11.0.25", "versionInfo": "src", "downloadLocation": "https://downloads.apache.org/tomcat/tomcat-11/v11.0.25/src/apache-tomcat-11.0.25-src.tar.gz", "packageFileName": "apache-tomcat-11.0.25-src.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "1bc5dfb885f9cd0f86c2538280891dca457522f74cd6c7e0574c7a1b2814ee98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/apache-tomcat-11.0.25@src?download_url=https://downloads.apache.org/tomcat/tomcat-11/v11.0.25/src/apache-tomcat-11.0.25-src.tar.gz&checksum=sha256:1bc5dfb885f9cd0f86c2538280891dca457522f74cd6c7e0574c7a1b2814ee98"}]}, {"SPDXID": "SPDXRef-Source1", "name": "tomcat", "versionInfo": "11.0.conf", "packageFileName": "tomcat-11.0.conf", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "895194958ef52114e69b6a5882d0c2087838977ebbe560020a21836b74072cf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat@11.0.conf"}]}, {"SPDXID": "SPDXRef-Source2", "name": "tomcat", "versionInfo": "11.0.service", "packageFileName": "tomcat-11.0.service", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "feb655c2d85877955b5a6433744d1ed5bfc41991dfcbac89d6241799b9b3ba4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat@11.0.service"}]}, {"SPDXID": "SPDXRef-Source3", "name": "tomcat-11.0-locate", "versionInfo": "java.sh", "packageFileName": "tomcat-11.0-locate-java.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "04c8b0a238c90f227e4aefbd165d28abd49e2cc7574616ea181f5389bc3f8690"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-11.0-locate@java.sh"}]}, {"SPDXID": "SPDXRef-Source4", "name": "tomcat-11.0", "versionInfo": "run.sh", "packageFileName": "tomcat-11.0-run.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "81abda65caa87ee61fafe4f2236bd33f14cc30fe6c5b41e041f8f16af6ebfd36"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-11.0@run.sh"}]}, {"SPDXID": "SPDXRef-Source5", "name": "tomcat-11.0", "versionInfo": "RUNNING.txt", "packageFileName": "tomcat-11.0-RUNNING.txt", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "9c15cd25e90c106a0a48569ba9a4a63eff230ea7eab105081565255a7783b5ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-11.0@RUNNING.txt"}]}, {"SPDXID": "SPDXRef-Source6", "name": "tomcat-11.0-user-instance", "versionInfo": "create.sh", "packageFileName": "tomcat-11.0-user-instance-create.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "85fa13da477c22422de51c9f38cd0835d700185a5d2666122485494e41a31288"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-11.0-user-instance@create.sh"}]}, {"SPDXID": "SPDXRef-Source7", "name": "tomcat-11.0", "versionInfo": "setenv.sh", "packageFileName": "tomcat-11.0-setenv.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "769750a46503f7fc0fc5ec01dd88fe9f25cbd18c6d7f39242195307e38ca4c99"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-11.0@setenv.sh"}]}, {"SPDXID": "SPDXRef-Source8", "name": "tomcat-11.0-user-instance", "versionInfo": "create.asciidoc", "packageFileName": "tomcat-11.0-user-instance-create.asciidoc", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "de8374500ad60d2b85f5c44075b7c14c633fb88f7609efc8fdea56b61791a755"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-11.0-user-instance@create.asciidoc"}]}, {"SPDXID": "SPDXRef-Buildroot-tomcat11-noarch", "name": "tomcat11-buildroot-noarch", "versionInfo": "63513c8f", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-noarch", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-abattis-cantarell-vf-fonts-noarch", "name": "abattis-cantarell-vf-fonts", "versionInfo": "0.301-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/abattis-cantarell-vf-fonts-0.301-18.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8071144b64145451fbd55f4575094016"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/abattis-cantarell-vf-fonts@0.301-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-noarch", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d599f3c879b1a93f7a50d8c2c2f8aa2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-noarch", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 49f9259756d5c706df2b6570ff5b5cea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-noarch", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-lib-noarch", "name": "ant-lib", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-lib-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: fcf2508d20a6b8de8f7b4bf52b8c6957"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant-lib@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-openjdk25-noarch", "name": "ant-openjdk25", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-openjdk25-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 668bd2b590358e26b1ae5c2b95aedbfa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant-openjdk25@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-noarch", "name": "ant", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3af86d196650e7e0bb937c9cf6530d68"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aopalliance-noarch", "name": "aopalliance", "versionInfo": "1.0-8.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aopalliance-1.0-8.fc44.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bbdaa454589ec768d516fefa81e2f833"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aopalliance@1.0-8.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-cli-noarch", "name": "apache-commons-cli", "versionInfo": "1.10.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-cli-1.10.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 93801c268fdb5f74d1de6c63f467e7d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-cli@1.10.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-codec-noarch", "name": "apache-commons-codec", "versionInfo": "1.19.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-codec-1.19.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: abdd0a2509ff59b6923dc3c51eac2424"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-codec@1.19.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-compress-noarch", "name": "apache-commons-compress", "versionInfo": "1.28.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-compress-1.28.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d78a3aa33901a2f6d48b4b24c0cb0bfe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-compress@1.28.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-io-noarch", "name": "apache-commons-io", "versionInfo": "1:2.20.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-io-2.20.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 071df2b159babe740e0f33792d16e903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-io@2.20.0-3.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-lang3-noarch", "name": "apache-commons-lang3", "versionInfo": "3.19.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-lang3-3.19.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3778bd2bfa11e6ee3ae4e0bcd245d4fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-lang3@3.19.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aqute-bndlib-noarch", "name": "aqute-bndlib", "versionInfo": "6.3.1-31.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aqute-bndlib-6.3.1-31.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 OR EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d634280e90252a1fc55651316d67577c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aqute-bndlib@6.3.1-31.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aqute-bnd-noarch", "name": "aqute-bnd", "versionInfo": "6.3.1-31.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aqute-bnd-6.3.1-31.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 OR EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 44c749a2ebc0d9acce2b01260ae20737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aqute-bnd@6.3.1-31.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-noarch", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 25236c26c96434cd2c084d5df98e55cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-noarch", "name": "authselect-libs", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-libs-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b14a21f672fb8a2b32fa25dee98404bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-noarch", "name": "authselect", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4c9189f00d4ea34aaac756cff82ccdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-noarch", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.15-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 35c598d1f15aba91f61b244abf8d0fbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bcel-noarch", "name": "bcel", "versionInfo": "6.10.0-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/b/bcel-6.10.0-6.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6e5291a1b0a758031886f416f2326655"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bcel@6.10.0-6.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-beust-jcommander-noarch", "name": "beust-jcommander", "versionInfo": "1.82-29.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/b/beust-jcommander-1.82-29.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f84e8aada4d5d00ce0e221d811d9b88b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/beust-jcommander@1.82-29.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-noarch", "name": "binutils", "versionInfo": "2.46.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: af80d8495b28db44fe34df5474e26f80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-noarch", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-noarch", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: eed9f8d38229149ee3ba920f26ec2634"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-noarch", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: ed5ad98a73dbc065c211ed6d9a6be8bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-noarch", "name": "ca-certificates", "versionInfo": "2025.2.80_v9.0.304-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2025.2.80_v9.0.304-9.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8280885c60ebda1b9261bdb611c6bf85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-noarch", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-noarch", "name": "coreutils-common", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d2aee0d1bb96b62e637baca6ed52bda3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-noarch", "name": "coreutils", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: de0c31a752b4c84fe8355fc07d7c7e73"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-noarch", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c073bae358997220d77e1ef8887532d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-noarch", "name": "cracklib", "versionInfo": "2.10.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cracklib-2.10.3-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3f9ad52e2eccdefe42c677227d92f9f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-noarch", "name": "crypto-policies-config-default", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 879e05f9fee2fffc9b0863b62ee0784c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-noarch", "name": "crypto-policies", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 01283c07f63751da93fa1cfe352e124f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-noarch", "name": "curl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 78c957a3eee0fecb9dacd620650b92ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-noarch", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 266c623e6d845c8594aa574261208db1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-noarch", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4510f40574dd3d6c447121aad1bfb3a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-default-fonts-core-sans-noarch", "name": "default-fonts-core-sans", "versionInfo": "4.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/default-fonts-core-sans-4.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 86921a0e77b0846c3b4c5197b0ed205f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/default-fonts-core-sans@4.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-noarch", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0f1fdf69f5ed7422a5669c80a7fdf1d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dola-bsx-noarch", "name": "dola-bsx", "versionInfo": "1.3.2-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/d/dola-bsx-1.3.2-10.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5eafd60d39ae15ef7d17269f6e650ccf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dola-bsx@1.3.2-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-noarch", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 857b4cf1ffa022a0d3fd4237703ed33a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ecj-noarch", "name": "ecj", "versionInfo": "1:4.23-16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ecj-4.23-16.hum1.noarch.rpm", "licenseDeclared": "EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 38dc05bbd70ac42f51d4be14c0b168f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ecj@4.23-16.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-noarch", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 67e9e412f7f6eb77770feadf190fff63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-noarch", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-noarch", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c9b05c1c56e6b6e2e662124e9113f35c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-noarch", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 06a9e7b4e1ae267637c31a55908c58ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-noarch", "name": "elfutils-libs", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d6b7fc024c1650a5d07a866a0bee6173"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-noarch", "name": "elfutils", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e4968bf39e3fae91e3c199b8ae734a26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-noarch", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-noarch", "name": "expat", "versionInfo": "2.8.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.4-0.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 95cbb0adcdcc44e0c5a7e8663c32b754"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.4-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-noarch", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3011bd0b02ede9edac71a65e99147e3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-noarch", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-noarch", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a6149e4767a7cf4d382b9c7363233909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-noarch", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e149bc26d884bf5a5ee6102ad3247a1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-noarch", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: fe5a4416f64ae8bf85a0f6da30837f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fontconfig-noarch", "name": "fontconfig", "versionInfo": "2.18.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fontconfig-2.18.3-1.hum1.x86_64.rpm", "licenseDeclared": "HPND AND LicenseRef-Fedora-Public-Domain AND Unicode-DFS-2016", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8040218e1f79b34c1fa979a5b843ec47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fontconfig@2.18.3-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-filesystem-noarch", "name": "fonts-filesystem", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-filesystem-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 51b74135abe35cee598865729a7c346d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-filesystem@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-noarch", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-noarch", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-noarch", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-freetype-noarch", "name": "freetype", "versionInfo": "2.14.