{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-09-25T14:33:53Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "billing-v2.0.32",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-scancode-iptc-2006",
    "extractedText" : "Non-Exclusive License Agreement for International\nPress Telecommunications Council Specifications\nand Related Documentation and Software\n\nIMPORTANT: International Press Telecommunications Council (IPTC) standard\nspecifications for news (the Specifications) and supporting software, documentation,\ntechnical reports, web sites and other material related to the Specifications (the\nMaterials) including any document accompanying this license (the Document),\nwhether in a paper or electronic format, are made available to you subject to the\nterms stated below. By obtaining, using and/or copying the Specifications or\nMaterials, you (the licensee) agree that you have read, understood, and will comply\nwith the following terms and conditions.\n\n1. The Specifications and Materials are licensed for use only on the condition that\nyou agree to be bound by the terms of this license. Subject to this and other\nlicensing requirements contained herein, you may, on a non-exclusive basis,\nuse the Specifications and Materials.\n\n2. The IPTC openly provides the Specifications and Materials for voluntary use by\nindividuals, partnerships, companies, corporations, organizations and any other\nentity for use at the entity’s own risk. This disclaimer, license and release is\nintended to apply to the IPTC, its officers, directors, agents, representatives,\nmembers, contributors, affiliates, contractors, or co-venturers acting jointly or\nseverally.\n\n3. The Document and translations thereof may be copied and furnished to others,\nand derivative works that comment on or otherwise explain it or assist in its\nimplementation may be prepared, copied, published and distributed, in whole\nor in part, without restriction of any kind, provided that the copyright and\nlicense notices and references to the IPTC appearing in the Document and the\nterms of this Specifications License Agreement are included on all such copies\nand derivative works. Further, upon the receipt of written permission from the\nIPTC, the Document may be modified for the purpose of developing applications\nthat use IPTC Specifications or as required to translate the Document into\nlanguages other than English.\n\n4. Any use, duplication, distribution, or exploitation of the Document and\nSpecifications and Materials in any manner is at your own risk.\n\n5. NO WARRANTY, EXPRESSED OR IMPLIED, IS MADE REGARDING THE\nACCURACY, ADEQUACY, COMPLETENESS, LEGALITY, RELIABILITY OR\nUSEFULNESS OF ANY INFORMATION CONTAINED IN THE DOCUMENT OR IN\nANY SPECIFICATION OR OTHER PRODUCT OR SERVICE PRODUCED OR\nSPONSORED BY THE IPTC. THE DOCUMENT AND THE INFORMATION\nCONTAINED HEREIN AND INCLUDED IN ANY SPECIFICATION OR OTHER\nPRODUCT OR SERVICE OF THE IPTC IS PROVIDED ON AN \"AS IS\" BASIS. THE\nIPTC DISCLAIMS ALL WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, ANY ACTUAL OR ASSERTED WARRANTY OF\nNON-INFRINGEMENT OF PROPRIETARY RIGHTS, MERCHANTABILITY, OR\nFITNESS FOR A PARTICULAR PURPOSE. NEITHER THE IPTC NOR ITS\nCONTRIBUTORS SHALL BE HELD LIABLE FOR ANY IMPROPER OR INCORRECT\nUSE OF INFORMATION. NEITHER THE IPTC NOR ITS CONTRIBUTORS ASSUME\nANY RESPONSIBILITY FOR ANYONE'S USE OF INFORMATION PROVIDED BY THE\nIPTC. IN NO EVENT SHALL THE IPTC OR ITS CONTRIBUTORS BE LIABLE TO\nANYONE FOR DAMAGES OF ANY KIND, INCLUDING BUT NOT LIMITED TO,\nCOMPENSATORY DAMAGES, LOST PROFITS, LOST DATA OR ANY FORM OF\nSPECIAL, INCIDENTAL, INDIRECT, CONSEQUENTIAL OR PUNITIVE DAMAGES\nOF ANY KIND WHETHER BASED ON BREACH OF CONTRACT OR WARRANTY,\nTORT, PRODUCT LIABILITY OR OTHERWISE.\n\n6. The IPTC takes no position regarding the validity or scope of any Intellectual\nProperty or other rights that might be claimed to pertain to the implementation\nor use of the technology described in the Document or the extent to which any\nlicense under such rights might or might not be available. The IPTC does not\nrepresent that it has made any effort to identify any such rights. Copies of\nclaims of rights made available for publication, assurances of licenses to be\nmade available, or the result of an attempt made to obtain a general license or\npermission for the use of such proprietary rights by implementers or users of\nthe Specifications and Materials, can be obtained from the Managing Director of\nthe IPTC.