{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-04-15T08:46:48Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "billing-v2.0.18",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-billing-v2.0.18-c895c69d-5067-43ac-8f92-e6075505ebbd",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-billing-2.0.18",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/billing@2.0.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "billing",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "2.0.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.2.13",
    "copyrightText" : "Copyright (c) 1999-2010, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.2.13/logback-classic-1.2.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3XkRFmw_IUbMpOTyQmPaSocEYh7bJH8V-PG_4GX07r8/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.2.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.2.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.2.13",
    "copyrightText" : "Copyright (c) 1999-2015, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.2.13/logback-core-1.2.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UwaHtENstqgWDAeWO3SrCrAFiw8hSiBdtiLN62sCkzo/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.2.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.2.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-core-http-netty-1.12.3",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright (c) Microsoft Corporation\nPortions Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-core-http-netty/1.12.3/azure-core-http-netty-1.12.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-7EacfscTu32Z2Ws3ktUm9anxR6nTAp2dWqSymCFPFI/azure-core-http-netty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-core-http-netty@1.12.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-core-http-netty",
    "versionInfo" : "1.12.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-core-1.30.0",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) Microsoft Corporation\nPortions Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-core/1.30.0/azure-core-1.30.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-core@1.30.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cNRERreW2w9IEa81-cKTLQJLmtRT8PR3oBLKZ3QqNJA/azure-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-core",
    "versionInfo" : "1.30.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-identity-1.5.3",
    "copyrightText" : "Copyright 2015 Jo Rabin\nCopyright (c) Microsoft Corporation\nCopyright (c) 2007 The Guava Authors\nCopyright (c) 2000 - 2021 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nPortions Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.\n\nAuthors: Chris Nokleberg; Jo Rabin; Keith Bottner; Microsoft Corporation; The Guava Authors; The Legion of the Bouncy Castle Inc.; VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-identity/1.5.3/azure-identity-1.5.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-identity@1.5.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hP8ud0ALUdyAcbREIW1c4eRAM_VIXqI_a2UAVA6M9SM/azure-identity-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-identity",
    "versionInfo" : "1.5.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.13.5",
    "copyrightText" : "Copyright (c) 2008 2016 http://fasterxml.com/ FasterXML\nCopyright (c) 2008 2018 http://fasterxml.com/ FasterXML\nCopyright (c) 2008 2019 http://fasterxml.com/ FasterXML\nCopyright (c) 2008 2020 http://fasterxml.com/ FasterXML\nCopyright (c) 2008 2021 http://fasterxml.com/ FasterXML\nCopyright (c) 2012 http://fasterxml.com/ FasterXML\nCopyright (c) 2012-2013 http://fasterxml.com/ FasterXML\nCopyright (c) 2014 2015 http://fasterxml.com/ FasterXML\nCopyright (c) 2014 http://fasterxml.com/ FasterXML\nCopyright (c) 2014-2015 http://fasterxml.com/ FasterXML\nCopyright (c) 2012 http://fasterxml.com fasterxml.com\nCopyright 2007-present the original author or authors\n\nAuthors: FasterXML; fasterxml.com; Pascal Gelinas",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.13.5/jackson-annotations-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA8ZsGwgUmSewh3D0ElkyWEPxv2VXQy3JoQxQ3iV7Vc/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.13.5",
    "copyrightText" : "Copyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.13.5/jackson-core-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/htQXfw6Q41QhJRB1tL1QjAU9589bUg6NWspV7YPGT8o/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.13.5",
    "copyrightText" : "Copyright 2007-present the original author or authors\n\nAuthors: a community of developers; crazylirui@gmail.com; lilei@venusgroup.com.cn; Ryan Heaton; Ryan Heaton http://json-schema.org/ JSON Schema; Tatu Saloranta; Tatu Saloranta (tatu.saloranta@iki.fi); zenglian@github.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.13.5/jackson-databind-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tHQpFHuKQve7-kHB6KvD4ADBo7tFz_SaTVJ-rsK6DlE/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-csv-2.13.5",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2012 FasterXML.com\nCopyright (c) Gerwin Klein, Steve Rowe, Regis Decamps, Google LLC\nCopyright (c) Tom Preston-Werner\nCopyright (c) 2017 http://fasterxml.com/ FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: CSV, Properties and YAML; FasterXML; FasterXML.com; Gerwin Klein, Steve Rowe, Regis Decamps, Google LLC.; Tatu Saloranta (tatu.saloranta@iki.fi); Tom Preston-Werner; a community of developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-csv/2.13.5/jackson-dataformat-csv-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lxiDEs4EQxOV6fVRRpb_rMf3voY3V9npx-hPrmPEkeQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.13.5",
    "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML\nCopyright (c) 2011 http://fasterxml.com fasterxml.com\nCopyright 2007-present the original author or authors\n\nAuthors: FasterXML; Pascal Gelinas; Tatu Saloranta (tatu.saloranta@iki.fi); a community of developers; fasterxml.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.13.5/jackson-dataformat-xml-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SMxf7K9qWIZ1ilC30_JAdMhiKjkvbnaNTJE5lyaC_Qg/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformat-xml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.13.5",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML\nCopyright (c) 2020 http://fasterxml.com/ FasterXML\nCopyright (c) 2020 http://fasterxml.com/> FasterXML\nCopyright (c) 2021 http://fasterxml.com/ FasterXML\nCopyright (c) 2021 http://fasterxml.com/> FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: bertwin@github.com; FasterXML; FasterXML.com; Lovro Pandzic; Nick Williams; Nick Williams, Tatu Saloranta; Nick Williams, Zoltan Kiss; Tatu Saloranta; Zoltan Kiss",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.13.5/jackson-datatype-jdk8-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6cAl9qOXVK_TeMjBx8rtpWEYCAPWWMOjcuGyQwjWxoQ/jackson-datatype-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.13.5",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.13.5/jackson-datatype-jsr310-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cChJ4yBqPTrVu4v5u0W7cC5qsnyoJhSXqINqW1Rsqw8/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.13.5",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML\nCopyright (c) 2020 http://fasterxml.com/ FasterXML\nCopyright (c) 2020 http://fasterxml.com/> FasterXML\nCopyright (c) 2021 http://fasterxml.com/ FasterXML\nCopyright (c) 2021 http://fasterxml.com/> FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: bertwin@github.com; FasterXML; FasterXML.com; Lovro Pandzic; Nick Williams; Nick Williams, Tatu Saloranta; Nick Williams, Zoltan Kiss; Tatu Saloranta; Zoltan Kiss",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.13.5/jackson-module-parameter-names-2.13.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/41N31NCnP4yfYNJGb-nN9g9ZcuwUrmXfdHF-IJj6bBo/jackson-module-parameter-names-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names",
    "versionInfo" : "2.13.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.woodstox-woodstox-core-6.4.0",
    "copyrightText" : "Copyright (c) 2001-2013 Oracle and/or its affiliates\nCopyright (c) 2004 Tatu Saloranta, tatu.saloranta@iki.fi",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/woodstox/woodstox-core/6.4.0/woodstox-core-6.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wjONYdAsFk0hjNP-HKEVtVsCo_ZpuSAHbYmDMvBjmUE/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/woodstox",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.woodstox/woodstox-core",
    "versionInfo" : "6.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.ozlerhakan-poiji-3.0.3",
    "copyrightText" : "Copyright (c) 2017-2020 Poiji",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/ozlerhakan/poiji/3.0.3/poiji-3.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uWJ-sgmYOJCEbVbOwg1LgHm3enoOiTrcER4L9nIrAAE/poiji-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.ozlerhakan/poiji@3.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/ozlerhakan/poiji",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.ozlerhakan/poiji",
    "versionInfo" : "3.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1",
    "copyrightText" : "Copyright 2013 Stephen Connolly",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T3RxVpunqiGuBA0KfR3vP5GJ-nvyG4QAHLDQwlAWMMk/jcip-annotations-~-1-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://stephenc.github.com/jcip-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.stephenc.jcip/jcip-annotations",
    "versionInfo" : "1.0-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.virtuald-curvesapi-1.06",
    "copyrightText" : "Copyright (c) 2005, Graph Builder",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/virtuald/curvesapi/1.06/curvesapi-1.06.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F3_f_MSkHE_DBMwIEjkvKJ6cLbdcmrjknukJAg8sDiQ/curvesapi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.virtuald/curvesapi@1.06",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/virtuald/curvesapi",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.virtuald/curvesapi",
    "versionInfo" : "1.06"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UQuG5-vHXi2MjGeL4DdvxtCv9MA177o15GvTUTfIVeo/jsr305-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://findbugs.sourceforge.net/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.findbugs/jsr305",
    "versionInfo" : "3.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.9.1",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.9.1/gson-2.9.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/baLFLa-wpfnIJ7lYYjD2sot5PuLxuKExow8DmgvuXJk/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.9.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.9.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.7.1",
    "copyrightText" : "Copyright 2014 The Error Prone Authors\nCopyright 2015 The Error Prone Authors\nCopyright 2016 The Error Prone Authors\nCopyright 2017 The Error Prone Authors\nCopyright 2021 The Error Prone Authors\n\nAuthors: benyu@google.com; The Error Prone Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.7.1/error_prone_annotations-2.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DO3qH80Nf2HEdKwux_syuRD3EaXUglIN-mMSCJ7zBMk/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.1",
    "copyrightText" : "Copyright (c) 2018 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pPLAIlpoC8UbDm74TS1P2HCgsbVI8IXQqicX5eLB-p4/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-31.0.1-jre",
    "copyrightText" : "Copyright (c) 2005 The Guava Authors\nCopyright (c) 2006 The Guava Authors\nCopyright (c) 2007 The Guava Authors\nCopyright (c) 2008 The Guava Authors\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2010 The Guava Authors\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2012 The Guava Authors\nCopyright (c) 2013 The Guava Authors\nCopyright (c) 2014 The Guava Authors\nCopyright (c) 2015 The Guava Authors\nCopyright (c) 2016 The Guava Authors\nCopyright (c) 2017 The Guava Authors\nCopyright (c) 2018 The Guava Authors\nCopyright (c) 2019 The Guava Authors\nCopyright (c) 2020 The Guava Authors\nCopyright (c) 2021 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; code CacheBuilder; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nick Piepmeier; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/31.0.1-jre/guava-31.0.1-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@31.0.1-jre",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iE8ewTHSrBAJ4kRnePI2IqqvnnbknWGq3Nj3UTCwXgY/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "31.0.1-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-1.3",
    "copyrightText" : "Copyright 2012 Google Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/1.3/j2objc-annotations-1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IwS_T-b4a-nC09INJDQTpaQytOSqMfseOvobEVnWhG8/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-persistence-extension-1.1.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/azure/msal4j-persistence-extension/1.1.0/msal4j-persistence-extension-1.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/buTBh16gpRnl96UtEkM_JtnU1q1Pdi9bEHJsDUyswas/msal4j-persistence-extension-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.azure/msal4j-persistence-extension@1.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/AzureAD/microsoft-authentication-extensions-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.azure/msal4j-persistence-extension",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-1.13.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/azure/msal4j/1.13.0/msal4j-1.13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3G5d4ELPsZWGeMtWDWxFS4_pEltEiJiuWAO8u8MfYbA/msal4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.azure/msal4j@1.13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/AzureAD/microsoft-authentication-library-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.azure/msal4j",