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/freetype-2.14.3-2.hum1.x86_64.rpm", "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND LicenseRef-Fedora-Public-Domain AND Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f83520986455d13c893c08f081949538"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/freetype@2.14.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-noarch", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-noarch", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: aa0b0ed2ab703a0a1380be08760ac1c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-noarch", "name": "gdb-minimal", "versionInfo": "17.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bc6234f1f13c2975b1d28e47af9678a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-noarch", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.23-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 16d5cf0e1a204da7d8dfec016f321ee0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-noarch", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-noarch", "name": "glibc-common", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: cfe72f886d7d4fa49e8668bced9cd22d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-noarch", "name": "glibc-gconv-extra", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d2d43a7a8a4f864292e9ae44af008852"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-noarch", "name": "glibc-minimal-langpack", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 52cdd26f225cb3f1ad4c09d8aec1af53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-noarch", "name": "glibc", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: ffe770a35e80e35734a94f18fedb0f9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-noarch", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8333c5d90507e9736f0e303c1d522bc7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-noarch", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-noarch", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-noarch", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-noarch", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9f2721ea3da813f95e0ad372005b7529"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-noarch", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: cacaf2b33174d8b69711aa44ccc468fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-noarch", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f03517c24814af85fc2cf0c88c52cc3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-noarch", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1558980b4762e26e31e9250935327328"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-noarch", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 29926505c40dfc97edbcac3739fa6fad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-noarch", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8d857842147cc33655aa852ce16a6d0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-noarch", "name": "gnutls", "versionInfo": "3.8.13-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4465107c8a805de52d68f9358bfc23f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-noarch", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-gson-noarch", "name": "google-gson", "versionInfo": "2.12.1-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/google-gson-2.12.1-6.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4ca5ccf49194732e4664592a320185ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-gson@2.12.1-6.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-guice-noarch", "name": "google-guice", "versionInfo": "5.1.0-33.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/google-guice-5.1.0-33.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a0a76b4165c7e37992253e5272e02667"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-guice@5.1.0-33.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-noto-fonts-common-noarch", "name": "google-noto-fonts-common", "versionInfo": "20260601-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/google-noto-fonts-common-20260601-3.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d529a78da911404bd76fe292007af60c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-noto-fonts-common@20260601-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-noto-sans-vf-fonts-noarch", "name": "google-noto-sans-vf-fonts", "versionInfo": "20260601-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/google-noto-sans-vf-fonts-20260601-3.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d73b2c01493c0a291f525b8549dafc65"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-noto-sans-vf-fonts@20260601-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-noarch", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-noarch", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e9b48d78eb8bf0c4148539f2d7590630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-guava-noarch", "name": "guava", "versionInfo": "33.5.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/guava-33.5.0-1.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: de6ba95a6bfd36c3838bd3bd24e3d398"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/guava@33.5.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-noarch", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.14-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 23b0f59e33577a569a570da5c778a94b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-httpcomponents-client-noarch", "name": "httpcomponents-client", "versionInfo": "4.5.14-30.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/h/httpcomponents-client-4.5.14-30.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1bafcfae5004435463e1364739e3e242"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/httpcomponents-client@4.5.14-30.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-httpcomponents-core-noarch", "name": "httpcomponents-core", "versionInfo": "4.4.16-30.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/h/httpcomponents-core-4.4.16-30.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5bf74ba6d5dd745c3332abcd92e308d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/httpcomponents-core@4.4.16-30.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-noarch", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 293719e921051d2c474acc222cc0955d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-noarch", "name": "hummingbird-release", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4443e83eba871e4e77290c97065ffa02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-noarch", "name": "hummingbird-repos", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c889167c7b3cca62bb596d3cfbd63b6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-noarch", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 13293a1d14d37f008481dc8932e105a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-noarch", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jakarta-annotations-noarch", "name": "jakarta-annotations", "versionInfo": "1.3.5-46.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jakarta-annotations-1.3.5-46.fc44.noarch.rpm", "licenseDeclared": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 2347161d72d8ba3f213287808c751383"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jakarta-annotations@1.3.5-46.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jakarta-inject1.0-noarch", "name": "jakarta-inject1.0", "versionInfo": "1.0.5-12.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jakarta-inject1.0-1.0.5-12.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 57e0baf53b432ccdc006466f2f976b95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jakarta-inject1.0@1.0.5-12.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansi-noarch", "name": "jansi", "versionInfo": "2.4.2-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jansi-2.4.2-2.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b17661d6e19bee064d6402a7aac5eea6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansi@2.4.2-2.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-noarch", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e8197a7cf76ae8dbc808b4e96fefb59f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-crypto-adapter-noarch", "name": "java-25-openjdk-crypto-adapter", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e0da4608269ee77093544fe10a747413"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-crypto-adapter@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-devel-noarch", "name": "java-25-openjdk-devel", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-devel-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: caa63261573ce9c8595508ba0a1522f0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-devel@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-headless-noarch", "name": "java-25-openjdk-headless", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-headless-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 2d362a4a05a90a0d4d24c8af022e2e1f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-headless@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-noarch", "name": "java-25-openjdk", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d0c5debb4abd8cd627756fd5e39ea1f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-noarch", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-common-noarch", "name": "javapackages-common", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-common-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0c58747098275968eca3af2bce256a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-common@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-filesystem-noarch", "name": "javapackages-filesystem", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-filesystem-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: dfb507d447bceb292455cfa3d3742fc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-filesystem@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-local-openjdk25-noarch", "name": "javapackages-local-openjdk25", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-local-openjdk25-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 32bdb8329469e93ed1221b42bee539b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-local-openjdk25@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-tools-noarch", "name": "javapackages-tools", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-tools-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 248bd63f16318539e0ef4e6243948e92"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-tools@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jcl-over-slf4j-noarch", "name": "jcl-over-slf4j", "versionInfo": "1.7.36-19.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jcl-over-slf4j-1.7.36-19.fc44.noarch.rpm", "licenseDeclared": "MIT AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1615e220e97509ac77f2d7c2821503ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jcl-over-slf4j@1.7.36-19.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-noarch", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e77db91a34f0bbe04e9c920b4509229b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jsr-305-noarch", "name": "jsr-305", "versionInfo": "3.0.2-44.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jsr-305-3.0.2-44.fc44.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f4f880c3d5a22a484ed421f3bdb698b4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jsr-305@3.0.2-44.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-noarch", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-noarch", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f3314a91e4eea1720410bcd3b770ab81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-noarch", "name": "krb5-libs", "versionInfo": "1.22.2-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-9.1.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: fcd0b9f63f73692d52c332ab30217e6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libX11-common-noarch", "name": "libX11-common", "versionInfo": "1.8.13-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libX11-common-1.8.13-2.hum1.noarch.rpm", "licenseDeclared": "MIT AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: debe6e4308c8a575143b5f76b3bebcd4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libX11-common@1.8.13-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libX11-noarch", "name": "libX11", "versionInfo": "1.8.13-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libX11-1.8.13-2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8d95a6ed42ae135faef90837e6b5bac8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libX11@1.8.13-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXau-noarch", "name": "libXau", "versionInfo": "1.0.12-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXau-1.0.12-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8ac42f7764153997f1f83b4fe4a22c88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXau@1.0.12-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXcomposite-noarch", "name": "libXcomposite", "versionInfo": "0.4.6-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXcomposite-0.4.6-8.hum1.x86_64.rpm", "licenseDeclared": "MIT AND HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0c14126b353aaab5b82f92c4391d2805"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXcomposite@0.4.6-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXext-noarch", "name": "libXext", "versionInfo": "1.3.6-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXext-1.3.6-6.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND X11 AND HPND AND HPND-sell-variant AND SMLNJ AND MIT AND ISC AND HPND-doc AND HPND-doc-sell", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4f60c3fb8c35590df93ecea57c2b7ce6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXext@1.3.6-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXi-noarch", "name": "libXi", "versionInfo": "1.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXi-1.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND SMLNJ AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 75783990ac8d8cf50e298bb095ff1425"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXi@1.8.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXrender-noarch", "name": "libXrender", "versionInfo": "0.9.12-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXrender-0.9.12-5.hum1.x86_64.rpm", "licenseDeclared": "HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7ae5ab05ae59ec072eba6c1300bf7be6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXrender@0.9.12-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXtst-noarch", "name": "libXtst", "versionInfo": "1.2.5-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXtst-1.2.5-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND HPND-sell-variant AND X11 AND HPND-doc AND HPND-doc-sell", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a094f59851775fb31fcdc8224befe2cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXtst@1.2.5-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-noarch", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 778d6a835f1bfcb1eba15772105b50dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-noarch", "name": "libarchive", "versionInfo": "3.8.8-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.8-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0758bf73997040af83f49b583928ab2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.8-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-noarch", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3d2e4518c599f045df67f8766d514be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-noarch", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-noarch", "name": "libblkid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 640898d2ab2f2438f25b5d21b49c128b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-noarch", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 04bf9b2dab99d0b0957ddc802b552a3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-noarch", "name": "libcap-ng", "versionInfo": "0.9.