\n\n7. By using the Specifications and Materials including the Document in any\nmanner or for any purpose, you release the IPTC from all liabilities, claims,\ncauses of action, allegations, losses, injuries, damages, or detriments of any\nnature arising from or relating to the use of the Specifications, Materials or any\nportion thereof. You further agree not to file a lawsuit, make a claim, or take\nany other formal or informal legal action against the IPTC, resulting from your\nacquisition, use, duplication, distribution, or exploitation of the Specifications,\nMaterials or any portion thereof. Finally, you hereby agree that the IPTC is not\nliable for any direct, indirect, special or consequential damages arising from or\nrelating to your acquisition, use, duplication, distribution, or exploitation of the\nSpecifications, Materials or any portion thereof.\n\n8. Specifications and Materials may be downloaded or copied provided that ALL\ncopies retain the ownership, copyright and license notices.\n\n9. Materials may not be edited, modified, or presented in a context that creates a\nmisleading or false impression or statement as to the positions, actions, or\nstatements of the IPTC.\n\n10. The name and trademarks of the IPTC may not be used in advertising,\npublicity, or in relation to products or services and their names without the\nspecific, written prior permission of the IPTC. Any permitted use of the\ntrademarks of the IPTC, whether registered or not, shall be accompanied by an\nappropriate mark and attribution, as agreed with the IPTC.\n\n11. Specifications may be extended by both members and non-members to provide\nadditional functionality (Extended Specifications) provided that there is a clear\nrecognition of the IPTC IP and its ownership in the Extended Specifications and\nthe related documentation and provided that the extensions are clearly\nidentified and provided that a perpetual license is granted by the creator of the\nExtended Specifications for other members and non-members to use the\nExtended Specifications and to continue extensions of the Extended\nSpecifications. The IPTC does not waive any of its rights in the Specifications\nand Materials in this context. The Extended Specifications may be considered\nthe intellectual property of their creator. The IPTC expressly disclaims any\nresponsibility for damage caused by an extension to the Specifications.\n\n12. Specifications and Materials may be included in derivative work of both\nmembers and non-members provided that there is a clear recognition of the\nIPTC IP and its ownership in the derivative work and its related documentation.\nThe IPTC does not waive any of its rights in the Specifications and Materials in\nthis context. Derivative work in its entirety may be considered the intellectual\nproperty of the creator of the work .The IPTC expressly disclaims any\nresponsibility for damage caused when its IP is used in a derivative context.\n\n13. This Specifications License Agreement is perpetual subject to your conformance\nto the terms of this Agreement. The IPTC may terminate this Specifications\nLicense Agreement immediately upon your breach of this Agreement and, upon\nsuch termination you will cease all use, duplication, distribution, and/or\nexploitation in any manner of the Specifications and Materials.\n\n14. This Specifications License Agreement reflects the entire agreement of the\nparties regarding the subject matter hereof and supersedes all prior\nagreements or representations regarding such matters, whether written or oral.\nTo the extent any portion or provision of this Specifications License Agreement\nis found to be illegal or unenforceable, then the remaining provisions of this\nSpecifications License Agreement will remain in full force and effect and the \nillegal or unenforceable provision will be construed to give it such effect as it\nmay properly have that is consistent with the intentions of the parties.\n\n15. This Specifications License Agreement may only be modified in writing signed\nby an authorized representative of the IPTC.\n\n16. This Specifications License Agreement is governed by the law of United\nKingdom, as such law is applied to contracts made and fully performed in the\nUnited Kingdom. Any disputes arising from or relating to this Specifications\nLicense Agreement will be resolved in the courts of the United Kingdom. You\nconsent to the jurisdiction of such courts over you and covenant not to assert\nbefore such courts any objection to proceeding in such forums.\n\nIF YOU DO NOT AGREE TO THESE TERMS YOU MUST CEASE ALL USE OF THE\nSPECIFICATIONS AND MATERIALS NOW.\nIF YOU HAVE ANY QUESTIONS ABOUT THESE TERMS, PLEASE CONTACT THE\nMANAGING DIRECTOR OF THE INTERNATIONAL PRESS TELECOMMUNICATION\nCOUNCIL.\nAS OF THE DATE OF THIS REVISION OF THIS SPECIFICATIONS LICENSE\nAGREEMENT YOU MAY CONTACT THE IPTC at http://www.iptc.org.\nLicense agreement version of: 30 January 2006",
    "name" : "LicenseRef-scancode-iptc-2006"
  }, {
    "licenseId" : "LicenseRef-scancode-ms-specification",