    "versionInfo" : "1.13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.ews-java-api-ews-java-api-2.0",
    "copyrightText" : "Copyright (c) 2012 Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/ews-java-api/ews-java-api/2.0/ews-java-api-2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dBGlPkkf2fMYRb0brsZDn8Me1SosHIw-gRFuQPZl7H0/ews-java-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.ews-java-api/ews-java-api@2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.microsoft.com/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.ews-java-api/ews-java-api",
    "versionInfo" : "2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-auth-0.3.0",
    "copyrightText" : "Copyright 2008-2011 Google Inc.\nCopyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/graph/microsoft-graph-auth/0.3.0/microsoft-graph-auth-0.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d0Ym_fWJoyIZnMzRLd5hlg5G8VZ7PG6ZB9qh2lRpf6E/microsoft-graph-auth-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.graph/microsoft-graph-auth@0.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoftgraph/msgraph-sdk-java-auth",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.graph/microsoft-graph-auth",
    "versionInfo" : "0.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-core-2.0.13",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/graph/microsoft-graph-core/2.0.13/microsoft-graph-core-2.0.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yt_3DlYiP5E5N_2tBEXkfZ9K657BwG4q3RRgObdnI0k/microsoft-graph-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.graph/microsoft-graph-core@2.0.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoftgraph/msgraph-sdk-java-core",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.graph/microsoft-graph-core",
    "versionInfo" : "2.0.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-5.29.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/graph/microsoft-graph/5.29.0/microsoft-graph-5.29.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.graph/microsoft-graph@5.29.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qF3eylbOFrpGMxPhWVK30w8_NHpkRZx5tONp6L5SsVU/microsoft-graph-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoftgraph/msgraph-sdk-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.graph/microsoft-graph",
    "versionInfo" : "5.29.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-content-type-2.2",
    "copyrightText" : "Copyright 2020, Connect2id Ltd and contributors\n\nAuthors: Connect2id Ltd and contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/content-type/2.2/content-type-2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/content-type@2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mD9_KnqtreMRt19QIFnhV1OmdSsPlQOsHXU8VvaaP4/content-type-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-content-type",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/content-type",
    "versionInfo" : "2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-lang-tag-1.6",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/lang-tag/1.6/lang-tag-1.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/lang-tag@1.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0q8D1MFXGXCLSe9IQdwvwDhV9VMNU92FTihVg2osLrs/lang-tag-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-language-tags",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/lang-tag",
    "versionInfo" : "1.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-9.25.6",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd\nCopyright 2012-2018, Connect2id Ltd\nCopyright 2012-2019, Connect2id Ltd\nCopyright 2012-2020, Connect2id Ltd\nCopyright 2012-2021, Connect2id Ltd\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2012-2018, Connect2id Ltd and contributors\nCopyright 2012-2019, Connect2id Ltd and contributors\nCopyright 2012-2021, Connect2id Ltd and contributors\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd.; Connect2id Ltd and contributors; David Ortiz; Dimitar A. Stoikov; Eugene Kuleshov; Fernando Gonzalez Callejas; Imre Paladji; Josh Cummings; Junya Hayashi; Jun Yu; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Nathaniel Hart; Omer Levi Hevroni; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Tim McLean; Toma Velev; Vedran Pavic; Vladimir Dzhuvinov; Yavor Vassilev",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/9.25.6/nimbus-jose-jwt-9.25.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.25.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HYP2MQeq8XT9UsS4KV0xKYPEffLmAYb09fR1JQNM76Q/nimbus-jose-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/nimbus-jose-jwt",
    "versionInfo" : "9.25.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-oauth2-oidc-sdk-9.35",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd and contributors\n\nAuthors: Connect2id Ltd and contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/oauth2-oidc-sdk/9.35/oauth2-oidc-sdk-9.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.35",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/06hkH-rn1LaZiLLFPFqKR8v0328l7P5Vp0UvT-a_wvA/oauth2-oidc-sdk-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/oauth2-oidc-sdk",
    "versionInfo" : "9.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.opencsv-opencsv-5.7.1",
    "copyrightText" : "Copyright 2018 Andre Levandovski Rosot\nCopyright 2017 Andrew Rucker Jones\nCopyright 2005 Bytecode Pty Ltd.\nCopyright 2007 Kyle Miller\nCopyright 2013 Mark Rogers\nCopyright 2015 Scott Conway\nCopyright 2017 arjones",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/opencsv/opencsv/5.7.1/opencsv-5.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qlbpl-h-LpBCSFnbytToQRyaZTPoYh73Fp42cFiJhh8/opencsv-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.opencsv/opencsv@5.7.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://opencsv.sf.net",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.opencsv/opencsv",
    "versionInfo" : "5.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-4.10.0",
    "copyrightText" : "Copyright 2013 Twitter, Inc.\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2010 The Android Open Source Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp/4.10.0/okhttp-4.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8k72NNKUPhXPwTPFcQtrd0RTaOY1TpwltFc3BQk1voA/okhttp-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okhttp3/okhttp@4.10.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://square.github.io/okhttp/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okhttp3/okhttp",
    "versionInfo" : "4.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okio-okio-jvm-3.0.0",
    "copyrightText" : "Copyright 2014 Square Inc.\nCopyright (c) 2014 Square, Inc.\nCopyright (c) 2020 Square, Inc. and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okio/okio-jvm/3.0.0/okio-jvm-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okio/okio-jvm@3.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OSsIdjtIjNjqDaidkROMh7QdaDXZHEHygK41AbHLvL8/okio-jvm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/square/okio/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okio/okio-jvm",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.activation-jakarta.activation-1.2.2",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W5e_zMOyUQSnDujDpTBUAIEKUdbP-2oCaLFi-PNCrwc/jakarta.activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.activation/jakarta.activation",
    "versionInfo" : "1.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.mail-jakarta.mail-1.6.7",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009, 2018 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2010, 2019 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/mail/jakarta.mail/1.6.7/jakarta.mail-1.6.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jyYwAbGDcgE7zwbkir4S9xOCuiExlAo4vftK_yViag0/jakarta.mail-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.mail/jakarta.mail@1.6.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.mail/jakarta.mail",
    "versionInfo" : "1.6.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.mail-javax.mail-1.6.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2017 Jason Mehrens\nCopyright (c) 2017 Oracle America, Inc.\nCopyright (c) 1997-2018 Oracle and/or its affiliates\nCopyright (c) 2010-2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/mail/javax.mail/1.6.2/javax.mail-1.6.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qvN1udxtR-KkQ3BHIpHWCkKS47JsQrQNHsyP90952fQ/javax.mail-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.mail/javax.mail@1.6.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.mail/javax.mail",
    "versionInfo" : "1.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-4.0.3",
    "copyrightText" : "Copyright (c) 2013 Brett Wooldridge",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/HikariCP@4.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TrmLYcEwhyo6EHTL9iyRmyFF4bz908emywF4eKLV6oI/HikariCP-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/HikariCP",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/HikariCP",
    "versionInfo" : "4.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-SparseBitSet-1.2",
    "copyrightText" : "Copyright (c) 2010 Paladin Software Incorporated, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/SparseBitSet/1.2/SparseBitSet-1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/SparseBitSet@1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aAWRN_Td9bVrvqWjWsr5XYj2KQwP3iYnJExjwOM3YvE/SparseBitSet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/SparseBitSet",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/SparseBitSet",
    "versionInfo" : "1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.9.4",
    "copyrightText" : "Copyright 2000-2019 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HzUioKKQDAH1oed_c5H2nKGpJYg-28IPaMqnzTzr754/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.9.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15",
    "copyrightText" : "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright 2002-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.15",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ixaigc-CIpOk1obS2CfOggbfsdbSMtK8RxZPzy_A9Gc/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.11.0",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VY1Byout-KcGK32V1-s659qO_FcBd3laePpc6gwgYYk/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.8.0",
    "copyrightText" : "Copyright 2002-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.8.0/commons-io-2.8.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.8.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JSDHtsgDB2XDncmKnms--KD3Mw2YSFKksv51TvB7UP8/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.8.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2",
    "copyrightText" : "Copyright 2003-2014 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.2/commons-logging-1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEsO0wEV22BXvwXMcYIR6zdrwvnRai3_dErN8ue7Qxs/commons-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-logging/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-logging/commons-logging",
    "versionInfo" : "1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.9.16",
    "attributionTexts" : [ "Micrometer\n\nCopyright (c) 2017-Present VMware, Inc. All Rights Reserved.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n   https://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n\n-------------------------------------------------------------------------------\n\nThis product contains a modified portion of 'io.netty.util.internal.logging',\nin the Netty/Common library distributed by The Netty Project:\n\n  * Copyright 2013 The Netty Project\n  * License: Apache License v2.0\n  * Homepage: https://netty.io\n\nThis product contains a modified portion of 'StringUtils.isBlank()',\nin the Commons Lang library distributed by The Apache Software Foundation:\n\n  * Copyright 2001-2019 The Apache Software Foundation\n  * License: Apache License v2.0\n  * Homepage: https://commons.apache.org/proper/commons-lang/\n\nThis product contains a modified portion of 'JsonUtf8Writer',\nin the Moshi library distributed by Square, Inc:\n\n  * Copyright 2010 Google Inc.\n  * License: Apache License v2.0\n  * Homepage: https://github.com/square/moshi\n\nThis product contains a modified portion of the 'org.springframework.lang'\npackage in the Spring Framework library, distributed by VMware, Inc:\n\n  * Copyright 2002-2019 the original author or authors.\n  * License: Apache License v2.0\n  * Homepage: https://spring.io/projects/spring-framework\n" ],
    "copyrightText" : "Copyright 2010 Google Inc\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2012 The Netty Project\nCopyright 2013 The Netty Project\nCopyright 2017 The Netty Project\nCopyright 2017 VMware, Inc\nCopyright 2017-2021 VMware, Inc\nCopyright 2018 VMware, Inc\nCopyright 2019 VMware, Inc\nCopyright 2020 VMware, Inc\nCopyright 2021 VMware, Inc\nCopyright 2022 VMware, Inc\nCopyright 2023 VMware, Inc\nCopyright (c) 2017-Present VMware, Inc\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2012-2019 the original author or authors\n\nAuthors: Aliaksandr Valialkin; Ali Dehghani; Andy Wilkinson; Ben Hubert; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Ben Manes; Bjarte S. Karlsen; Chao Chang; Chris Bono; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Google Inc.; Gustavo Monarin; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jonatan Ivanov; Jon Schneider; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Maciej Walkowiak; Manabu Matsuzaki; Markus Dobel; Marten Deinum; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; QOS.ch; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; Vladimir Bukhtoyarov; VMware, Inc.; Wardha Perinkadakattu",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.9.16/micrometer-core-1.9.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qsyhPNOHHsOcpVfcaKeuduO8cuoKKtrS5cmjkSfiYFA/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.9.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.9.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.9.16",