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.5-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bee771867abba9896a92e8061074cbfd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-noarch", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 99e45918735b0a73e5d7fa59ca39d79c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-noarch", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f3c1be1d36e9f029f995536b6e55a86c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-noarch", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: efa036217a574dc291905e1d6787e5fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-noarch", "name": "libcurl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 43fd88b4ba65b9a7c53699d46553b5f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-noarch", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f286b987da4aba89effee118c74d63c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-noarch", "name": "libevent", "versionInfo": "2.1.13-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f569d4f8dc1520a6da8d71e8e2661a0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-noarch", "name": "libfdisk", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4372d99deede31c20dc450a2b34bab60"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-noarch", "name": "libffi", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.5.2-3.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b379c80d092e884edca21229b22b9f0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.5.2-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-noarch", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 09d88d35bf7b1fdbe3596964d5a5b4d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfontenc-noarch", "name": "libfontenc", "versionInfo": "1.1.8-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfontenc-1.1.8-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bfc90dd31704ddb48cc01007c7fb6b67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfontenc@1.1.8-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-noarch", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 714d39cacbaa2869cb8986837cc7c051"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-noarch", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7f44b3ed25c62af7fca7534bcb5503d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-noarch", "name": "libgcrypt", "versionInfo": "1.12.2-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.2-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7e76c4be2288d8b74daf91e4bc1cceab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.2-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-noarch", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 656b1ba106369f9105acf64ed30e33fa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-noarch", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3c865a471949c8a9c6cb39d47d8f1352"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-noarch", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a39f7e39430a77e5e372eabb91b997cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-noarch", "name": "libksba", "versionInfo": "1.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 97c2ec2ec2c7c15552b2f9bfe8aaf020"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-noarch", "name": "liblastlog2", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0911552f951130c8ba1509649b98497d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-noarch", "name": "libmount", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: fead67f5f1cf6664db260063f7fe890f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-noarch", "name": "libnghttp2", "versionInfo": "1.69.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-5.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c6ae8f8b998ef4b924f4a7c483950da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-noarch", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5598615cbe06f72c2a2879a3aaf13699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-noarch", "name": "libnsl2", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnsl2-2.0.1-6.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 738ea6cbd6499c2495aa28d665c043b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-noarch", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-noarch", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 48c108eef9d6ae92f86afa0832cd5bb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpng-noarch", "name": "libpng", "versionInfo": "2:1.6.58-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpng-1.6.58-2.hum1.x86_64.rpm", "licenseDeclared": "zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1bd5b6396180ec2d447226eab0b14f27"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpng@1.6.58-2.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-noarch", "name": "libpsl", "versionInfo": "0.23.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.1-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5a6a0c1c67a57c39de62b7e2a8e21504"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-noarch", "name": "libpwquality", "versionInfo": "1.4.5-18.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpwquality-1.4.5-18.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 83fb1254a477bafd652ea86057ef79bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-noarch", "name": "libseccomp", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-2.6.1-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e2bd5d7f7cc8c493f79e31a71757cf2a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-noarch", "name": "libselinux-utils", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5bebcc7720fa8a5cc86351ed7298f152"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-noarch", "name": "libselinux", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: acadf2edec720f9104493928ec56f3cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-noarch", "name": "libsemanage", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: efeb1527bdc98b7da6525ff307c93da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-noarch", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 39bac19c684ef55d632a47c43bb878c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-noarch", "name": "libsmartcols", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f8deb70cca766046d78bd7b71a3accb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-noarch", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-noarch", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 149536546e1810f679ce19b1be42e58e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-noarch", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 786c9eb6cf16e70afac24b687a58a734"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-noarch", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e377a290a5c1a3fe6380be2a69a90fa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-noarch", "name": "libtirpc", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtirpc-1.3.7-3.hum1.x86_64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d270169aad39bef874590837735f6a1d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.7-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-noarch", "name": "libtool-ltdl", "versionInfo": "2.5.4-11.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.5.4-11.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 70ba9283722c13dd220b62e0337e67b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.5.4-11.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-noarch", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1cc5ed6dc9abd644761b1394fa848349"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-noarch", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7e5e59833d66366a60c5c01481be2c39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-noarch", "name": "libuuid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e3e9afb82e210b9217e4ad7d086cbafd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-noarch", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1e2d449e326eb9c384e7665561d3bf59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcb-noarch", "name": "libxcb", "versionInfo": "1.17.0-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcb-1.17.0-8.hum1.x86_64.rpm", "licenseDeclared": "X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b65b0379db98877a8d53e1b8eed2fca1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcb@1.17.0-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-noarch", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 186f5d91cd0fb2f9753f3859f2eaca00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-noarch", "name": "libxml2-16", "versionInfo": "2.15.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-0.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 20dc73195f09f0687470eac50c6995ff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-noarch", "name": "libxml2", "versionInfo": "2.12.10-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/l/libxml2-2.12.10-6.fc44.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 580ab293715fe79dfd1d1ca00f335668"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2@2.12.10-6.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxslt-noarch", "name": "libxslt", "versionInfo": "1.1.45-0.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxslt-1.1.45-0.1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e56e1a0838c6f6d4a4b84d62945555fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxslt@1.1.45-0.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-noarch", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d3302b977dc6fd5cb29412a7d358541d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-noarch", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e839cebae2f671496325846256147325"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lksctp-tools-noarch", "name": "lksctp-tools", "versionInfo": "1.0.21-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lksctp-tools-1.0.21-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-only AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: de113f675e8eb42acd7085a585cae8e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lksctp-tools@1.0.21-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-noarch", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 202aef337d9998f9b16c9b81b42d4744"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-noarch", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lujavrite-noarch", "name": "lujavrite", "versionInfo": "1.2.3-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lujavrite-1.2.3-4.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6a4340b7b1681b6bbcdd5492b9fac2dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lujavrite@1.2.3-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-noarch", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9d26849f5c070c53a3c0eb03d2a7b3da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-lib-noarch", "name": "maven-lib", "versionInfo": "1:3.9.11-11.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-lib-3.9.11-11.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 06010a9ee38899f4508a7dfb1e5fe260"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-lib@3.9.11-11.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-resolver-noarch", "name": "maven-resolver", "versionInfo": "1:1.9.24-5.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-resolver-1.9.24-5.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 210b4335f129aa62423b2854e52b4218"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-resolver@1.9.24-5.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-shared-utils-noarch", "name": "maven-shared-utils", "versionInfo": "3.4.2-27.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-shared-utils-3.4.2-27.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9ecf41b89dea3030322e53754e4ad780"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-shared-utils@3.4.2-27.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-wagon-noarch", "name": "maven-wagon", "versionInfo": "3.5.3-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-wagon-3.5.3-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 11788a192192c068f8990f624f535afd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-wagon@3.5.3-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mkfontscale-noarch", "name": "mkfontscale", "versionInfo": "1.2.4-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mkfontscale-1.2.4-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND X11 AND MIT AND HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e874c6a940690035fb739108f879b703"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mkfontscale@1.2.4-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-noarch", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 2510cb8c8936230f7136343d313013d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-noarch", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9b7d4b17e85c5c2a31eb4ff1071f1f11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-noarch", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-noarch", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1f7dd08e1f7f3a21dea4d74150ca7e90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-noarch", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: dec047659ca3ed7f2ade5edb5417768e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-noarch", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: ce32706efbf4cd25374b30a8c35c8b33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-noarch", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 53eeed67908e3a4eb1daa0c352dd6c6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-noarch", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 79832c509c9ece7d8af6a7967f6c6d36"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nspr-noarch", "name": "nspr", "versionInfo": "4.39.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nspr-4.39.0-4.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 396373e128a8a9c6f55ee96be904f162"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nspr@4.39.0-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-softokn-freebl-noarch", "name": "nss-softokn-freebl", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-softokn-freebl-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a28591b689483ebff78b93f8e9460593"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-softokn-freebl@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-softokn-noarch", "name": "nss-softokn", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-softokn-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 846a54f364bbdda33fb6d4be581ab3fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-softokn@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-sysinit-noarch", "name": "nss-sysinit", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-sysinit-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 288cb3a44497200d81c83be021173b2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-sysinit@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-util-noarch", "name": "nss-util", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-util-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f8165f38432edc8e9fca461056d0840b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-util@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-noarch", "name": "nss", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 64a3a265afb737a4f0b750a184d30cfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-objectweb-asm-noarch", "name": "objectweb-asm", "versionInfo": "9.7.1-15.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/objectweb-asm-9.7.1-15.fc44.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 867a2025c5f1033aacbda91b105a9366"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/objectweb-asm@9.7.1-15.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-noarch", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-noarch", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-noarch", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.13-4.