    "extractedText" : "Permission to copy, display and distribute the contents of this document (the\n\"Specification\"), in any medium for any purpose without fee or royalty is\nhereby granted, provided that you include the following notice on ALL copies of\nthe Specification, or portions thereof, that you make:\nCopyright (c) Microsoft Corporation.All rights reserved.Permission to copy,\ndisplay and distribute this document is available at:\nhttp://msdn.microsoft.com/library/en-us/odcXMLRef/html/odcXMLRefLegalNotice.asp?frame=true.\n\nNo right to create modifications or derivatives of this Specification is\ngranted herein. There is a separate patent license available to parties\ninterested in implementing software programs that can read and write files that\nconform to the Specification.This patent license is available at this\nlocation:http://www.microsoft.com/mscorp/ip/format/xmlpatentlicense.asp.\n\nTHE SPECIFICATION IS PROVIDED \"AS IS\" AND MICROSOFT MAKES NO REPRESENTATIONS OR\nWARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR TITLE;\nTHAT THE CONTENTS OF THE SPECIFICATION ARE SUITABLE FOR ANY PURPOSE; NOR THAT\nTHE IMPLEMENTATION OF SUCH CONTENTS WILL NOT INFRINGE ANY THIRD PARTY PATENTS,\nCOPYRIGHTS, TRADEMARKS OR OTHER RIGHTS. MICROSOFT WILL NOT BE LIABLE FOR ANY\nDIRECT, INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF\nOR RELATING TO ANY USE OR DISTRIBUTION OF THE SPECIFICATION.\n\nThe name and trademarks of Microsoft may NOT be used in any manner, including\nadvertising or publicity pertaining to the Specification or its contents\nwithout specific, written prior permission. Title to copyright in the\nSpecification will at all times remain with Microsoft. No other rights are\ngranted by implication, estoppel or otherwise.",
    "name" : "LicenseRef-scancode-ms-specification"
  }, {
    "licenseId" : "LicenseRef-scancode-protobuf",
    "extractedText" : "Redistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n    * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n    * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n    * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\nCode generated by the Protocol Buffer compiler is owned by the owner\nof the input file used when generating it.  This code is not\nstandalone and requires a support library to be linked with it.  This\nsupport library is itself covered by the above license.",
    "name" : "LicenseRef-scancode-protobuf"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-billing-v2.0.32-126e7adc-c375-4d87-b941-58f65dcb2e52",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-billing-2.0.32",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/billing@2.0.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "billing",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "2.0.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.18",
    "copyrightText" : "Copyright (c) 1999-2010, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.18/logback-classic-1.5.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0yA6fka_SqNsLHYNf7NpSqnoc-RSzmG4PdCeMZbqGA8/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.5.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.18",
    "copyrightText" : "Copyright (c) 1999-2002, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.18/logback-core-1.5.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eAqpjXnaPojYOADWB-IhGc4KPEI1ubqT-YP8sletSoc/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.5.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-core-http-netty-1.15.1",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright (c) Microsoft Corporation\nPortions Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-core-http-netty/1.15.1/azure-core-http-netty-1.15.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Rsv5WTE354x47bj3QFWHytxfHgZYqqSBx9kyFD7G1L8/azure-core-http-netty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-core-http-netty@1.15.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-core-http-netty",
    "versionInfo" : "1.15.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-core-1.49.1",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) Microsoft Corporation\nPortions Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-core/1.49.1/azure-core-1.49.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-core@1.49.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/09IR1HjFL0zmq6IEaMh9pol6CCzlmRXFQb8KWd40aag/azure-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-core",
    "versionInfo" : "1.49.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-identity-1.12.2",