    "attributionTexts" : [ "Micrometer\n\nCopyright (c) 2017-Present VMware, Inc. All Rights Reserved.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n   https://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n\n-------------------------------------------------------------------------------\n\nThis product contains a modified portion of 'io.netty.util.internal.logging',\nin the Netty/Common library distributed by The Netty Project:\n\n  * Copyright 2013 The Netty Project\n  * License: Apache License v2.0\n  * Homepage: https://netty.io\n\nThis product contains a modified portion of 'StringUtils.isBlank()',\nin the Commons Lang library distributed by The Apache Software Foundation:\n\n  * Copyright 2001-2019 The Apache Software Foundation\n  * License: Apache License v2.0\n  * Homepage: https://commons.apache.org/proper/commons-lang/\n\nThis product contains a modified portion of 'JsonUtf8Writer',\nin the Moshi library distributed by Square, Inc:\n\n  * Copyright 2010 Google Inc.\n  * License: Apache License v2.0\n  * Homepage: https://github.com/square/moshi\n\nThis product contains a modified portion of the 'org.springframework.lang'\npackage in the Spring Framework library, distributed by VMware, Inc:\n\n  * Copyright 2002-2019 the original author or authors.\n  * License: Apache License v2.0\n  * Homepage: https://spring.io/projects/spring-framework\n" ],
    "copyrightText" : "Copyright 2010 Google Inc\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc\nCopyright 2020 VMware, Inc\nCopyright 2022 VMware, Inc\nCopyright (c) 2017-Present VMware, Inc\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Johnny Lim; Jonatan Ivanov; Jon Schneider; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.9.16/micrometer-registry-prometheus-1.9.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3ZyXVO1SilcY0mUJQ5bDnBoNSaKcJPE-9HS0cD-FaNc/micrometer-registry-prometheus-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.9.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-registry-prometheus",
    "versionInfo" : "1.9.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.100.Final/netty-buffer-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uI1Xw5tXhxLTBP-6FQNHO4AnykN5INpbhZatwKPkJeE/netty-buffer-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-buffer/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-buffer",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.100.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.100.Final/netty-codec-dns-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gxbtfqqqZWvyZA1km2s8VJgk2KVMztc6GSjlApqz-Q8/netty-codec-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-dns",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.100.Final",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2014 Twitter, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http2/4.1.100.Final/netty-codec-http2-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http2@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jSBKZW5CECRk3cO_ap59CaXe9xxE9yzxdnmbZCthVO0/netty-codec-http2-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http2/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http2",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.100.Final/netty-codec-http-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5MIHleAaf2Fv40KtXRIEK1dw0sS1sq7ZLv0pEuJ-ths/netty-codec-http-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-socks/4.1.100.Final/netty-codec-socks-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-socks@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BydGNskocJtm46KcDJeTqNV3D1wkYc3DRqLxOb2xYx4/netty-codec-socks-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-socks/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-socks",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.100.Final/netty-codec-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-8cRH_JUIvnU1uHqPcnsz2tCv3QOoFwVwSXyyEAt-j0/netty-codec-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.100.Final/netty-common-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DnvKsGxWCSgl4wxsWG-8jmcl-LkT0QTQPXWEN7vUzTU/netty-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JCTools",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-common",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.100.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler-proxy/4.1.100.Final/netty-handler-proxy-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UhYHj5D6-TR2sTqWu6NvVHZ3A45ob9WNruiv0L6KvAA/netty-handler-proxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler-proxy@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler-proxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler-proxy",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.100.Final",
    "copyrightText" : "Copyright 2011 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.100.Final/netty-handler-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bhV0MbHFqN5ECoy46fZDIlSLd5Bk8ODWGMieB70m0cA/netty-handler-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.100.Final",
    "copyrightText" : "Copyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-classes-macos/4.1.100.Final/netty-resolver-dns-classes-macos-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TfZ2XycYmAHVaNl7cGxbtjVUX4Ho46WtMwSHbVmyCkY/netty-resolver-dns-classes-macos-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-classes-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-classes-macos",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.100.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-native-macos/4.1.100.Final/netty-resolver-dns-native-macos-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VxrtVTQp90TX6MS6wbCm-Rq-ZcnXMXAHGvz-KKmfNpc/netty-resolver-dns-native-macos-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.100.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-native-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-native-macos",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.100.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.100.Final/netty-resolver-dns-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OkISCs2Ik8JPpDQcDTojo2GwzzTtjxPg1m79Qem8fHU/netty-resolver-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.100.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.100.Final/netty-resolver-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c5dsN_wVKRzeADTJxh4joJrMYtt-4L3h03Vr3J8uAaY/netty-resolver-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=linux-aarch_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=osx-aarch_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-windows-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=windows-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.61.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-classes/2.0.61.Final/netty-tcnative-classes-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_nj9gG2-_tNpkH4rsDtDrVH8WbYs9KCloswbGcGtHlU/netty-tcnative-classes-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.61.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-classes",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.100.Final/netty-transport-classes-epoll-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PYPafdu01Z9uCORvRgFLFq9f5fUu8StQIJQIZOnv2p8/netty-transport-classes-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-classes-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-epoll",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-kqueue-4.1.100.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-kqueue/4.1.100.Final/netty-transport-classes-kqueue-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rLMb7Kn1SVW73Bs6aoXJTf_f4kbBQEzaj2ZxJHo4zwE/netty-transport-classes-kqueue-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.100.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/io.netty/netty-transport-classes-kqueue/4.1.100.Final",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-kqueue",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.100.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2013 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.100.Final/netty-transport-native-epoll-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/B0xha6bHU8zO_6ULl0E_3yiI4SpIPWm8q8sfaVGEbfU/netty-transport-native-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-epoll",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-kqueue-4.1.100.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-kqueue/4.1.100.Final/netty-transport-native-kqueue-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.100.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/n-VNfye9xNKWrB3GQ1I1A_kAVrqb8kJigtWjAGIWoz4/netty-transport-native-kqueue-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/io.netty/netty-transport-native-kqueue/4.1.100.Final",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-kqueue",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.100.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.100.Final/netty-transport-native-unix-common-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q8hvmxRbioJz3RMlQrgC-nGe5W6hgQieoM62vPXgEo0/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.100.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.100.Final/netty-transport-4.1.100.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.100.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/81VibOJsgP5NdcDm-eaXAcZWM7Ix0s_QBzFBPioACbk/netty-transport-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport",
    "versionInfo" : "4.1.100.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.0.38",
    "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-core/1.0.38/reactor-netty-core-1.0.38.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.0.38",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nk0tTm7lr6Miawk83BiFWSlIBJmynoLtVt0E2jfjrMY/reactor-netty-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/reactor/reactor-netty",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.projectreactor.netty/reactor-netty-core",
    "versionInfo" : "1.0.38"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.0.38",
    "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-http/1.0.38/reactor-netty-http-1.0.38.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zLVjsKLHLQyyyR3MU4BHxs79Doe1eR08bL1pU8pFr18/reactor-netty-http-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.0.38",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/reactor/reactor-netty",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.projectreactor.netty/reactor-netty-http",
    "versionInfo" : "1.0.38"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.4.33",
    "copyrightText" : "Copyright (c) 2011-2021 VMware Inc. or its affiliates\nCopyright 2002-2017 the original author or authors\n\nAuthors: Animesh Chaturvedi; David Karnok; DoHyung Kim; Igor Perikov; Jon Brisbin; Juergen Hoeller; Kevin Davin; Oleh Dokuka; Sebastien Deleuze; Sergei Egorov; Sergio Dos Santos; Simon Basle; Simon Basle https://github.com/reactor/reactive-streams-commons; Stephane Maldini; Stephane Maldini https://github.com/reactor/reactive-streams-commons; VMware Inc. or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/reactor-core/3.4.33/reactor-core-3.4.33.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LmBEnt_M6EESqip5CXs-OBH18IxCiOa02zm_4dNYJZI/reactor-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.projectreactor/reactor-core@3.4.33",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/reactor/reactor-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.projectreactor/reactor-core",
    "versionInfo" : "3.4.33"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.15.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient/0.15.0/simpleclient-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HFDfg_K3rP_EC721xSNrGVyyG1a48vL79fwRiFO3fro/simpleclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_common/0.15.0/simpleclient_common-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_common@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_common",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_common/0.15.0/simpleclient_tracer_common-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_common",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel/0.15.0/simpleclient_tracer_otel-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel_agent/0.15.0/simpleclient_tracer_otel_agent-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel_agent",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-1.3.5",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2005, 2018 Oracle and/or its affiliates\nCopyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HkDN_Gowc-fzbLhO2Xn_oaSZWi24vTMVLQb-LotgxVM/jakarta.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "1.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-2.0.2",
    "copyrightText" : "Copyright (c) 2019 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/2.0.2/jakarta.validation-api-2.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ssIsex-ZMjXxpQ-d-bTn-DD-U5X1FH_-ksvPsn2rt2Y/jakarta.validation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-2.1.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2006 Google Inc\nCopyright (c) 2010, 2017 Oracle and/or its affiliates\nCopyright (c) 2011, 2017 Oracle and/or its affiliates\nCopyright (c) 2011, 2019 Oracle and/or its affiliates\nCopyright (c) 2012, 2017 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2017 Oracle and/or its affiliates\nCopyright (c) 2015, 2017 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/2.1.6/jakarta.ws.rs-api-2.1.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y0WFVTb_nZBtnrdw0VBY3L0dEVr17Jspe7E7a09tCwo/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "2.1.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.activation-activation-1.1",