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a2d4cf9dfcc75dc0b1203812c66474a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-noarch", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8369e6248ade4d151e67b35b4687a584"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-noarch", "name": "openssl-libs", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 07b4fddbc7a905355706d23cb7793b8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-annotation-noarch", "name": "osgi-annotation", "versionInfo": "8.1.0-23.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-annotation-8.1.0-23.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bbdb9a5437d12374dc5659d83c0bb03a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-annotation@8.1.0-23.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-compendium-noarch", "name": "osgi-compendium", "versionInfo": "7.0.0-43.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-compendium-7.0.0-43.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 74164cab659544c0613c260e2d2e7ef5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-compendium@7.0.0-43.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-core-noarch", "name": "osgi-core", "versionInfo": "8.0.0-39.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-core-8.0.0-39.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7f9e086639fc2c074e1d19304c0e3c55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-core@8.0.0-39.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-noarch", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 68257f4d7431d3b1885712f25b4f5058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-noarch", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 75311ea12371b64af16c0e5594ded602"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-noarch", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-noarch", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: fca8dc3ed64b8bdc9ea406b714989970"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-noarch", "name": "pam", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 45e8bb3359f7a1bcea2cba7230567828"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-noarch", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0ae052d45ed91aae4aa901512b427f23"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-noarch", "name": "pcre2-syntax", "versionInfo": "10.47-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.47-1.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: df6d2e760944267916c19d5af1dbc84b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-noarch", "name": "pcre2", "versionInfo": "10.47-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.47-1.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a3612da414f5ebd0589c219b97004eab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.47-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-noarch", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-noarch", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-noarch", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a635242970269a96004c1698d505cbee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-noarch", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5e1ba23c3274edeebb8a40e9f93deded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-cipher-noarch", "name": "plexus-cipher", "versionInfo": "2.0-34.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-cipher-2.0-34.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9dff9d0430ada3c1b9c43385f29c4202"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-cipher@2.0-34.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-classworlds-noarch", "name": "plexus-classworlds", "versionInfo": "2.8.0-17.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-classworlds-2.8.0-17.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND Plexus", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b7a7aa34fdb9222cd0c6b9f8cf572e6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-classworlds@2.8.0-17.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-containers-component-annotations-noarch", "name": "plexus-containers-component-annotations", "versionInfo": "2.2.0-18.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-containers-component-annotations-2.2.0-18.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND MIT AND xpp", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 770ea353ec5d4c24a4449ceda6edfcc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-containers-component-annotations@2.2.0-18.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-interpolation-noarch", "name": "plexus-interpolation", "versionInfo": "1.27-18.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-interpolation-1.27-18.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND Apache-1.1 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4705c06b5fbfd263128020e4793cba14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-interpolation@1.27-18.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-sec-dispatcher-noarch", "name": "plexus-sec-dispatcher", "versionInfo": "2.0-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-sec-dispatcher-2.0-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8903ab2bb8e4d7777424ca0ad6c3409d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-sec-dispatcher@2.0-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-utils-noarch", "name": "plexus-utils", "versionInfo": "3.5.1-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-utils-3.5.1-26.fc44.noarch.rpm", "licenseDeclared": "Apache-1.1 AND Apache-2.0 AND xpp AND BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 26b442c05eeffefca09cd48c4f8a3fc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-utils@3.5.1-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-noarch", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bf26428f065424fee3e871b1ca1dfb69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-noarch", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3770c5ab4a851a9ca25915a7894f54c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-noarch", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-noarch", "name": "publicsuffix-list", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6d2c45dd0a145579643b8b5a47dbe37e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-noarch", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-noarch", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-noarch", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-javapackages-noarch", "name": "python3-javapackages", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-javapackages-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 3548fdaac08a2b434f1e132f1029b5e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-javapackages@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-noarch", "name": "python3-libs", "versionInfo": "3.14.7-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.7-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6d2b65364cc85799689099cf02c9c28e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-lxml-noarch", "name": "python3-lxml", "versionInfo": "6.1.1-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/p/python3-lxml-6.1.1-1.fc44.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-CMU AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 327f8c3a232a6f97a49c06ef931d1232"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-lxml@6.1.1-1.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-noarch", "name": "python3", "versionInfo": "3.14.7-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.7-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 880314b3581c817180ed5f0843897a38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-noarch", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-noarch", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-noarch", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: dad256ab45b2ff28db082647e11ab463"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-noarch", "name": "redhat-rpm-config", "versionInfo": "344-7.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-344-7.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9057eccff4e2b7a3cdf5cc4b9645508b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@344-7.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-noarch", "name": "rpm-build-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7b8006ab72d995ed9df2c603bafd4ba6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-noarch", "name": "rpm-build", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 55aafb3993eba97f35528cce9ac5d6c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-noarch", "name": "rpm-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a353e35a0b5f3fa4395d4450df788c6b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-noarch", "name": "rpm-plugin-selinux", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: e5636d0f7996ae59d14870b725d27b39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-noarch", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f8aaccff474ac2e0fb7c916a2869ae15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-noarch", "name": "rpm-sign-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4d84b318db5c5e865614398d432cb4be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-noarch", "name": "rpm", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a96976bd17319ce4d0ea0cfa2c16d793"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-noarch", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-noarch", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: a4c743d0bd5c5abe0e89da9d7acb245d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-noarch", "name": "selinux-policy-targeted", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7108297ff41d86cc219a9827586570e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-noarch", "name": "selinux-policy", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: ed31d3b586a0e9350f35005b7cef044f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-noarch", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-noarch", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 052953675603b8650e5d97c0f5faa6e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sisu-noarch", "name": "sisu", "versionInfo": "1:0.9.0~M3-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/s/sisu-0.9.0~M3-20.fc44.noarch.rpm", "licenseDeclared": "EPL-1.0 AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 4e91904462eac78765d47b37960e7aa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sisu@0.9.0~M3-20.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-slf4j-noarch", "name": "slf4j", "versionInfo": "1.7.36-19.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/s/slf4j-1.7.36-19.fc44.noarch.rpm", "licenseDeclared": "MIT AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 51d44615299eeb9aa462cfde8b1a12cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/slf4j@1.7.36-19.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-noarch", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b61e6927000756f1a7453e0ef6f79487"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-noarch", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c329708277b41fa5c79182b97dcd05ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-noarch", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-rpm-macros-261.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 787aadb981481eae0b75b1a0e8897e62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-noarch", "name": "systemd-shared", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-shared-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5db9ca8fa6c1f8d290eef7d9a109416d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-noarch", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1c7264a08531500bedc072ac1026a49f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-noarch", "name": "systemd", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 23fc880762b65a2cee0ec95528533e88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-noarch", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 2d9125f5ec73e194627aa82d115edf46"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tomcat-jakartaee-migration-noarch", "name": "tomcat-jakartaee-migration", "versionInfo": "1.0.9-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/t/tomcat-jakartaee-migration-1.0.9-9.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6a86de8b35fe9b8b69e0f9768f388384"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat-jakartaee-migration@1.0.9-9.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-noarch", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6e3945fdad8b17446f10429d0f919de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-noarch", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ttmkfdir-noarch", "name": "ttmkfdir", "versionInfo": "3.0.9-75.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/ttmkfdir-3.0.9-75.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 5ee459bd40632217d96101034db082da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ttmkfdir@3.0.9-75.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-java-noarch", "name": "tzdata-java", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-java-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: d9c2846961df5069696a40d2cbbd61f4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata-java@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-noarch", "name": "tzdata", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bb9d0cac51e578dbd6858d7a3f69451c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-noarch", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: bfc5ab20d40fbc285e5344ad03457851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-noarch", "name": "util-linux-core", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 84e33f372554bfe9eeecc0f0d179d6a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-noarch", "name": "util-linux", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9070d680ed21fd42e3b0e988c47e0cb4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-noarch", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 593fc46299e5b9f11865ad0a81def554"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xml-common-noarch", "name": "xml-common", "versionInfo": "0.6.3-69.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xml-common-0.6.3-69.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 01a29366200f28727135436c000f206b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xml-common@0.6.3-69.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-core-noarch", "name": "xmvn-core", "versionInfo": "4.3.0-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-core-4.3.0-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 6b8e81c9f0a3c8c41e5ca773f5450439"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-core@4.3.0-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-generator-noarch", "name": "xmvn-generator", "versionInfo": "2.1.1-7.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-generator-2.1.1-7.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 65f4aa1d2d41b808fd4d5ae56cc0d093"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-generator@2.1.1-7.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-tools-noarch", "name": "xmvn-tools", "versionInfo": "4.3.0-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-tools-4.3.0-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 9e8ca0e64eba864777edb2192e587324"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-tools@4.3.0-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xorg-x11-fonts-Type1-noarch", "name": "xorg-x11-fonts-Type1", "versionInfo": "7.5-43.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xorg-x11-fonts-Type1-7.5-43.hum1.noarch.rpm", "licenseDeclared": "HPND AND Adobe-Utopia AND Cronyx AND MIT AND Lucida-Bitmap-Fonts AND Bitstream-Charter AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: b4e2af302f24d3b88806b9db795c99c4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xorg-x11-fonts-Type1@7.5-43.