    "copyrightText" : "Copyright 2015 Jo Rabin\nCopyright (c) Microsoft Corporation\nCopyright (c) 2007 The Guava Authors\nCopyright (c) 2000 - 2021 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nPortions Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.\n\nAuthors: Chris Nokleberg; Jo Rabin; Keith Bottner; Microsoft Corporation; The Guava Authors; The Legion of the Bouncy Castle Inc.; VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-identity/1.12.2/azure-identity-1.12.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-identity@1.12.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/04RgzTV4ufM6aftUms_5ns28eZLoHTzhd-Y3D-5JzB4/azure-identity-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-identity",
    "versionInfo" : "1.12.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-json-1.1.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-json/1.1.0/azure-json-1.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-json@1.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mH3hMMNDyFCyTAq2DmF3Tar5N8R3Hf7qEnlV3jg9hzg/azure-json-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-json",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.azure-azure-xml-1.0.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/azure/azure-xml/1.0.0/azure-xml-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.azure/azure-xml@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sK4Nm53BiOAF4xYuJqxeGoUQQlk9y6XOtbtT0iwVicc/azure-xml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Azure/azure-sdk-for-java",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.azure/azure-xml",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.18.4",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.18.4/jackson-annotations-2.18.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OOXcMU8XactuR6Wb2nn2Toj73o4uxLIqsbs4LXgWYl8/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.18.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.18.4.1",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.18.4.1/jackson-core-2.18.4.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OOGQPXk-mwdtUTmaMZdcaMd87BtYSJEAummT-SSpSzU/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.18.4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.18.4",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.18.4/jackson-databind-2.18.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q7VeXu_oDamU4Ku6IsUN7n09gXSyQr6k2jLo58RN4XY/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.18.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-csv-2.18.4",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-csv/2.18.4/jackson-dataformat-csv-2.18.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv@2.18.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2WIi5bBvtF2Tn35GXeAJD1CYN4z1A13bNeEK34Nab_E/jackson-dataformat-csv-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv",
    "versionInfo" : "2.18.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.18.4",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.18.4/jackson-datatype-jdk8-2.18.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Zgqa4jRo95koIVjoEASwPQUTrwzEelJidzN-T6L1yXM/jackson-datatype-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8",
    "versionInfo" : "2.18.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.18.4",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.18.4/jackson-datatype-jsr310-2.18.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q5P9waQQBGBc5--RPwwSVEcYWO-klal6q_VCHdbI8Lo/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.18.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.18.4",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.18.4/jackson-module-parameter-names-2.18.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qi6EGM5F86XLdJ3A_ZR6xrOGQEAY0MylLh4mPMlEfAI/jackson-module-parameter-names-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.18.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names",
    "versionInfo" : "2.18.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.0",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.0/classmate-1.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KFoYmob4IielwcBbSODPwx8bCZb0Wm6Ld6f9GEz7bHo/classmate-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/java-classmate",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml/classmate",
    "versionInfo" : "1.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.ozlerhakan-poiji-3.0.3",
    "copyrightText" : "Copyright (c) 2017-2020 Poiji",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/ozlerhakan/poiji/3.0.3/poiji-3.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uWJ-sgmYOJCEbVbOwg1LgHm3enoOiTrcER4L9nIrAAE/poiji-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.ozlerhakan/poiji@3.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/ozlerhakan/poiji",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.ozlerhakan/poiji",
    "versionInfo" : "3.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1",