    "copyrightText" : "Copyright 1997-2005 Sun Microsystems, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/activation/activation/1.1/activation-1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RDytGRdmXoYuaZ_Z1t_SL2zNM1Xy01AWG5ZjLI2yRQU/activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.activation/activation@1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://java.sun.com/products/javabeans/jaf/index.jsp",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.activation/activation",
    "versionInfo" : "1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.activation-javax.activation-api-1.2.0",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1997-2016 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LjJYMFwpDj38_BmEPSzlrFrVXwz7RiIth_QYOzy8oPo/javax.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.activation/javax.activation-api@1.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.activation/javax.activation-api",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2009-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EsDiBfvenrC3SxvU0AYOhakhWVqJRn8aEg4kQMZwUTw/javax.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcp.org/en/jsr/detail?id=250",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.annotation/javax.annotation-api",
    "versionInfo" : "1.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.mail-javax.mail-api-1.6.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997-2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/mail/javax.mail-api/1.6.2/javax.mail-api-1.6.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/P4DyJPhcESIfMiexftuQ2dHEznlS-q6-HwUOEmJQ4MU/javax.mail-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.mail/javax.mail-api@1.6.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.mail/javax.mail-api",
    "versionInfo" : "1.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2004-2017 Oracle\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017-2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CNpJdhH9y3bc9jEUmHT-DeW5wAhzb0WKAnGhbQ4q1gc/jaxb-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.xml.bind/jaxb-api",
    "versionInfo" : "2.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.10",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne\nCopyright 2001-2006 Stephen Colebourne\nCopyright 2001-2007 Stephen Colebourne\nCopyright 2001-2009 Stephen Colebourne\nCopyright 2001-2010 Stephen Colebourne\nCopyright 2001-2011 Stephen Colebourne\nCopyright 2001-2012 Stephen Colebourne\nCopyright 2001-2013 Stephen Colebourne\nCopyright 2001-2014 Stephen Colebourne\nCopyright 2001-2015 Stephen Colebourne\nCopyright 2001-2016 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.10/joda-time-2.10.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ciqWgbsMPuCQ_6b9gQ41htByKJgeQ0UZ4BuCtxevXJE/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.10.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.6.0",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2017 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2010 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2020 Torbjorn Svensson\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.6.0/jna-platform-5.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0LVPsYceY8qk578FFCaGes_SHoEm5auNhr7wzZj4CFI/jna-platform-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.5.0",
    "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.5.0/jna-5.5.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qu-6qMcuRFpXVH3H8ziddp92yY0oWrFMppNdVcCRLAA/jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.5.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna",
    "versionInfo" : "5.5.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.4.11",
    "copyrightText" : "Copyright 2011-2023 JSON-SMART authors\n\nAuthors: JSON-SMART authors; Uriel Chemouni",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/accessors-smart/2.4.11/accessors-smart-2.4.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.minidev/accessors-smart@2.4.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rJhQioYdnTVZ6sEAr_ijJ7TUROYcQW_5U5-MS8R3h8E/accessors-smart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://urielch.github.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.minidev/accessors-smart",
    "versionInfo" : "2.4.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.4.11",
    "copyrightText" : "Copyright 2011-2014 JSON-SMART authors\n\nAuthors: FangYidong <fangyidong@yahoo.com.cn>; JSON-SMART authors; Uriel Chemouni <uchemouni@gmail.com>; uriel Chemouni",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/json-smart/2.4.11/json-smart-2.4.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.minidev/json-smart@2.4.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gl_HKLIoft_A7vWBNqsp25VKHn46mw9d-yx5kZ7LlZc/json-smart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://urielch.github.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.minidev/json-smart",
    "versionInfo" : "2.4.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.4",
    "copyrightText" : "Copyright 2001-2019 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JlhNu07nVRs4Pu0VRyRtyoNZzRwAc3IBNcTx63LEAc4/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.21",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation\ncopyright (c) 1996-2019 Julian R Seward",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.21/commons-compress-1.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WWiYm3SbbcWZc7JT2oRKJmOOnDAs4edVJ8kOdBMbj2Q/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.10.0",
    "copyrightText" : "Copyright 2005-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-csv/1.10.0/commons-csv-1.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-csv@1.10.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dU4aZCSRroYx2eWR-wPkfrqXXu44BnY2m-2hAsYEq9M/commons-csv-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-csv/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-csv",
    "versionInfo" : "1.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.10",
    "copyrightText" : "Copyright 2001-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.10/commons-lang3-3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vlNKgnsh4bkwe84ENnnp9ggM93Ffh_ecQJDq0ZZpPzQ/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.11",
    "copyrightText" : "Copyright 2001-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.11/commons-lang3-3.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wj05t4UmdTxjHqqBS-qVFcm1_qA7OEp1ti1c99vBoiE/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.12.0",
    "copyrightText" : "Copyright 2001-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.12.0/commons-lang3-3.12.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CA2sUSh7JI-mAgJBc53ir8lLlO2uKC47egR6QJxuhFM/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.12.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-math3-3.6.1",
    "attributionTexts" : [ "This product includes software developed by the University of Chicago, as Operator of Argonne National Laboratory." ],
    "copyrightText" : "Copyright 2010-2012 CS Systemes d'Information\nCopyright 2009 Google Inc.\nCopyright 2001-2016 The Apache Software Foundation\nCopyright (c) 2001, 2002 Enthought, Inc.\nCopyright (c) 2004, Ernst Hairer\nCopyright (c) 2008, Frances Y. Kuo and Stephen Joe\nCopyright (c) 1997 - 2002, Makoto Matsumoto and Takuji Nishimura\nCopyright (c) 2003-2009 SciPy Developers\nCopyright (c) 2003-2013 SciPy Developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-math3/3.6.1/commons-math3-3.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xTRtCcByTeQkFetUFt4g2WhWxEZ5bw0PTmpRYO5O49c/commons-math3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-math/",
    "licenseConcluded" : "(Minpack AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-math3",
    "versionInfo" : "3.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.10.0",
    "copyrightText" : "Copyright 2014-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.10.0/commons-text-1.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-text@1.10.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J62J0kPVzf6BPhiPa__5LqqXznLvRRSrZ09cWOO8sp4/commons-text-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-text",
    "versionInfo" : "1.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.17.2",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.17.2/log4j-api-2.17.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RP_yN_NNZjf34UtbZOLACWpqaLLdBwR9gWsgcZ_6tyM/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.17.2",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.17.2/log4j-to-slf4j-2.17.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/N6iRav00IBBd1jVH6NRkTlatHWC8pfFuZE7Y17RrUlg/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.2",
    "copyrightText" : "Client Copyright 2010-2016 The Apache Software Foundation\nCopyright 2010 Newcastle University",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.client/1.0.2/org.apache.oltu.oauth2.client-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QAIZpae70Gtl3WXuz_M8QvqMMmjIm52UksizDBMkEJg/org.apache.oltu.oauth2.client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.2",
    "copyrightText" : "Common Copyright 2010-2016 The Apache Software Foundation\nCopyright 2010 Newcastle University",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.common/1.0.2/org.apache.oltu.oauth2.common-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/29kLvSZ2K73lm_3MEIAOOrF5ps66SU7CjgfSuawgMzE/org.apache.oltu.oauth2.common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-lite-5.2.0",
    "copyrightText" : "Copyright 2003-2021 The Apache Software Foundation\nCopyright 2001 The Internet Society and W3C (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) Microsoft Corporation\nCopyright (c) 2000 - 2021 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2000-2015 www.hamcrest.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml-lite/5.2.0/poi-ooxml-lite-5.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0Ua6cOWEJ7Z_eONdOwjCIM2-G5W4rX8Ks6-K3QBsRw4/poi-ooxml-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi-ooxml-lite",
    "versionInfo" : "5.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-5.2.0",
    "copyrightText" : "Copyright 2003-2021 The Apache Software Foundation\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2008-2014 FedICT.\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2000 - 2021 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2000-2015 www.hamcrest.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml/5.2.0/poi-ooxml-5.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi-ooxml@5.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IgEgdQcl7vUDttNzZfNFHnpmnrUkIWpCYcpFmrpil-Q/poi-ooxml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi-ooxml",
    "versionInfo" : "5.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-5.2.0",
    "copyrightText" : "Copyright 2003-2021 The Apache Software Foundation\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2000 - 2021 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2000-2015 www.hamcrest.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi/5.2.0/poi-5.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi@5.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/K3VKb9N_hkqhURWL_8PMkzCXijoSmjAbpxh41T-6dnk/poi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi",
    "versionInfo" : "5.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tika-tika-core-1.26",
    "copyrightText" : "Copyright 2010 International Press Telecommunications Council\nCopyright 2016 Norconex Inc.\nCopyright 2007-2021 The Apache Software Foundation\nCopyright (c) Ian F. Darwin 1986, 1987, 1989, 1990, 1991, 1992, 1994, 1995\nparts Copyright 2010 International Press Telecommunications Council",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tika/tika-core/1.26/tika-core-1.26.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tika/tika-core@1.26",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rsz25mcVHYKNsMw_x-r5WEJQbJpphDlI1NgbVhFylos/tika-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://tika.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tika/tika-core",
    "versionInfo" : "1.26"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-9.0.82",
    "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc\nCopyright 2003-2009 Sun Microsystems, Inc\nCopyright 1999-2023 The Apache Software Foundation\nCopyright (c) 1999-2023, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 2009-2017 Oracle and/or its affiliates\nCopyright (c) 1999-2023, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/9.0.82/tomcat-embed-core-9.0.82.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.82",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VVcy9XqZaXIyoH9y0NKtMNn7NzkG5E6Ik4FiqeI_ojM/tomcat-embed-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core",
    "versionInfo" : "9.0.82"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-9.0.82",
    "copyrightText" : "Copyright 1999-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/9.0.82/tomcat-embed-el-9.0.82.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JdpV71ikVl07ERciXU_X0-AKQEOZQTdTWRP46uoHd4Y/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.82",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "9.0.82"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-9.0.82",
    "attributionTexts" : [ "Apache Tomcat\nCopyright 1999-2023 The Apache Software Foundation\n\nThis product includes software developed at\nThe Apache Software Foundation (http://www.apache.org/).\n" ],
    "copyrightText" : "Copyright 1999-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/9.0.82/tomcat-embed-websocket-9.0.82.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8mfvEbzx9ZoPCC4N1MgSD5fxV6t0IjUYkxInjk7D1uQ/tomcat-embed-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.82",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket",