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-noarch", "name": "xxhash-libs", "versionInfo": "0.8.3-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.3-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 8e8b69e91a6ab99c261f44d383efd2e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.3-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-noarch", "name": "xz-libs", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 40b31750471c626a59b9c50cf29d582a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-noarch", "name": "xz", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0de88d5dbb3bbc77301612e918495548"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-noarch", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-noarch", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-45.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: c96ff9d3553ddb968b19aad8fff223e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-noarch", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 1afc93af70228a741ab127580f779159"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-noarch", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:58Z", "comment": "sigmd5: 593ee2b10e36abc9883e112101c9b0aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"name": "rpm-extracted/tomcat11-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-21d79ae6def17dac", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-11.0.25-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v4"}]}, {"name": "actions/setup-java", "SPDXID": "SPDXRef-Package-github-action-actions-setup-java-098f94a3dc43ae7d", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-11.0.25-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-java@v4"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-68c7d7ad19e70248", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-11.0.25-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v4"}]}, {"name": "bug69623-lib", "SPDXID": "SPDXRef-Package-java-archive-bug69623-lib-289affb0b19714b7", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e8a6af25c4685190f7ba675fafc69fb2fc2fa996"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/webapp/WEB-INF/lib/bug69623-lib.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623-lib:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623-lib:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623_lib:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623_lib:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/bug69623-lib/bug69623-lib"}]}, {"name": "contextCopyXMLFalse", "SPDXID": "SPDXRef-Package-java-archive-contextCopyXMLFalse-44890f0012049f1e", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9039d1add9d30600c81b7788f3fd045ee6ab7590"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/deployment/contextCopyXMLFalse.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contextCopyXMLFalse:contextCopyXMLFalse:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/contextCopyXMLFalse/contextCopyXMLFalse"}]}, {"name": "contextCopyXMLTrue", "SPDXID": "SPDXRef-Package-java-archive-contextCopyXMLTrue-e58bcc8c13350f70", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c22b46c6f3ad8207499c982116ba0043b2dbb2f4"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/deployment/contextCopyXMLTrue.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contextCopyXMLTrue:contextCopyXMLTrue:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/contextCopyXMLTrue/contextCopyXMLTrue"}]}, {"name": "h2", "SPDXID": "SPDXRef-Package-java-archive-h2-13d7c9cb6245fe19", "versionInfo": "2.2.220", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:com.h2database:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:h2database:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:h2:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/com.h2database/h2@2.2.220"}]}, {"name": "junit", "SPDXID": "SPDXRef-Package-java-archive-junit-76543fe1617a1121", "versionInfo": "4.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:junit:junit:4.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/junit/junit@4.13.2"}]}, {"name": "non-static-resources", "SPDXID": "SPDXRef-Package-java-archive-non-static-resources-ce8c394f5c7e7f69", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9c9f9ae8e3c7643005e2e94e8a6606d9951bc067"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/webresources/non-static-resources.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static-resources:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static-resources:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static_resources:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static_resources:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/non-static-resources/non-static-resources"}]}, {"name": "resources", "SPDXID": "SPDXRef-Package-java-archive-resources-b6b9d84d0b40399f", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a562a3a4ab54005f0259c6e5b3cddee8e0672a18"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/webapp-fragments-empty-absolute-ordering/WEB-INF/lib/resources.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources:resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources/resources"}]}, {"name": "resources", "SPDXID": "SPDXRef-Package-java-archive-resources-3ea6e52b8d839dd8", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "997b6d7212a04d9fc595265bb21bb81640dba5be"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/webapp-fragments/WEB-INF/lib/resources.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources:resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources/resources"}]}, {"name": "resources2", "SPDXID": "SPDXRef-Package-java-archive-resources2-611d2c250da77a36", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "50b2cc3295cd23238a94711fe472c16ecf83611e"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/webapp-fragments/WEB-INF/lib/resources2.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources2:resources2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources2/resources2"}]}, {"name": "rsrc", "SPDXID": "SPDXRef-Package-java-archive-rsrc-ec8914c51358c6ea", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "f9389bf571d4e9b2cf7ad92380929aa9c9941e86"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/test/webapp-virtual-webapp/src/main/webapp-a/WEB-INF/lib/rsrc.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rsrc:rsrc:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/rsrc/rsrc"}]}, {"name": "sample", "SPDXID": "SPDXRef-Package-java-archive-sample-2ef7afaa4376f5f1", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "8750f6b7a3a67488ca591dd32811e4e985e2613f"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/webapps/docs/appdev/sample/sample.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sample:sample:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/sample/sample"}]}, {"name": "taglibs-standard-impl", "SPDXID": "SPDXRef-Package-java-archive-taglibs-standard-impl-10b262c65d115769", "versionInfo": "1.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "6bc6265f361f8efd5f1fb230073983e2d2495cec"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/webapps/examples/WEB-INF/lib/taglibs-standard-impl-1.2.5-migrated-0.0.1.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-http---www.apache.org-licenses-LICENSE-2.0.txt", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs-standard-impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs_standard_impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:standard-impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:standard_impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.taglibs/taglibs-standard-impl@1.2.5"}]}, {"name": "taglibs-standard-spec", "SPDXID": "SPDXRef-Package-java-archive-taglibs-standard-spec-8dd5e156b791739e", "versionInfo": "1.2.5", "supplier": "Organization: Sun Microsystems, Inc.", "originator": "Organization: Sun Microsystems, Inc.", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a8dda6f938e91e18d47a6cb8593167222ba6abea"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/webapps/examples/WEB-INF/lib/taglibs-standard-spec-1.2.5-migrated-0.0.1.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-http---www.apache.org-licenses-LICENSE-2.0.txt", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs-standard-spec:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs_standard_spec:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.taglibs/taglibs-standard-spec@1.2.5"}]}, {"name": "tomcat-dbcp", "SPDXID": "SPDXRef-Package-java-archive-tomcat-dbcp-214bd616da520257", "versionInfo": "11.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-dbcp:11.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_dbcp:11.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-dbcp@11.0.5"}]}, {"name": "tomcat-jdbc", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "versionInfo": "1.1.0-SNAPSHOT", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jdbc:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jdbc:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@1.1.0-SNAPSHOT"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-06263fa183dbcaef", "versionInfo": "11.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-11.0.25-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:11.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:11.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@11.0.5"}]}, {"name": "rpm-extracted/tomcat11-11.0.25-0.2.hum1.src", "SPDXID": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat11-admin-webapps-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-admin-webapps-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "bootstrap", "SPDXID": "SPDXRef-Package-java-archive-bootstrap-a244c0ebf20e18f8", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c76a7867eb9435d4d9e7bf19ab4ccc9a82952085"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/tomcat/bin/bootstrap.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:Bootstrap:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:bootstrap:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:catalina:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:startup:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.catalina.startup.Bootstrap/bootstrap@11.0.25"}]}, {"name": "tomcat-bootstrap", "SPDXID": "SPDXRef-Package-java-archive-tomcat-bootstrap-7b6c2ba5ee56bf77", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c76a7867eb9435d4d9e7bf19ab4ccc9a82952085"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-bootstrap.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-bootstrap:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_bootstrap:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:Bootstrap:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:catalina:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:startup:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.catalina.startup.Bootstrap/tomcat-bootstrap@11.0.25"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-979d5c96cf828f46", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "79d6919a14b09c1bf504409a0caedc9b2426972e"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-juli.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@11.0.25"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-b36f328a4e70a2c8", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "79d6919a14b09c1bf504409a0caedc9b2426972e"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/tomcat/bin/tomcat-juli.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@11.0.25"}]}, {"name": "rpm-extracted/tomcat11-common-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat11-docs-webapp-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-docs-webapp-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "el-api", "SPDXID": "SPDXRef-Package-java-archive-el-api-64c4dd504ce896c3", "versionInfo": "6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "b06e541949e65b6884d51cf2700ed53f4c435129"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/el-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el-api:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el-api:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el_api:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el_api:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el:el-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el:el_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/el-api/el-api@6.0"}]}, {"name": "rpm-extracted/tomcat11-el-6.0-api-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-el-6.0-api-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "jsp-api", "SPDXID": "SPDXRef-Package-java-archive-jsp-api-fd0c269642dae361", "versionInfo": "4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e4298d5a88fd15b63b79c97bc2f3f1d784a574aa"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jsp-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp-api:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp-api:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp_api:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp_api:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp:jsp-api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp:jsp_api:4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jsp-api/jsp-api@4.0"}]}, {"name": "rpm-extracted/tomcat11-jsp-4.0-api-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-jsp-4.0-api-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "annotations-api", "SPDXID": "SPDXRef-Package-java-archive-annotations-api-4dd59f0a84ca7d38", "versionInfo": "3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "b808b95f6d9d24ac0a37468247a395865563135b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/annotations-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations-api:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations-api:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations_api:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations_api:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations:annotations-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations:annotations_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/annotations-api/annotations-api@3.0"}]}, {"name": "catalina", "SPDXID": "SPDXRef-Package-java-archive-catalina-ae9532e314b33614", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "7a22a8171534a699f0a3f1f3654d986990049497"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina/catalina@11.0.25"}]}, {"name": "catalina-ant", "SPDXID": "SPDXRef-Package-java-archive-catalina-ant-0958de8a95246c66", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "d77d9514f9367916d520430b13bb72bea403d14b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ant.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ant:catalina-ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ant:catalina_ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ant:catalina-ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ant:catalina_ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ant:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ant/catalina-ant@11.0.25"}]}, {"name": "catalina-ha", "SPDXID": "SPDXRef-Package-java-archive-catalina-ha-f5f2839ba5f3ccd6", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "715bb36d47ed3894e59469f9e727667bcbd405bb"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ha.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ha:catalina-ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ha:catalina_ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ha:catalina-ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ha:catalina_ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ha:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ha/catalina-ha@11.0.25"}]}, {"name": "catalina-ssi", "SPDXID": "SPDXRef-Package-java-archive-catalina-ssi-ca16f333b032c528", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "6269789deebe4ecb5fc55c678785b574458b2348"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ssi.