    "copyrightText" : "Copyright 2013 Stephen Connolly",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T3RxVpunqiGuBA0KfR3vP5GJ-nvyG4QAHLDQwlAWMMk/jcip-annotations-~-1-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://stephenc.github.com/jcip-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.stephenc.jcip/jcip-annotations",
    "versionInfo" : "1.0-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.virtuald-curvesapi-1.08",
    "copyrightText" : "Copyright (c) 2005, Graph Builder",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/virtuald/curvesapi/1.08/curvesapi-1.08.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nGodg9OLUGvU6UuyHofgz3A7u-eg-dxl4Z7VIuHgbLg/curvesapi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.virtuald/curvesapi@1.08",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/virtuald/curvesapi",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.virtuald/curvesapi",
    "versionInfo" : "1.08"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.11.0",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.11.0/gson-2.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ln2l1qGuPWWd7boZD3ndl8OELpLVXTzj_ZqeEnLI-_c/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.36.0/error_prone_annotations-2.36.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9bWGnK58Q_0GOKefs5N_WRrO3saRKkdOB8y5ybh6oOg/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.36.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3",
    "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.4.8-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-4.31.0",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/protobuf/protobuf-java/4.31.0/protobuf-java-4.31.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zWpUIYmaxMBJuzufzG39bpu2HO8Ulvq44Mg6B4Y4-PU/protobuf-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.protobuf/protobuf-java@4.31.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.protobuf/protobuf-java",
    "versionInfo" : "4.31.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-persistence-extension-1.3.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/azure/msal4j-persistence-extension/1.3.0/msal4j-persistence-extension-1.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1Uv09gxRAmOa4MgPhhvKqZ1404ydySbUHreGJwbXD7I/msal4j-persistence-extension-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.azure/msal4j-persistence-extension@1.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/AzureAD/microsoft-authentication-library-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.azure/msal4j-persistence-extension",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-1.13.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/azure/msal4j/1.13.0/msal4j-1.13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3G5d4ELPsZWGeMtWDWxFS4_pEltEiJiuWAO8u8MfYbA/msal4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.azure/msal4j@1.13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/AzureAD/microsoft-authentication-library-for-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.azure/msal4j",
    "versionInfo" : "1.13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.ews-java-api-ews-java-api-2.0",
    "copyrightText" : "Copyright (c) 2012 Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/ews-java-api/ews-java-api/2.0/ews-java-api-2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dBGlPkkf2fMYRb0brsZDn8Me1SosHIw-gRFuQPZl7H0/ews-java-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.ews-java-api/ews-java-api@2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.microsoft.com/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.ews-java-api/ews-java-api",
    "versionInfo" : "2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-auth-0.3.0",
    "copyrightText" : "Copyright 2008-2011 Google Inc.\nCopyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/graph/microsoft-graph-auth/0.3.0/microsoft-graph-auth-0.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d0Ym_fWJoyIZnMzRLd5hlg5G8VZ7PG6ZB9qh2lRpf6E/microsoft-graph-auth-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.graph/microsoft-graph-auth@0.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoftgraph/msgraph-sdk-java-auth",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.graph/microsoft-graph-auth",
    "versionInfo" : "0.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-core-2.0.13",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/graph/microsoft-graph-core/2.0.13/microsoft-graph-core-2.0.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.graph/microsoft-graph-core@2.0.13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yt_3DlYiP5E5N_2tBEXkfZ9K657BwG4q3RRgObdnI0k/microsoft-graph-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoftgraph/msgraph-sdk-java-core",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.graph/microsoft-graph-core",