    "versionInfo" : "9.0.82"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.xmlbeans-xmlbeans-5.0.3",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 1999-2003 Apache Software Foundation\nCopyright (c) 2001-2003 Apache Software Foundation\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\ncopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/xmlbeans/xmlbeans/5.0.3/xmlbeans-5.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/a_ZN3JjHyViegr--SLX0-IQfXJjDRtvML06DxerFpLk/xmlbeans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.xmlbeans/xmlbeans@5.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://xmlbeans.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.xmlbeans/xmlbeans",
    "versionInfo" : "5.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.8.13",
    "copyrightText" : "Copyright (c) 1998-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2000, 2003 IBM Corporation and others\nCopyright (c) 2001 The Apache Software Foundation\nCopyright (c) 2002 Contributors\nCopyright (c) 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC). 2004 IBM Corporation\nCopyright (c) 2002, 2010 Contributors\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC) and others\nCopyright (c) 2002,2005 Contributors\nCopyright (c) 2002,2010\nCopyright (c) 2002-2006 Contributors\nCopyright (c) 2002-2009 Contributors\nCopyright (c) 2002-2010\nCopyright (c) 2002-2010 Contributors\nCopyright (c) 2003 Contributors\nCopyright (c) 2003 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2003,2010 Contributors\nCopyright (c) 2004 Contributors\nCopyright (c) 2004 IBM\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2004 IBM Corporation and others\nCopyright (c) 2004, 2013 IBM Corporation\nCopyright (c) 2004, 2013 IBM, VMware\nCopyright (c) 2004, 2017 Contributors\nCopyright (c) 2004,2010 Contributors\nCopyright (c) 2005 Contributors\nCopyright (c) 2005 IBM\nCopyright (c) 2005 IBM Corporation\nCopyright (c) 2005 IBM, Contributors\nCopyright (c) 2005, 2017 Contributors\nCopyright (c) 2005-2008 Contributors\nCopyright (c) 2005-2010 Contributors\nCopyright (c) 2005-2012 Contributors\nCopyright (c) 2005-2017 Contributors\nCopyright (c) 2006 Contributors\nCopyright (c) 2006 IBM\nCopyright (c) 2006 IBM Corporation and others\nCopyright (c) 2006-2008 Contributors\nCopyright (c) 2007 Contributors\nCopyright (c) 2008 Contributors\nCopyright (c) 2009 Contributors\nCopyright (c) 2010 Contributors\nCopyright (c) 2010 SpringSource, Contributors\nCopyright (c) 2011 Contributors\nCopyright (c) 2012 Contributors\nCopyright (c) 2012 VMware, Inc\nCopyright (c) 2013 Contributors\nCopyright (c) 2013 VMware\nCopyright (c) 2014 Contributors\n\nAuthors: Abraham Nevado; a ClassWriter; Adrian Colyer; <A HREF http://www.inf.fu-berlin.de/~ehaase'> E. Haase; <A HREF http://www.inf.fu-berlin.de/~ehaase'> Enver Haase; <A HREF http://www.vmeng.com/beard'> Patrick C. Beard; <A HREF markus.dahm@berlin.de'> M. Dahm; Alexander Kriegisch; Alexandre Vasseur; alex@gnilux.com Alexandre Vasseur; Andy Clement; Andy Clement, Abraham Nevado; A. Nevado; colyer Annotation; colyer Creates; colyer Facade; colyer Implementors; colyer Instances; colyer Marker; colyer Matches; Contributors; David Dixon-Peugh; David Knibb; Erik Hilsdale; IBM; IBM, Contributors; IBM Corporation; IBM Corporation and others; IBM, VMware; Jim Hugunin; Konstantin Shagin <konst@cs.technion.ac.il>; Kris De Volder; Lyor Goldstein; Mik Kersten; Palo Alto Research Center, Incorporated; Palo Alto Research Center, Incorporated (PARC); Palo Alto Research Center, Incorporated (PARC) and others; Palo Alto Research Center, Incorporated (PARC). IBM Corporation; Ron Bodkin; SpringSource, Contributors; The Apache Software Foundation; the Apache Software Foundation (http://www.apache.org/); the PatternParser; VMware; VMware, Inc.; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjweaver/1.8.13/aspectjweaver-1.8.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aspectj/aspectjweaver@1.8.13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UMwJxf9uS8uGCgJq56XprR9QoZ0DGVXlods0gijl2Fo/aspectjweaver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.aspectj.org",
    "licenseConcluded" : "EPL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aspectj/aspectjweaver",
    "versionInfo" : "1.8.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk15on-1.67",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2000-2019 The Legion Of The Bouncy Castle Inc. (http://www.bouncycastle.org)\nCopyright (c) 2000-2019 The Legion of the Bouncy Castle Inc. (http://www.bouncycastle.org)\nCopyright (c) 2000-2020 The Legion of the Bouncy Castle Inc. (http://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk15on/1.67/bcpkix-jdk15on-1.67.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.67",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KrA3NvYQwFA0IROZeJcksGBqH7ZTtmgBOOiPpDZWHxk/r1rv67.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.bouncycastle.org/java.html",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk15on",
    "versionInfo" : "1.67"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk15on-1.67",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2019 The Legion Of The Bouncy Castle Inc. (http://www.bouncycastle.org)\nCopyright (c) 2000-2019 The Legion of the Bouncy Castle Inc. (http://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk15on/1.67/bcprov-jdk15on-1.67.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-ORXOXUid3Z1T3thxQ6IEOHhAXOZUR143-KHV3wnwRg/bcprov-jdk15on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.bouncycastle.org/java.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk15on",
    "versionInfo" : "1.67"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.checkerframework-checker-qual-3.12.0",
    "copyrightText" : "Copyright 2004-present by the Checker Framework developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/checkerframework/checker-qual/3.12.0/checker-qual-3.12.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.checkerframework/checker-qual@3.12.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GIcVa_Ejcipx5D_RbwoBrEM7B9-KmtQZLrvAcKSLYMY/checker-qual-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://checkerframework.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.checkerframework/checker-qual",
    "versionInfo" : "3.12.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.woodstox-stax2-api-4.2.1",
    "copyrightText" : "Copyright (c) 2004- Tatu Saloranta, tatu.saloranta@iki.fi",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/woodstox/stax2-api/4.2.1/stax2-api-4.2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9Ialzi2hOUkil079CFc3hzw5mEfQVSGzDQZaTZpNm_c/stax2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/FasterXML/stax2-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.codehaus.woodstox/stax2-api",
    "versionInfo" : "4.2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.4.51.v20230217",
    "copyrightText" : "Copyright 1996 Aki Yoshida\nCopyright 1995-2018 Mort Bay Consulting Pty Ltd\nCopyright Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995-2022 Mort Bay Consulting Pty Ltd and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/9.4.51.v20230217/jetty-util-ajax-9.4.51.v20230217.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WSvuvpWutiBzOwKhQ4JUEPyC9UnTDbgmzkBPh9vjblo/jetty-util-ajax-~.v20230217-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.51.v20230217",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "9.4.51.v20230217"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.4.51.v20230217",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies.\n" ],
    "copyrightText" : "Copyright 1996 Aki Yoshida\nCopyright 1995-2018 Mort Bay Consulting Pty Ltd\nCopyright Mort Bay Consulting Pty Ltd\nCopyright (c) 1996 Aki Yoshida\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995-2022 Mort Bay Consulting Pty Ltd and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/9.4.51.v20230217/jetty-util-9.4.51.v20230217.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zWCHHwF6Yn0qXXSue_DvP0uNCm4Tbr_ZlXnEwwSbhA0/jetty-util-~.v20230217-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.51.v20230217",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND Apache-2.0 AND MIT AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "9.4.51.v20230217"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/2.6.1/aopalliance-repackaged-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZP3p4YKr0R3CENOiXs8YJytJbCUBj6mU27whuG2Iths/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-jakarta.inject-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/jakarta.inject/2.6.1/jakarta.inject-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/00VxZo7tpxThVTBUNPjfPHetMjKhRwvxVhei8aukNyE/jakarta.inject-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/jakarta.inject",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2007, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2011, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/2.6.1/hk2-api-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x8JH4mrJQmZ42cc3RfNQvcUka1A1_aNuBsqku1Plph4/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/2.6.1/hk2-locator-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFnXptZi5aVwNkgZcnDH2w0VpkYtzzTuji9EHSeCW-8/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2007, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2019 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/2.6.1/hk2-utils-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GUtvQLJSJ74hARf0pn6jX-qrBRfl29ps65Wi9NP9ZPM/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-2.35",
    "copyrightText" : "(c) 2010-2017 Google, Inc\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2009-2011 FasterXML, LLC\nCopyright (c) 2010, 2020 Oracle and/or its affiliates\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2020 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2019 Oracle and/or its affiliates\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) jQuery Foundation\nCopyright 2009, Red Hat, Inc\nCopyright 2010-2013 Coda Hale and Yammer, Inc\nCopyright 2011-2016 Twitter, Inc\nCopyright Eric Rowell\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; jorgeluisw at mac.com; jorgeluisw@mac.com; jQuery Foundation; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; Oracle and/or its affiliates; OSGi Alliance; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; the Eclipse Jersey project; the Free Software Foundation; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/2.35/jersey-apache-connector-2.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.35",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p3eM1oblrkskInT0z_dzOWdSyedkc8Ib5a5VhMg0WAQ/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "2.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-2.35",
    "copyrightText" : "(c) 2010-2017 Google, Inc\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2009-2011 FasterXML, LLC\nCopyright (c) 2010, 2019 Oracle and/or its affiliates\nCopyright (c) 2011, 2018 Oracle and/or its affiliates\nCopyright (c) 2011, 2019 Oracle and/or its affiliates\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2012, 2020 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2019 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2019 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2019 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 2018, 2019 Payara Foundation and/or its affiliates\nCopyright (c) 2019 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Oracle and/or its affiliates\nCopyright (c) 2019, 2021 Oracle and/or its affiliates\nCopyright (c) 2020 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) jQuery Foundation\nCopyright 2009, Red Hat, Inc\nCopyright 2010-2013 Coda Hale and Yammer, Inc\nCopyright 2011-2016 Twitter, Inc\nCopyright Eric Rowell\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; jQuery Foundation; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; Oracle and/or its affiliates; OSGi Alliance; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; raphael.jolivet@gmail.com; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; the Eclipse Jersey project; the Free Software Foundation; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/2.35/jersey-client-2.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.35",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/U9rhU_eOIPYI2ufvOfcV9SoQNHs7DY8Ar9tSlfCo6b4/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "2.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-2.35",
    "copyrightText" : "(c) 2010-2017 Google, Inc\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2006 The Guava Authors\nCopyright (c) 2007 The Guava Authors\nCopyright (c) 2007, 2019 Oracle and/or its affiliates\nCopyright (c) 2008 The Guava Authors\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2009-2011 FasterXML, LLC\nCopyright (c) 2010 The Guava Authors\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2019 Oracle and/or its affiliates\nCopyright (c) 2010, 2020 Oracle and/or its affiliates\nCopyright (c) 2010, 2021 Oracle and/or its affiliates\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011, 2018 Oracle and/or its affiliates\nCopyright (c) 2011, 2019 Oracle and/or its affiliates\nCopyright (c) 2012 The Guava Authors\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2012, 2020 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2013 The Guava Authors\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2021 Oracle and/or its affiliates\nCopyright (c) 2014 The Guava Authors\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2019 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2019 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2019 Oracle and/or its affiliates\nCopyright (c) 2016, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2017, 2020 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 2019 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Oracle and/or its affiliates\nCopyright (c) 2020 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) jQuery Foundation\nCopyright 2009, Red Hat, Inc\nCopyright 2010-2013 Coda Hale and Yammer, Inc\nCopyright 2011-2016 Twitter, Inc\nCopyright Eric Rowell\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; code CacheBuilder; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; hubick@java.net; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); jQuery Foundation; Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; Ondrej Kosatka; Oracle and/or its affiliates; OSGi Alliance; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; the Eclipse Jersey project; the Free Software Foundation; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); WS Development Team; Yegor Bugayenko (yegor256 at java.net)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/2.35/jersey-common-2.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UEbKDDPur8ajBRV_nUGyBRw0KieFLaEAjhf_e1VppL0/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND CC0-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "2.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-2.35",