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ssi:catalina-ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ssi:catalina_ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ssi:catalina-ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ssi:catalina_ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ssi:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ssi/catalina-ssi@11.0.25"}]}, {"name": "catalina-storeconfig", "SPDXID": "SPDXRef-Package-java-archive-catalina-storeconfig-ce48cef0f9581a4a", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "25250e84ca1f963d93aba4b0fa774290ea698fb1"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-storeconfig.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-storeconfig:catalina-storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-storeconfig:catalina_storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_storeconfig:catalina-storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_storeconfig:catalina_storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_storeconfig:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-storeconfig/catalina-storeconfig@11.0.25"}]}, {"name": "catalina-tribes", "SPDXID": "SPDXRef-Package-java-archive-catalina-tribes-29820452c616e938", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "7f126b8f588e302806c822f9dfb7dd6096cd2cd7"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-tribes.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-tribes:catalina-tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-tribes:catalina_tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_tribes:catalina-tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_tribes:catalina_tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_tribes:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-tribes/catalina-tribes@11.0.25"}]}, {"name": "jasper", "SPDXID": "SPDXRef-Package-java-archive-jasper-74a661d56aef6dfa", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "0c529a0b92d5acc230d31eb65c3d55b294a037ed"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jasper.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jasper/jasper@11.0.25"}]}, {"name": "jasper-el", "SPDXID": "SPDXRef-Package-java-archive-jasper-el-72417d8f0c389ae6", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "35674c869e8b249f558aee8d17e98942865f774b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jasper-el.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper-el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper_el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper-el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper_el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper-el:jasper-el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper-el:jasper_el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper_el:jasper-el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper_el:jasper_el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper-el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper_el:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jasper-el/jasper-el@11.0.25"}]}, {"name": "jaspic-api", "SPDXID": "SPDXRef-Package-java-archive-jaspic-api-4871d99da753163f", "versionInfo": "3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "b6619f9e995cd7a4da9a801593f141f988284324"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jaspic-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic-api:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic-api:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic_api:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic_api:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic:jaspic-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic:jaspic_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jaspic-api/jaspic-api@3.1"}]}, {"name": "tomcat-api", "SPDXID": "SPDXRef-Package-java-archive-tomcat-api-a9c090cd30b0cb64", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "3fcbcda1684d44bc3c979d9ea67f155f3d284833"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-api:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_api:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@11.0.25"}]}, {"name": "tomcat-coyote", "SPDXID": "SPDXRef-Package-java-archive-tomcat-coyote-ab0f24d02dedbea3", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "15f362ac239157926c8c41891a531ad6b1091e88"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-coyote.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-coyote:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_coyote:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.25"}]}, {"name": "tomcat-coyote-ffm", "SPDXID": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-b5b6b7772dd2ad18", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "5df1fc59bdf160ae9887f6ec2214156f8787874b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-coyote-ffm.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote-ffm:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote-ffm:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote_ffm:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote_ffm:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat:tomcat-coyote-ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat:tomcat_coyote_ffm:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/tomcat-coyote-ffm/tomcat-coyote-ffm@11.0.25"}]}, {"name": "tomcat-dbcp", "SPDXID": "SPDXRef-Package-java-archive-tomcat-dbcp-7b3c465af0aca5e1", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "3e7d52b9156b6fa8b987db7107e19d9b5ffdd817"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-dbcp.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-dbcp:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_dbcp:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-dbcp@11.0.25"}]}, {"name": "tomcat-jdbc", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jdbc-0c09a4a57339e6f6", "versionInfo": "11.0.25", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "df9c780dc338a605241f64b5c1071238d2f05c5d"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-jdbc.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jdbc:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jdbc:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@11.0.25"}]}, {"name": "tomcat-jni", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jni-04661eb1b881a8e7", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "668ce11609eae533831db51c42003b77f3486f4b"}], "sourceInfo": "acquired package info from installed java archive: /usr/lib/java/tomcat/tomcat-jni.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jni:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jni:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@11.0.25"}]}, {"name": "tomcat-util", "SPDXID": "SPDXRef-Package-java-archive-tomcat-util-fdc9a23455acff8a", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "fea270abdfa3f6c9eaf61092e8ec2f913296b2a4"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-util.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-util:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_util:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@11.0.25"}]}, {"name": "tomcat-util-scan", "SPDXID": "SPDXRef-Package-java-archive-tomcat-util-scan-d7aed51422501432", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "fb7aa8e3e150874dfae01fb2fc0a39cbd0d9c7e1"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-util-scan.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-util-scan:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_util_scan:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@11.0.25"}]}, {"name": "tomcat-websocket", "SPDXID": "SPDXRef-Package-java-archive-tomcat-websocket-1367316b29c2159d", "versionInfo": "11.0.25", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e64b4c3c3a4b410f804ae73051569a84052d0b14"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-websocket.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-websocket:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_websocket:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:11.0.25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@11.0.25"}]}, {"name": "websocket-api", "SPDXID": "SPDXRef-Package-java-archive-websocket-api-3044c0d537bd2962", "versionInfo": "@version@", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "bbb342b4a96cab35b36a4224c133b05296d3fe85"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/websocket-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-api:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-api:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_api:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_api:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/websocket-api/websocket-api@%40version%40"}]}, {"name": "websocket-client-api", "SPDXID": "SPDXRef-Package-java-archive-websocket-client-api-ba918186c5603f7e", "versionInfo": "@version@", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "43b14575eb3392df0e29f27c12892f1be3b25f75"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/websocket-client-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client-api:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client-api:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client_api:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client_api:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/websocket-client-api/websocket-client-api@%40version%40"}]}, {"name": "rpm-extracted/tomcat11-lib-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "servlet-api", "SPDXID": "SPDXRef-Package-java-archive-servlet-api-c0dce25bd5afc8e3", "versionInfo": "6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "df8e6769e582dfd46b9eba9952cc30543e7b6ddd"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/servlet-api.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND EPL-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet-api:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet-api:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet_api:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet_api:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet:servlet-api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet:servlet_api:6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/servlet-api/servlet-api@6.1"}]}, {"name": "rpm-extracted/tomcat11-servlet-6.1-api-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-servlet-6.1-api-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat11-user-instance-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-user-instance-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat11-webapps-11.0.25-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat11-webapps-11.0.25-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "apache-tomcat-11.0.25-src/.github/workflows/ci.yml", "SPDXID": "SPDXRef-File-....github-workflows-ci.yml-d99b91cab511fb60", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3540a4da0e753f43581598d4309a0fe344aa55b4"}, {"algorithm": "SHA256", "checksumValue": "fc25dba45c61ea9d91cefb3a2fd1c0fa598b271eb52f225f9f44a5c6a9287c3e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/modules/jdbc-pool/pom.xml", "SPDXID": "SPDXRef-File-...modules-jdbc-pool-pom.xml-a913233c2ef56f87", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "dd20b4664d87cbf8c8f1a4c76b6ec67d55672de6"}, {"algorithm": "SHA256", "checksumValue": "abaaae78d10ec8b73692e86739e70ff64cb71473d4d5d81ab0e037dde67a749d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/broken.war", "SPDXID": "SPDXRef-File-...test-deployment-broken.war-374ceccacacba2c5", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/context.jar", "SPDXID": "SPDXRef-File-...test-deployment-context.jar-601a0666804b38e0", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/context.war", "SPDXID": "SPDXRef-File-...test-deployment-context.war-befd89acf9b5e972", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/contextCopyXMLFalse.war", "SPDXID": "SPDXRef-File-...deployment-contextCopyXMLFalse.war-2b1bd3563f605b5e", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9039d1add9d30600c81b7788f3fd045ee6ab7590"}, {"algorithm": "SHA256", "checksumValue": "ee6c6b9f7ae1b5005cdfe3f0570cd8410b1a52176e40af48db1feeb8ec44e3ba"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/contextCopyXMLTrue.war", "SPDXID": "SPDXRef-File-...test-deployment-contextCopyXMLTrue.war-3724284d2591b355", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c22b46c6f3ad8207499c982116ba0043b2dbb2f4"}, {"algorithm": "SHA256", "checksumValue": "a50f2fb9a0e5fa0a2ad47dbbe78671455dd3cce591991c13e69610eb136d7b86"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/contextUnpackWARFalse.war", "SPDXID": "SPDXRef-File-...deployment-contextUnpackWARFalse.war-4ce64394decdac62", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/contextUnpackWARTrue.war", "SPDXID": "SPDXRef-File-...deployment-contextUnpackWARTrue.war-f8103c307873528f", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/dir with spaces/context.jar", "SPDXID": "SPDXRef-File-...deployment-dir-with-spaces-context.jar-c2864f6739af5b88", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/dir with spaces/context.war", "SPDXID": "SPDXRef-File-...deployment-dir-with-spaces-context.war-e049c1de41ac9ce7", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/deployment/noContext.war", "SPDXID": "SPDXRef-File-...test-deployment-noContext.war-d355b5f76152892f", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp-fragments-empty-absolute-ordering/WEB-INF/lib/resources.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources.jar-357dea79bc12a068", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a562a3a4ab54005f0259c6e5b3cddee8e0672a18"}, {"algorithm": "SHA256", "checksumValue": "25917eeb22376c679e2fd8eb0aadd0b0e8441b2869c394c7bd3cb9de4ae8128b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp-fragments/WEB-INF/lib/resources.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources.jar-6af80470aee81a4b", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "997b6d7212a04d9fc595265bb21bb81640dba5be"}, {"algorithm": "SHA256", "checksumValue": "796fcef4c6b0e8dc3a8a9bc0a7970a3acf9ef8d54ad53a3c8daed0d0b03bdd53"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp-fragments/WEB-INF/lib/resources2.