    "copyrightText" : "(c) 2010-2017 Google, Inc\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2009-2011 FasterXML, LLC\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) jQuery Foundation\nCopyright 2009, Red Hat, Inc\nCopyright 2010-2013 Coda Hale and Yammer, Inc\nCopyright 2011-2016 Twitter, Inc\nCopyright Eric Rowell\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); jQuery Foundation; Marek Potociar; Oracle and/or its affiliates; OSGi Alliance; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; the Eclipse Jersey project; the Free Software Foundation; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/2.35/jersey-hk2-2.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FecNQ_njPIgb0rume3DoXq2KTeceDfO9j-Y6U7sZgqo/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "2.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-2.35",
    "copyrightText" : "(c) 2010-2017 Google, Inc\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2009-2011 FasterXML, LLC\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2019 Oracle and/or its affiliates\nCopyright (c) 2010, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2019 Oracle and/or its affiliates\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) jQuery Foundation\nCopyright 2009, Red Hat, Inc\nCopyright 2010-2013 Coda Hale and Yammer, Inc\nCopyright 2011-2016 Twitter, Inc\nCopyright Eric Rowell\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; Imran M Yousuf (imran at smartitengineering.com); imran@smartitengineering.com; INRIA, France Telecom; jQuery Foundation; Marek Potociar; Michal Gajdos; Oracle and/or its affiliates; OSGi Alliance; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; the Eclipse Jersey project; the Free Software Foundation; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/2.35/jersey-media-multipart-2.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zchnzQG434mtrvQde5GfDeztwMU4Txye0Al-V55dFtY/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "2.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.1.12",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.1.12/HdrHistogram-2.1.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OEo1w3d-VtegDSSqUrhO8FKGSnCF9vUfI5MNf6nYPeo/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.1.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.25.0-GA",
    "copyrightText" : "Copyright (c) 1999- Shigeru Chiba\nCopyright (c) 1999-2019 Shigeru Chiba\nCopyright (c) 2004 Bill Burke",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.25.0-GA/javassist-3.25.0-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.25.0-GA",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CCW_udJLSUc7E8WZIpeddRLzumqTG6jDY7rCwMTsniA/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.25.0-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.6.21",
    "copyrightText" : "Copyright 2007 Google Inc.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\nCopyright 2011 The Guava Authors\ncopyright Char (c)\n\nAuthors: Char; Google Inc.; JetBrains s.r.o. and Kotlin Programming Language contributors; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-common/1.6.21/kotlin-stdlib-common-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2PVCAkpWxkA9Ni8F-gXNeQ0Nz8zfORWEXsfw7zab6ds/kotlin-stdlib-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-common",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.6.21",
    "copyrightText" : "Copyright 2010-2017 JetBrains s.r.o.\nCopyright 2010-2020 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk7/1.6.21/kotlin-stdlib-jdk7-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5e7zFfVAof8HGX1gfoDs9CPFC7ToMusgNPsvm_Igwzg/kotlin-stdlib-jdk7-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.6.21",
    "copyrightText" : "Copyright 2010-2017 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk8/1.6.21/kotlin-stdlib-jdk8-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aRBKm4I7Yr4VAk2mvBqNfeSnjTWa-87yTo6rV4bipms/kotlin-stdlib-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.6.21",
    "copyrightText" : "Copyright Eric Ford & Hubert Holin 2001\nCopyright 2010-2015 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: Eric Ford & Hubert Holin; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib/1.6.21/kotlin-stdlib-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XdByfa3WxrCg6U6uotuAeKIEiSILs_ds13nhH9Za5rw/kotlin-stdlib-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0",
    "copyrightText" : "Copyright 2000-2009 JetBrains s.r.o.\nCopyright 2006 Sascha Weinreuter",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/annotations/13.0/annotations-13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ohV-6iNW-UvYl5NCKrBCcnGieF-bAwlofJHFZGSfYhM/annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains/annotations@13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.jetbrains.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains/annotations",
    "versionInfo" : "13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.json-json-20140107",
    "copyrightText" : "Copyright (c) 2002 JSON.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/json/json/20140107/json-20140107.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1JD9qauiay-oMBIC7vqgMZbkp_rdlW_k94kMh5TCpWw/json-20140107-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.json/json@20140107",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/douglascrockford/JSON-java",
    "licenseConcluded" : "JSON",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.json/json",
    "versionInfo" : "20140107"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.15.1",
    "copyrightText" : "Copyright (c) 2009-2022 Jonathan Hedley <https://jsoup.org/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jsoup/jsoup/1.15.1/jsoup-1.15.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ubVbdFT2PoqbTHjWAnUrZ8e_ku0stPK2V6KIpJQaJ7E/jsoup-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jsoup/jsoup@1.15.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jsoup.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jsoup/jsoup",
    "versionInfo" : "1.15.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.13",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2020 Oracle and/or its affiliates\nCopyright (c) 2012, 2020 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2020 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.13/mimepull-1.9.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3EWVnHENiZlGtmYTTAjwa8Gp_EItlrryrx7qHy4q7UY/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.3",
    "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm/9.3/asm-9.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/udaQs6bOG1WoXXwXGzJOsu4gwqYg4nqTsMbL9YldbH0/asm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ow2.asm/asm@9.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://asm.ow2.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ow2.asm/asm",
    "versionInfo" : "9.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4",
    "copyrightText" : "Copyright 2014 Reactive Streams",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzlZKD1w0srcX7HUjm-dlT3mVAU0KPihSho4sZTZnm4/reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.reactive-streams.org/",
    "licenseConcluded" : "MIT-0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.reactivestreams/reactive-streams",
    "versionInfo" : "1.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-1.7.36",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/1.7.36/jcl-over-slf4j-1.7.36.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BeyphBjhDjWZk0uS6-NwGdCWL7CZf17809Nys4blioE/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "1.7.36"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.36",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/1.7.36/jul-to-slf4j-1.7.36.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6WirelimZdtzKfvPHaftyDl-xWFR5cH8f1b3dtOa3ho/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "1.7.36"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-1.7.36",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1e_pYdVpIUbxVgpqhLr4dhS7Dbfkyuwz3AAGnl8mRWw/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "1.7.36"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc\nCopyright 2012-2019 the original author or authors\nCopyright 2012-2020 the original author or authors\nCopyright 2012-2021 the original author or authors\nCopyright 2012-2022 the original author or authors\nCopyright 2012-2023 the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jonatan Ivanov; Jon Schneider; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Vedran Pavic; Venil Noronha; VMware, Inc.; Wallace Wadge; Yanming Zhou",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/2.7.17/spring-boot-actuator-autoconfigure-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.7.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w37F8laaC76qyalSQacmWR5d4V9ornaeD3FBfUHQl2U/spring-boot-actuator-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc\nCopyright 2012-2019 the original author or authors\nCopyright 2012-2020 the original author or authors\nCopyright 2012-2021 the original author or authors\nCopyright 2012-2022 the original author or authors\nCopyright 2012-2023 the original author or authors\nCopyright 2020-2021 the original author or authors\nCopyright 2020-2022 the original author or authors\nCopyright 2020-2023 the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chanhyeong LEE; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jonatan Ivanov; Jon Schneider; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Markus Schuch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael McFadyen; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nicolas Lejeune; Nikolay Rybak; Nishant Raut; Olivier Bourgain; Raja Kolli; Richard Santana; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Toshiaki Maki; Vedran Pavic; Venil Noronha; VMware, Inc.; Wallace Wadge; Yulin Qin",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/2.7.17/spring-boot-actuator-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e8SCxtLt9jes_OMJCGnYkf5H8RXkRH4NWDH2jwlvKWw/spring-boot-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc\nCopyright 2012-2019 the original author or authors\nCopyright 2012-2020 the original author or authors\nCopyright 2012-2021 the original author or authors\nCopyright 2012-2022 the original author or authors\nCopyright 2012-2023 the original author or authors\nCopyright 2020-2021 the original author or authors\nCopyright 2020-2022 the original author or authors\n\nAuthors: Aarti Gupta; Akshay Dubey; Alen Turkovic; Alex Derkach; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Daniel Fernandez; Dan Zheng; Dave Syer; David Liu; Dirk Deyne; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Henryk Konsek; Issam El-atif; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Wilke; Johannes Edmeier; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lasse Lindqvist; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Gmeiner; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Paulius Dambrauskas; Piotr Maj; Quinten De Swaef; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Rob Winch; Rodolpho S. Couto; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Kuptsov; Sergey Serdyuk; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Taeik Lim; Thiago Hirata; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; VMware, Inc.; Yogesh Lonkar; Yulin Qin; Yunkun Huang",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/2.7.17/spring-boot-autoconfigure-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Q__Ho0s0k4Pa33ETPUu_DI-y6ku0OJI7hvkyCd9SVW0/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/2.7.17/spring-boot-starter-actuator-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WOLnEFwxKIOMsnFmy_FSEhaB9c0Bk36KpzZJCKMpf5g/spring-boot-starter-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-actuator",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-aop-2.7.17",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-aop/2.7.17/spring-boot-starter-aop-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bb_xGI9-AOd1LQm6Fh0DxvnW3Wn5vBopmMOCM3fVqkU/spring-boot-starter-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-aop",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jdbc-2.7.17",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-jdbc/2.7.17/spring-boot-starter-jdbc-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_7DoivZ-CjBcOgbFEOGdg5D3JvofD-vmnFjMMRP63Z4/spring-boot-starter-jdbc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-jdbc",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/2.7.17/spring-boot-starter-json-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H9d461osIRHr7QG8J3sGD_9eKr0YKgT6zXfzGRu98d0/spring-boot-starter-json-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-json",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/2.7.17/spring-boot-starter-logging-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f2rWEIge9HIYscZs2CFBocuZ8kq4FgZog7U-XEGJGRY/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-mail-2.7.17",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-mail/2.7.17/spring-boot-starter-mail-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-mail@2.7.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Bak9R2JBUU1q_yd7moUAXTir08APqVI-_cG1t2c__GI/spring-boot-starter-mail-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-mail",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/2.7.17/spring-boot-starter-security-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aDs1HhDEIIr_z8nya4Jv5NaP5oCZsabNywP_pbrqzMI/spring-boot-starter-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-security",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/2.7.17/spring-boot-starter-tomcat-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4uAqbJ2NuJG9b4UpTGGEnbBFYZSxfHieZbKtVwEIffk/spring-boot-starter-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/2.7.17/spring-boot-starter-web-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p3SXERmE0hBp3-Irn7ageQJDNCmBiarrTGVfn0Dx7dc/spring-boot-starter-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-web",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/2.7.17/spring-boot-starter-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XXbZkincbATR5UyuPUgPcRF_f6UUMV1rGm7_TnwyTcM/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-2.7.17",
    "attributionTexts" : [ "Spring Boot 2.7.17\nCopyright (c) 2012-2023 VMware, Inc.\n\nThis product is licensed to you under the Apache License, Version 2.0\n(the \"License\"). You may not use this product except in compliance with\nthe License." ],
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2012-2017 the original author or authors\nCopyright 2012-2019 the original author or authors\nCopyright 2012-2020 the original author or authors\nCopyright 2012-2021 the original author or authors\nCopyright 2012-2022 the original author or authors\nCopyright 2012-2023 the original author or authors\n\nAuthors: Alexander Heusingfeld; Anand Shah; Andrey Hihlovskiy; Andy Clement; Andy Wilkinson; Anton Telechev; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Craig Burke; Cyril Dangerville; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henning Pottker; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Pascal Zwick; Paul Aly; Peter Leibiger; Raheela Aslam; Raja Kolli; Raphael von der Grun; Robert Thornton; Ruben Dijkstra; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/2.7.17/spring-boot-2.7.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Cep6N-WtliqS1Bwt9VHvOLMsI4OgpL6Aox8UU2nAUDk/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@2.7.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "2.7.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-1.3.4",
    "copyrightText" : "Copyright 2002-2008 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2006-2007 the original author or authors\nCopyright 2006-2012 the original author or authors\nCopyright 2006-2013 the original author or authors\nCopyright 2006-2014 the original author or authors\nCopyright 2006-2019 the original author or authors\nCopyright 2006-2020 the original author or authors\nCopyright 2006-2021 the original author or authors\nCopyright 2012-2013 the original author or authors\nCopyright 2012-2015 the original author or authors\nCopyright 2013-2019 the original author or authors\nCopyright 2014 the original author or authors\nCopyright 2014-2019 the original author or authors\nCopyright 2014-2022 the original author or authors\nCopyright 2015 the original author or authors\nCopyright 2015-2019 the original author or authors\nCopyright 2016-2018 the original author or authors\nCopyright 2019 the original author or authors\nCopyright 2022-2022 the original author or authors\n\nAuthors: Aldo Sinanaj; Aleksandr Shamukov; Artem Bilan; Chase Diem; Dan Garrette; Dave Syer; Gary Russell; Gianluca Medici; James Carr; Jon Travis; Josh Long; Kim In Hoi; Lucas Ward; Maksim Kita; Marius Grama; Mark Fisher; Markus Heiden; Michael Minella; Nathanael Roberts; Randell Callahan; Rob Harrop; Tomaz Fernandes",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/retry/spring-retry/1.3.4/spring-retry-1.3.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/keRcGiNePzPPzg_DVN0dv5Fvwgb738Q17XQXYeSab58/spring-retry-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.retry/spring-retry@1.3.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.springsource.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.retry/spring-retry",
    "versionInfo" : "1.3.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-5.7.11",
    "copyrightText" : "Copyright 2002-2011 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\nCopyright 2009-2022 the original author or authors\nCopyright 2012-2018 the original author or authors\nCopyright 2019 the original author or authors\nCopyright 2019-2021 the original author or authors\nCopyright 2020 the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jesus Ascama Arias; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus da Coregio; Marcus Da Coregio; Marten Deinum; Michael Vitz; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Tadaya Tsuyukubo; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/5.7.11/spring-security-config-5.7.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-vOPJi3EpusayEvVRL_IZ9xYxhlwKWbl-rVHtH8PMQY/spring-security-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@5.7.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-config",
    "versionInfo" : "5.7.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-5.7.11",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\nCopyright 2010-2016 the original author or authors\nCopyright 2010-2021 the original author or authors\nCopyright 2012-2016 the original author or authors\nCopyright 2015-2016 the original author or authors\nCopyright 2015-2018 the original author or authors\nCopyright 2015-2021 the original author or authors\nCopyright 2015-2022 the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Brian Moseley; Daniel Bustamante; Dan Zheng; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Greg Turnquist; hboutemy@apache.org Herve Boutemy; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; kenney@apache.org Kenney Westerhof; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Robbie Martinus; Rob Winch; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/5.7.11/spring-security-core-5.7.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HjuINE0Vnln7V5861eKtKE1kWaWxbSpcH1jemqD3z7U/spring-security-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@5.7.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-core",
    "versionInfo" : "5.7.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-5.7.11",
    "copyrightText" : "Copyright (c) 2006 Damien Miller <djm@mindrot.org>\nCopyright 2002-2011 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2011-2016 the original author or authors\nCopyright 2011-2018 the original author or authors\nCopyright 2011-2020 the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; William Tran",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/5.7.11/spring-security-crypto-5.7.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MQFQQpL-NZ0ueqa4mh6K4Ghn07cir8IXX1zbtGAaBko/spring-security-crypto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@5.7.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-crypto",
    "versionInfo" : "5.7.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-5.7.11",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004, 2005, 2006, 2009 Acegi Technology Pty Limited\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\nCopyright 2004-2021 the original author or authors\nCopyright 2009-2016 the original author or authors\nCopyright 2010-2016 the original author or authors\nCopyright 2010-2021 the original author or authors\nCopyright 2012-2016 the original author or authors\nCopyright 2012-2019 the original author or authors\nCopyright 2012-2021 the original author or authors\nCopyright 2015-2016 the original author or authors\nCopyright 2015-2018 the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alexey Nesterov; Andreas Senft; Andrey Grebnev; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christophe Gilles; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Dan Zheng; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; Manuel Jordan; Marcus Da Coregio; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; MD Sayem Ahmed; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Zeeshan Adnan",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/5.7.11/spring-security-web-5.7.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@5.7.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p5Iv3xoD5phKVg4R-x_Yk_CZ9OAZcAQMiBHNcdZuuOs/spring-security-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-web",
    "versionInfo" : "5.7.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2006 the original author or authors\nCopyright 2002-2007 the original author or authors\nCopyright 2002-2008 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; Oliver Gierke; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Steve Souza; the FactoryBean",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/5.3.30/spring-aop-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@5.3.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rGOwLQLd7zPESqp_udG4DUB9iZ0EjVhchDuZkuiyCRg/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aspects-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc.\nCopyright 2002-2012 the original author or authors\n\nAuthors: Adrian Colyer; Chris Beams; Costin Leau; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rod Johnson; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aspects/5.3.30/spring-aspects-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aspects@5.3.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GjwNWa02aSdLGs_iYN7Pghs5eIricG4DTIH0n5N6riI/spring-aspects-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aspects",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2007 the original author or authors\nCopyright 2002-2009 the original author or authors\nCopyright 2002-2010 the original author or authors\nCopyright 2002-2011 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBean. FactoryBean; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; the FactoryBean; the FactoryBean. </b> Therefore; Thomas Risberg",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/5.3.30/spring-beans-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@5.3.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HGOYnt7pDDYyMUxgh54PdTGd1Mo62haIIHM0bNTv1QM/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Alef Arendsen; Ben Manes; Brian Clozel; Chris Beams; Costin Leau; Darren Davison; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Mark Fisher; OW2 Consortium; Pivotal, Inc.; Rob Harrop; Sam Brannen; Stas Volsky; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context-support/5.3.30/spring-context-support-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AvvEoPUaA9REg7gZpCV0vB3WkLRM60NYnRNBvWa4zr8/spring-context-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context-support@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context-support",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2005 the original author or authors\nCopyright 2002-2007 the original author or authors\nCopyright 2002-2009 the original author or authors\nCopyright 2002-2011 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Colin Sampaleanu; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Nicholas Williams; Oliver Gierke; OW2 Consortium; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Ruslan Sibgatullin; Sam Brannen; Sebastien Deleuze; Seth Ladd; Stephane Nicoll; Tobias Montagna-Hay; Vedran Pavic; Victor Brown",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/5.3.30/spring-context-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BiKRJ5YXKVXOzQ75JGid0GUFrYn5TIlS3-pnbtBK88E/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003,2004 The Apache Software Foundation\nCopyright 2003 The Apache Software Foundation\nCopyright 2003,2004 The Apache Software Foundation\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2007 the original author or authors\nCopyright 2002-2009 the original author or authors\nCopyright 2002-2010 the original author or authors\nCopyright 2002-2011 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\nCopyright 2012-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Arjen Poutsma; Ben Hale; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Gary Russell; Gunnar Hillert; Hyunjin Choi; INRIA, France Telecom; Jason Zaugg; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Loic Ledoyen; Luke Taylor; Marius Bogoevici; Mark Fisher; Mark Paluch; Mark Pollack; Mattias Severson; Oleg Zhurakousky; Oliver Gierke; OW2 Consortium; Philippe Marschall; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Stephane Maldini; Stephane Nicoll; The Apache Software Foundation; Vladislav Kisel; Yanming Zhou",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/5.3.30/spring-core-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/um7c3LVAYAmfcR3wJkqR5A8Glip3C4m_dGDNmaS_9No/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2009 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; INRIA, France Telecom; Ivo Smid; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Oliver Becker; OW2 Consortium; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Stephane Nicoll",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/5.3.30/spring-expression-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0WGQ27rcrSTfRRAQNe--aT8Y1i8da54fhsiP5GZ8Oak/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/5.3.30/spring-jcl-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Y9Z2SGKp-BlDdQ1I5WMZJLIsrLqi6okIq2gipH58r-w/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jdbc-5.3.30",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc.\nCopyright 2002-2007 the original author or authors\n\nAuthors: Chris Baldwin; Chris Beams; Christian Dupuis; Costin Leau; Dave Syer; Dmitriy Kopylenko; Henning Pottker; INRIA, France Telecom; Jean-Pierre Pawlak; Jens Schauder; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jonathan Bregler; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Kiril Nugmanov; Mario Arias; Marten Deinum; Nicolas Debeissat; Nicolas Fabre; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Rick Evans; Rod Johnson; Sam Brannen; Sebastien Deleuze; Slawomir Dymitrow; Stephane Nicoll; Subhobrata Dey; Thomas Risberg; Yanming Zhou; lari.hotari@sagire.fi' Lari Hotari; roliv@us.ibm.com Ricardo N. Olivieri; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jdbc/5.3.30/spring-jdbc-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aMaP0FsBdlPLuXviTm1LUXYW13I7DWz7_O4cfAJhtEE/spring-jdbc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jdbc@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jdbc",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-tx-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003,2004 The Apache Software Foundation\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002 - 2022 Pivotal, Inc.\nCopyright (c) 2002-$ copyright Pivotal, Inc.\nCopyright (c) 2015-2021 the original\nCopyright 2002-2005 the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Agim Emruli; Alef Arendsen; Ales Justin; Alex Antonov; Andreas Ahlenstorf; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Artem Bilan; Ben Alex; Ben Hale; Ben Manes; Biju Kunjummen; Bob Lee; Bogdan Ilchyshyn; Brian Clozel; Chris Baldwin; Chris Beams; Chris Nokleberg; Christian Dupuis; Christoph Dreis; Christoph Strobl; Christophe Maillard; Clark Duplichien; Colin Sampaleanu; Costin Leau; Craig Andrews; Darren Davison; Dave Syer; David Boden; David Haraburda; David Harrigan; David Syer; Dimitrios Liapis; Dmitriy Kopylenko; Eddu Melendez; Elizabeth Chatman; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Eric Crampton; Erik Wiersma; Erwin Vervaet; Eugene Kuleshov; FactoryBean. FactoryBean; FactoryBeans FactoryBean; Fred Montariol; Gary Russell; Giovanni Dall'Oglio Risso; Graeme Rocher; Greg Turnquist; Gunnar Hillert; Henning Pottker; Hyunjin Choi; INRIA, France Telecom; Ibanga Enoobong Ime; Igor Manushin; Issam El-atif; Ivo Smid; Iwein Fuld; Jakub Narloch; James Strachan; Jason Zaugg; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Jens Schauder; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Jonathan Bregler; Joris Kuipers; Josh Cummings; Josh Long; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Kazuki Shimizu; Keith Donald; Kiril Nugmanov; Loic Ledoyen; Luciano Leggieri; Luke Taylor; Marcin Kamionowski; Marek Hawrylczak; Mario Arias; Marius Bogoevici; Mark Fisher; Mark Paluch; Mark Pollack; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; Mattias Severson; Michael Irwin; Michael Plod; Nicholas Williams; Nicolas Debeissat; Nicolas Fabre; Nicolas Le Bas; OW2 Consortium; Oleg Kalnichevski; Oleg Zhurakousky; Oliver Becker; Oliver Drotbohm; Oliver Gierke; Parviz Rozikov; Peter Meijer; Philippe Marschall; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Remy Guihard; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Ruslan Sibgatullin; Russell Allen; Sam Brannen; Satyapal Reddy; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sergey Tsypanov; Seth Ladd; Simon Basle; Simon Galperin; Sivaprasad Valluru; Slawomir Dymitrow; Stas Volsky; Stephane Maldini; Stephane Nicoll; Steve Souza; Subhobrata Dey; Tadaya Tsuyukubo; The Apache Software Foundation; Thierry Templier; Thomas Risberg; Tobias Montagna-Hay; Trevor D. Cook; Valentin Shakhov; Vedran Pavic; Victor Brown; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; Yevhenii Melnyk; dmitry.katsubo@gmail.com Dmitry Katsubo; lari.hotari@sagire.fi' Lari Hotari; roliv@us.ibm.com Ricardo N. Olivieri; the FactoryBean; the FactoryBean. </b> Therefore; the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-tx/5.3.30/spring-tx-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oVu3D-rNOwCtDfV8osn7CYQ7qsYrUYUfmYiMEdsNyrM/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-tx@5.3.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-tx",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2005 the original author or authors\nCopyright 2002-2007 the original author or authors\nCopyright 2002-2009 the original author or authors\nCopyright 2002-2010 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; dmitry.katsubo@gmail.com Dmitry Katsubo; Eddu Melendez; Greg Turnquist; INRIA, France Telecom; Jakub Narloch; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Luciano Leggieri; Marek Hawrylczak; Mark Paluch; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; Oleg Kalnichevski; Oliver Gierke; OW2 Consortium; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/5.3.30/spring-web-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@5.3.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zCYSUrOZsts4vhAtDJogqWyOInUYd4-mtcswi86-d8g/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-5.3.30",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium.\n" ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2023 Pivotal, Inc\nCopyright 2002-2007 the original author or authors\nCopyright 2002-2010 the original author or authors\nCopyright 2002-2012 the original author or authors\nCopyright 2002-2013 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2002-2015 the original author or authors\nCopyright 2002-2016 the original author or authors\nCopyright 2002-2017 the original author or authors\nCopyright 2002-2018 the original author or authors\nCopyright 2002-2019 the original author or authors\nCopyright 2002-2020 the original author or authors\nCopyright 2002-2021 the original author or authors\nCopyright 2002-2022 the original author or authors\nCopyright 2002-2023 the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; Nicolas Le Bas; Oliver Gierke; OW2 Consortium; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Thomas Risberg",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/5.3.30/spring-webmvc-5.3.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@5.3.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wO7ToRpkLGWYFnHTMITYuw3UI-JlxJsXUV434TpUjQk/spring-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-webmvc",
    "versionInfo" : "5.3.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.xerial-sqlite-jdbc-3.42.0.0",
    "copyrightText" : "Copyright 2016 Magnus Reftel\nCopyright 2007 Taro L. Saito\nCopyright (c) 2006, David Crawshaw\nCopyright (c) 2007 David Crawshaw <david@zentus.com>\nCopyright (c) 2021 Gauthier Roebroeck <gauthier.roebroeck@gmail.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.42.0.0/sqlite-jdbc-3.42.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.xerial/sqlite-jdbc@3.42.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BwMwxHSBXwu-n95BwHSmmM_F6DrpnlbBBw9VWQ9TYqE/sqlite-jdbc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/xerial/sqlite-jdbc",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.xerial/sqlite-jdbc",
    "versionInfo" : "3.42.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-1.30",
    "copyrightText" : "Copyright (c) 2008 Google Inc\nCopyright (c) 2008, SnakeYAML\nCopyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/1.30/snakeyaml-1.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@1.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y6CRK2LWbzNZt4Ej1YPlwz3txjJfJKnZf1iAB9fA49M/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "1.30"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-billing-2.0.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.activation-javax.activation-api-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.12.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.activation-activation-1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-math3-3.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.mail-javax.mail-api-1.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.4.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-tx-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.5.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-csv-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.4.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jdbc-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.woodstox-woodstox-core-6.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.ozlerhakan-poiji-3.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.xerial-sqlite-jdbc-3.42.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-1.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.virtuald-curvesapi-1.06"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-9.0.82"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-9.0.82"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-5.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tika-tika-core-1.26"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-lite-5.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-5.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.9.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-persistence-extension-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-31.0.1-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-1.13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.ews-java-api-ews-java-api-2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-auth-0.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-mail-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-content-type-2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-lang-tag-1.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-core-2.0.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-aop-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-5.29.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jdbc-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.opencsv-opencsv-5.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-4.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-9.25.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-oauth2-oidc-sdk-9.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okio-okio-jvm-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.activation-jakarta.activation-1.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.mail-jakarta.mail-1.6.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aspects-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-SparseBitSet-1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-5.7.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.9.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-5.7.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.mail-javax.mail-1.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-5.7.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-4.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-5.7.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.8.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-1.3.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-5.3.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-identity-1.5.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.13.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.9.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.2.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.9.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.2.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-core-http-netty-1.12.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-core-1.30.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.1.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.25.0-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-2.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-2.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-2.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-1.7.36"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.100.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-2.7.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-1.7.36"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.36"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.json-json-20140107"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.15.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.checkerframework-checker-qual-3.12.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-kqueue-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.woodstox-stax2-api-4.2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-windows-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk15on-1.67"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.61.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk15on-1.67"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.xmlbeans-xmlbeans-5.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.100.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.8.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.100.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-kqueue-4.1.100.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-9.0.82"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.0.38"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.0.38"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.4.33"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-2.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-2.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-2.1.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-jakarta.inject-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.4.51.v20230217"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-1.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.18",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.4.51.v20230217"
  } ]
}