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources2.jar-ee12f0db5613d906", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "50b2cc3295cd23238a94711fe472c16ecf83611e"}, {"algorithm": "SHA256", "checksumValue": "3684638824a5cafc0aa9bdae1812e9120a867f2103ebce051ba2043120cc23de"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp-virtual-webapp/src/main/webapp-a/WEB-INF/lib/rsrc.jar", "SPDXID": "SPDXRef-File-...src-main-webapp-a-WEB-INF-lib-rsrc.jar-23485f93b2b168e3", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f9389bf571d4e9b2cf7ad92380929aa9c9941e86"}, {"algorithm": "SHA256", "checksumValue": "2e9e02e8a7688627091d600c62095ff7777cb0e61488df74a37fad7d590bc909"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp/WEB-INF/lib/bug69135-lib.jar", "SPDXID": "SPDXRef-File-...webapp-WEB-INF-lib-bug69135-lib.jar-d715bf2aa051aa73", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp/WEB-INF/lib/bug69623-lib.jar", "SPDXID": "SPDXRef-File-...webapp-WEB-INF-lib-bug69623-lib.jar-e2b3159385a54ec5", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e8a6af25c4685190f7ba675fafc69fb2fc2fa996"}, {"algorithm": "SHA256", "checksumValue": "2f9c89cd47816c1661c5d12aeeb92e9999946b7bb66d9c294414015d334b84f0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webapp/WEB-INF/lib/test-lib.jar", "SPDXID": "SPDXRef-File-...test-webapp-WEB-INF-lib-test-lib.jar-8be38990186a452e", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webresources/dir1-internal.jar", "SPDXID": "SPDXRef-File-...test-webresources-dir1-internal.jar-1fc8e8cdceed9fba", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webresources/dir1.jar", "SPDXID": "SPDXRef-File-...test-webresources-dir1.jar-0563af6e95b58219", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webresources/non-static-resources.jar", "SPDXID": "SPDXRef-File-...webresources-non-static-resources.jar-499dcca2a1ae2771", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9c9f9ae8e3c7643005e2e94e8a6606d9951bc067"}, {"algorithm": "SHA256", "checksumValue": "f594fc2c53fd0a529ef4244ada35950db3743f020b5a3115c4b0499d5208c770"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webresources/static-resources.jar", "SPDXID": "SPDXRef-File-...test-webresources-static-resources.jar-492a931d5a62e30f", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/test/webresources/war-url-connection.war", "SPDXID": "SPDXRef-File-...webresources-war-url-connection.war-dd582daccc4d75fd", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/webapps/docs/appdev/sample/sample.war", "SPDXID": "SPDXRef-File-...webapps-docs-appdev-sample-sample.war-b07f4079d9ee1b42", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8750f6b7a3a67488ca591dd32811e4e985e2613f"}, {"algorithm": "SHA256", "checksumValue": "3542637cdc55b620e7392e27d394d8d462245facd51c1182802f2185c61b7c7a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/webapps/examples/WEB-INF/lib/taglibs-standard-impl-1.2.5-migrated-0.0.1.jar", "SPDXID": "SPDXRef-File-...taglibs-standard-impl-1.2.5-migrated-0.0.1.jar-c473415764dae80c", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "6bc6265f361f8efd5f1fb230073983e2d2495cec"}, {"algorithm": "SHA256", "checksumValue": "1141c62a014ac1378079876f2c021ecd3b31d6021c6ef856e660d0b49188bbe2"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-11.0.25-src/webapps/examples/WEB-INF/lib/taglibs-standard-spec-1.2.5-migrated-0.0.1.jar", "SPDXID": "SPDXRef-File-...taglibs-standard-spec-1.2.5-migrated-0.0.1.jar-e5f8df83ae41a62a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a8dda6f938e91e18d47a6cb8593167222ba6abea"}, {"algorithm": "SHA256", "checksumValue": "71e6120f2f8a72a3cbecb4005732eda144ec658179c0c6c85336d9f6a37e451d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-bootstrap.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-bootstrap.jar-aea989a49e36782a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c76a7867eb9435d4d9e7bf19ab4ccc9a82952085"}, {"algorithm": "SHA256", "checksumValue": "53f7c624cb58d4fd7d0aa4a56b14e87d5dc4c1ba4b21ee8d78eade9c864cca19"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-juli.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-juli.jar-043a8705bb34f592", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "79d6919a14b09c1bf504409a0caedc9b2426972e"}, {"algorithm": "SHA256", "checksumValue": "293523c67d337b69f4e40be38f972053ce2fa369edac3d282a95dc19750e0780"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/tomcat/bin/bootstrap.jar", "SPDXID": "SPDXRef-File-usr-share-tomcat-bin-bootstrap.jar-952a89156eaa2427", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c76a7867eb9435d4d9e7bf19ab4ccc9a82952085"}, {"algorithm": "SHA256", "checksumValue": "53f7c624cb58d4fd7d0aa4a56b14e87d5dc4c1ba4b21ee8d78eade9c864cca19"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/tomcat/bin/tomcat-juli.jar", "SPDXID": "SPDXRef-File-usr-share-tomcat-bin-tomcat-juli.jar-1e67646a3836a85a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "79d6919a14b09c1bf504409a0caedc9b2426972e"}, {"algorithm": "SHA256", "checksumValue": "293523c67d337b69f4e40be38f972053ce2fa369edac3d282a95dc19750e0780"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/el-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-el-api.jar-d5d18dd33cff5325", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b06e541949e65b6884d51cf2700ed53f4c435129"}, {"algorithm": "SHA256", "checksumValue": "b21dc5a8c3c966f6c8ac06c296ebbf5e0165c7a8864ab794da25a511ec3a66c1"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jsp-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jsp-api.jar-a6da8ca661e1c706", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e4298d5a88fd15b63b79c97bc2f3f1d784a574aa"}, {"algorithm": "SHA256", "checksumValue": "654106e621269e194a1deeac247c033ad9ed574bf97274108c9baae0f05d5ba3"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/java/tomcat/tomcat-jni.jar", "SPDXID": "SPDXRef-File-usr-lib-java-tomcat-tomcat-jni.jar-be91b41af23856c1", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "668ce11609eae533831db51c42003b77f3486f4b"}, {"algorithm": "SHA256", "checksumValue": "81a98a15d42cac26bf55c570abab455dc16ab04bf7aa83f363735ab04c83550a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/annotations-api.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-annotations-api.jar-fd9680d872b55a73", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b808b95f6d9d24ac0a37468247a395865563135b"}, {"algorithm": "SHA256", "checksumValue": "9cc1cb894ca6b079c422e762dea85a8822dda7ab036dc9e4099a2a32a3b8dceb"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ant.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ant.jar-ff69ae2b0c51697f", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d77d9514f9367916d520430b13bb72bea403d14b"}, {"algorithm": "SHA256", "checksumValue": "c6b805d8cffcdcc63c658a199be57e2cd536a2f586bf1452a1df681246d0c1a2"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ha.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ha.jar-a39521fd69c6240c", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "715bb36d47ed3894e59469f9e727667bcbd405bb"}, {"algorithm": "SHA256", "checksumValue": "7a03ddac69a20720244b5cf5fbdd1680fc93fa2f2a664d59163eca5300a11dd6"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ssi.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ssi.jar-862e93bbf2f3bf2a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "6269789deebe4ecb5fc55c678785b574458b2348"}, {"algorithm": "SHA256", "checksumValue": "4d659df4d431a40c4c8d2c04a0a59bfaca05a5bff15974ff013891b53697adde"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-storeconfig.jar", "SPDXID": "SPDXRef-File-...java-tomcat-catalina-storeconfig.jar-ec2c047fa9aa1f1f", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "25250e84ca1f963d93aba4b0fa774290ea698fb1"}, {"algorithm": "SHA256", "checksumValue": "79de9d23147c2965a945a487790a715dce0e51cf60d25bb95fe9ddc5ed81f91f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-tribes.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-catalina-tribes.jar-b2df8116e37bccb8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7f126b8f588e302806c822f9dfb7dd6096cd2cd7"}, {"algorithm": "SHA256", "checksumValue": "5e4be2b9a8d03a42e17d0f0bd3d47ca8294ccae0798eef726c1993ef0b0d4991"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina.jar-034d7b6716d0ccff", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7a22a8171534a699f0a3f1f3654d986990049497"}, {"algorithm": "SHA256", "checksumValue": "09a6674399188d9710cd549ccfcb8b9380d3d98a38e0cae9bdd0417358a14a34"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jasper-el.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jasper-el.jar-19d2030cc7375316", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "35674c869e8b249f558aee8d17e98942865f774b"}, {"algorithm": "SHA256", "checksumValue": "4b04137c72f5f85b58fc31195a245f75b39ed76308832b55797e3777cf3b5903"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jasper.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jasper.jar-6d0de32f6beca482", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0c529a0b92d5acc230d31eb65c3d55b294a037ed"}, {"algorithm": "SHA256", "checksumValue": "ee0b3d9d206cfc44dd0aa36c7436f451cfc1199647f8ddf8dc47882a580f015c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jaspic-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jaspic-api.jar-7a64fe92313bccbd", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b6619f9e995cd7a4da9a801593f141f988284324"}, {"algorithm": "SHA256", "checksumValue": "3756a79f74f28657168d0e5fa6d048e8258c91d605fcf69d3898716ca1cab950"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-api.jar-b02d819220590f77", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3fcbcda1684d44bc3c979d9ea67f155f3d284833"}, {"algorithm": "SHA256", "checksumValue": "ea3ff663e888e4e425a34c0cae4efea008712d941151eb71dae2b60439421de3"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-coyote-ffm.jar", "SPDXID": "SPDXRef-File-...java-tomcat-tomcat-coyote-ffm.jar-a8ab2a878433afc8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "5df1fc59bdf160ae9887f6ec2214156f8787874b"}, {"algorithm": "SHA256", "checksumValue": "234a5c67dd404c1649f93e41fdda0a45bdf247f281cd86346163c1a1798b0ae2"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-coyote.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-coyote.jar-6528be9f9b106a2b", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "15f362ac239157926c8c41891a531ad6b1091e88"}, {"algorithm": "SHA256", "checksumValue": "8f94438f69498e873bc5e18f480c96426efffc91ec7cbf66e0c627bf129ce4bf"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-dbcp.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-dbcp.jar-21034eb8058aa3f8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3e7d52b9156b6fa8b987db7107e19d9b5ffdd817"}, {"algorithm": "SHA256", "checksumValue": "37061261b6659f24f7d5d22e6480efcd9a8f5c913a5873cf667ed35a76ff7c36"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-jdbc.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-jdbc.jar-5c33a7866c1dae2b", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "df9c780dc338a605241f64b5c1071238d2f05c5d"}, {"algorithm": "SHA256", "checksumValue": "30317ac37e705ae9202754219fa28eb3d74cdeb2f5db579a4b9ccd926c26f896"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-util-scan.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-util-scan.jar-31a83ff99e772c28", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "fb7aa8e3e150874dfae01fb2fc0a39cbd0d9c7e1"}, {"algorithm": "SHA256", "checksumValue": "34782e6233ad41fd3fd029009abeae4a800c85e058a949d86d744fb082ff8b9a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-util.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-util.jar-61f49d936bd02154", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "fea270abdfa3f6c9eaf61092e8ec2f913296b2a4"}, {"algorithm": "SHA256", "checksumValue": "38a8216d0ae76c9c352adf314981f88106418232aa04a1e12d5f001ed5432db5"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-websocket.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-websocket.jar-d319cb8c335d7a24", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e64b4c3c3a4b410f804ae73051569a84052d0b14"}, {"algorithm": "SHA256", "checksumValue": "2763b0e6a2afd432e547a3f4bddb3fc8df010b6b4ffe3c06e7c477998311388e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/websocket-api.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-websocket-api.jar-7c35fd5ec66f39da", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "bbb342b4a96cab35b36a4224c133b05296d3fe85"}, {"algorithm": "SHA256", "checksumValue": "bb03f626fb87734b440c45e2bae1d33897006967f143073ec809bdfc825e6c0c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/websocket-client-api.jar", "SPDXID": "SPDXRef-File-...java-tomcat-websocket-client-api.jar-d7a4289eb44ab112", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "43b14575eb3392df0e29f27c12892f1be3b25f75"}, {"algorithm": "SHA256", "checksumValue": "9f6470f9c652893a4f8e89a79b77c40d8d91a3acaf84fe4ebc6f95fa46dca28f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/servlet-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-servlet-api.jar-a710bf3856e24adb", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "df8e6769e582dfd46b9eba9952cc30543e7b6ddd"}, {"algorithm": "SHA256", "checksumValue": "b1f8662625b8995f824962aa984d846870f86509f5a66df03172ae1de12949c8"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-admin-webapps", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-common", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-docs-webapp", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-el-6.0-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-jsp-4.0-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-lib", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-servlet-6.1-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-user-instance", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-webapps", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source3"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source4"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source5"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source6"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source7"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source8"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-abattis-cantarell-vf-fonts-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-lib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-openjdk25-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aopalliance-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-cli-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-codec-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-compress-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-io-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-lang3-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aqute-bndlib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aqute-bnd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bcel-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-beust-jcommander-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-default-fonts-core-sans-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dola-bsx-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ecj-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fontconfig-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-filesystem-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-freetype-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-gson-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-guice-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-noto-fonts-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-noto-sans-vf-fonts-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-guava-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-httpcomponents-client-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-httpcomponents-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jakarta-annotations-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jakarta-inject1.0-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansi-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-crypto-adapter-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-devel-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-headless-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-filesystem-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-local-openjdk25-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-tools-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jcl-over-slf4j-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jsr-305-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libX11-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libX11-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXau-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXcomposite-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXext-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXi-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXrender-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXtst-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfontenc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpng-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcb-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxslt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lksctp-tools-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lujavrite-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-lib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-resolver-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-shared-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-wagon-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mkfontscale-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nspr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-softokn-freebl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-softokn-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-sysinit-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-util-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-objectweb-asm-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-annotation-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-compendium-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-cipher-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-classworlds-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-containers-component-annotations-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-interpolation-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-sec-dispatcher-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-javapackages-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-lxml-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sisu-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-slf4j-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tomcat-jakartaee-migration-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ttmkfdir-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-java-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xml-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-generator-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-tools-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xorg-x11-fonts-Type1-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-admin-webapps"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-common"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-docs-webapp"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-el-6.0-api"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-jsp-4.0-api"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-lib"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-servlet-6.1-api"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-user-instance"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat11-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat11-webapps"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-06263fa183dbcaef", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-h2-13d7c9cb6245fe19", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-214bd616da520257", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-junit-76543fe1617a1121", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-06263fa183dbcaef", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-a913233c2ef56f87", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-java-098f94a3dc43ae7d", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-d99b91cab511fb60", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-taglibs-standard-impl-10b262c65d115769", "relatedSpdxElement": "SPDXRef-File-...taglibs-standard-impl-1.2.5-migrated-0.0.1.jar-c473415764dae80c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-h2-13d7c9cb6245fe19", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-a913233c2ef56f87", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-214bd616da520257", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-a913233c2ef56f87", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-21d79ae6def17dac", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-d99b91cab511fb60", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-bug69623-lib-289affb0b19714b7", "relatedSpdxElement": "SPDXRef-File-...webapp-WEB-INF-lib-bug69623-lib.jar-e2b3159385a54ec5", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-sample-2ef7afaa4376f5f1", "relatedSpdxElement": "SPDXRef-File-...webapps-docs-appdev-sample-sample.war-b07f4079d9ee1b42", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources-3ea6e52b8d839dd8", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources.jar-6af80470aee81a4b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-contextCopyXMLFalse-44890f0012049f1e", "relatedSpdxElement": "SPDXRef-File-...deployment-contextCopyXMLFalse.war-2b1bd3563f605b5e", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-a913233c2ef56f87", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources2-611d2c250da77a36", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources2.jar-ee12f0db5613d906", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-68c7d7ad19e70248", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-d99b91cab511fb60", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-junit-76543fe1617a1121", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-a913233c2ef56f87", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-taglibs-standard-spec-8dd5e156b791739e", "relatedSpdxElement": "SPDXRef-File-...taglibs-standard-spec-1.2.5-migrated-0.0.1.jar-e5f8df83ae41a62a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources-b6b9d84d0b40399f", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources.jar-357dea79bc12a068", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-non-static-resources-ce8c394f5c7e7f69", "relatedSpdxElement": "SPDXRef-File-...webresources-non-static-resources.jar-499dcca2a1ae2771", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-contextCopyXMLTrue-e58bcc8c13350f70", "relatedSpdxElement": "SPDXRef-File-...test-deployment-contextCopyXMLTrue.war-3724284d2591b355", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-rsrc-ec8914c51358c6ea", "relatedSpdxElement": "SPDXRef-File-...src-main-webapp-a-WEB-INF-lib-rsrc.jar-23485f93b2b168e3", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-21d79ae6def17dac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-java-098f94a3dc43ae7d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-68c7d7ad19e70248", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-bug69623-lib-289affb0b19714b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-contextCopyXMLFalse-44890f0012049f1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-contextCopyXMLTrue-e58bcc8c13350f70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-h2-13d7c9cb6245fe19", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-junit-76543fe1617a1121", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-non-static-resources-ce8c394f5c7e7f69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources-b6b9d84d0b40399f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources-3ea6e52b8d839dd8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources2-611d2c250da77a36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-rsrc-ec8914c51358c6ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-sample-2ef7afaa4376f5f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-taglibs-standard-impl-10b262c65d115769", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-taglibs-standard-spec-8dd5e156b791739e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-dbcp-214bd616da520257", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-6039f0662e1c3e6a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-06263fa183dbcaef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-11.0.25-0.2.hum1.src"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-admin-webapps-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-admin-webapps", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-admin-webapps-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-bootstrap-7b6c2ba5ee56bf77", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-bootstrap.jar-aea989a49e36782a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-979d5c96cf828f46", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-juli.jar-043a8705bb34f592", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-bootstrap-a244c0ebf20e18f8", "relatedSpdxElement": "SPDXRef-File-usr-share-tomcat-bin-bootstrap.jar-952a89156eaa2427", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-b36f328a4e70a2c8", "relatedSpdxElement": "SPDXRef-File-usr-share-tomcat-bin-tomcat-juli.jar-1e67646a3836a85a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-bootstrap-a244c0ebf20e18f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-bootstrap-7b6c2ba5ee56bf77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-979d5c96cf828f46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-b36f328a4e70a2c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-common", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-common-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-docs-webapp-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-docs-webapp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-docs-webapp-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-el-api-64c4dd504ce896c3", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-el-api.jar-d5d18dd33cff5325", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-el-6.0-api-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-el-api-64c4dd504ce896c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-el-6.0-api-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-el-6.0-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-el-6.0-api-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-jsp-api-fd0c269642dae361", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jsp-api.jar-a6da8ca661e1c706", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-jsp-4.0-api-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jsp-api-fd0c269642dae361", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-jsp-4.0-api-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-jsp-4.0-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-jsp-4.0-api-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jni-04661eb1b881a8e7", "relatedSpdxElement": "SPDXRef-File-usr-lib-java-tomcat-tomcat-jni.jar-be91b41af23856c1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ant-0958de8a95246c66", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ant.jar-ff69ae2b0c51697f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jdbc-0c09a4a57339e6f6", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-jdbc.jar-5c33a7866c1dae2b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-websocket-1367316b29c2159d", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-websocket.jar-d319cb8c335d7a24", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-tribes-29820452c616e938", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-catalina-tribes.jar-b2df8116e37bccb8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-websocket-api-3044c0d537bd2962", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-websocket-api.jar-7c35fd5ec66f39da", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jaspic-api-4871d99da753163f", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jaspic-api.jar-7a64fe92313bccbd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-annotations-api-4dd59f0a84ca7d38", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-annotations-api.jar-fd9680d872b55a73", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jasper-el-72417d8f0c389ae6", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jasper-el.jar-19d2030cc7375316", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jasper-74a661d56aef6dfa", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jasper.jar-6d0de32f6beca482", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-7b3c465af0aca5e1", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-dbcp.jar-21034eb8058aa3f8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-api-a9c090cd30b0cb64", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-api.jar-b02d819220590f77", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-coyote-ab0f24d02dedbea3", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-coyote.jar-6528be9f9b106a2b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ae9532e314b33614", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina.jar-034d7b6716d0ccff", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-b5b6b7772dd2ad18", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-tomcat-coyote-ffm.jar-a8ab2a878433afc8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-websocket-client-api-ba918186c5603f7e", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-websocket-client-api.jar-d7a4289eb44ab112", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ssi-ca16f333b032c528", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ssi.jar-862e93bbf2f3bf2a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-storeconfig-ce48cef0f9581a4a", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-catalina-storeconfig.jar-ec2c047fa9aa1f1f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-util-scan-d7aed51422501432", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-util-scan.jar-31a83ff99e772c28", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ha-f5f2839ba5f3ccd6", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ha.jar-a39521fd69c6240c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-util-fdc9a23455acff8a", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-util.jar-61f49d936bd02154", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-annotations-api-4dd59f0a84ca7d38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ae9532e314b33614", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ant-0958de8a95246c66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ha-f5f2839ba5f3ccd6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ssi-ca16f333b032c528", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-storeconfig-ce48cef0f9581a4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-tribes-29820452c616e938", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jasper-74a661d56aef6dfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jasper-el-72417d8f0c389ae6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jaspic-api-4871d99da753163f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-api-a9c090cd30b0cb64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-coyote-ab0f24d02dedbea3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-b5b6b7772dd2ad18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-dbcp-7b3c465af0aca5e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-0c09a4a57339e6f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jni-04661eb1b881a8e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-util-fdc9a23455acff8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-util-scan-d7aed51422501432", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-websocket-1367316b29c2159d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-websocket-api-3044c0d537bd2962", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-websocket-client-api-ba918186c5603f7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-lib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-lib-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-servlet-api-c0dce25bd5afc8e3", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-servlet-api.jar-a710bf3856e24adb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat11-servlet-6.1-api-11.0.25-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-servlet-api-c0dce25bd5afc8e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-servlet-6.1-api-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-servlet-6.1-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-servlet-6.1-api-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-user-instance-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-user-instance", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-user-instance-11.0.25-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-webapps-11.0.25-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat11-webapps", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat11-webapps-11.0.25-0.2.hum1.noarch"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-noarch-tomcat11", "SPDXRef-noarch-tomcat11-admin-webapps", "SPDXRef-noarch-tomcat11-common", "SPDXRef-noarch-tomcat11-docs-webapp", "SPDXRef-noarch-tomcat11-el-6.0-api", "SPDXRef-noarch-tomcat11-jsp-4.0-api", "SPDXRef-noarch-tomcat11-lib", "SPDXRef-noarch-tomcat11-servlet-6.1-api", "SPDXRef-noarch-tomcat11-user-instance", "SPDXRef-noarch-tomcat11-webapps"]}