    "versionInfo" : "2.0.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-5.29.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/microsoft/graph/microsoft-graph/5.29.0/microsoft-graph-5.29.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.microsoft.graph/microsoft-graph@5.29.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qF3eylbOFrpGMxPhWVK30w8_NHpkRZx5tONp6L5SsVU/microsoft-graph-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoftgraph/msgraph-sdk-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.microsoft.graph/microsoft-graph",
    "versionInfo" : "5.29.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-content-type-2.2",
    "copyrightText" : "Copyright 2020, Connect2id Ltd and contributors\n\nAuthors: Connect2id Ltd and contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/content-type/2.2/content-type-2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/content-type@2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mD9_KnqtreMRt19QIFnhV1OmdSsPlQOsHXU8VvaaP4/content-type-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-content-type",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/content-type",
    "versionInfo" : "2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-lang-tag-1.6",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/lang-tag/1.6/lang-tag-1.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/lang-tag@1.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0q8D1MFXGXCLSe9IQdwvwDhV9VMNU92FTihVg2osLrs/lang-tag-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-language-tags",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/lang-tag",
    "versionInfo" : "1.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.6/nimbus-jose-jwt-10.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s5CzC5UPQfCya0w6T9tVplJoiSuLf36E7C7Dc3SSZSs/nimbus-jose-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/nimbus-jose-jwt",
    "versionInfo" : "10.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-oauth2-oidc-sdk-9.35",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd and contributors\n\nAuthors: Connect2id Ltd and contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/oauth2-oidc-sdk/9.35/oauth2-oidc-sdk-9.35.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/06hkH-rn1LaZiLLFPFqKR8v0328l7P5Vp0UvT-a_wvA/oauth2-oidc-sdk-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/oauth2-oidc-sdk",
    "versionInfo" : "9.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.opencsv-opencsv-5.7.1",
    "copyrightText" : "Copyright 2018 Andre Levandovski Rosot\nCopyright 2017 Andrew Rucker Jones\nCopyright 2005 Bytecode Pty Ltd.\nCopyright 2007 Kyle Miller\nCopyright 2013 Mark Rogers\nCopyright 2015 Scott Conway\nCopyright 2017 arjones",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/opencsv/opencsv/5.7.1/opencsv-5.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qlbpl-h-LpBCSFnbytToQRyaZTPoYh73Fp42cFiJhh8/opencsv-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.opencsv/opencsv@5.7.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://opencsv.sf.net",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.opencsv/opencsv",
    "versionInfo" : "5.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-4.10.0",
    "copyrightText" : "Copyright 2013 Twitter, Inc.\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2010 The Android Open Source Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp/4.10.0/okhttp-4.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okhttp3/okhttp@4.10.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8k72NNKUPhXPwTPFcQtrd0RTaOY1TpwltFc3BQk1voA/okhttp-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://square.github.io/okhttp/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okhttp3/okhttp",
    "versionInfo" : "4.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okio-okio-jvm-3.0.0",
    "copyrightText" : "Copyright 2014 Square Inc.\nCopyright (c) 2014 Square, Inc.\nCopyright (c) 2020 Square, Inc. and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okio/okio-jvm/3.0.0/okio-jvm-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OSsIdjtIjNjqDaidkROMh7QdaDXZHEHygK41AbHLvL8/okio-jvm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okio/okio-jvm@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/square/okio/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okio/okio-jvm",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-5.1.0",
    "copyrightText" : "Copyright (c) 2013 Brett Wooldridge",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/HikariCP/5.1.0/HikariCP-5.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RCzKUmqqTqu5Iil5392hwFDV6PdHnugMBvd1D70BY3c/HikariCP-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/HikariCP@5.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/HikariCP",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/HikariCP",
    "versionInfo" : "5.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-SparseBitSet-1.3",
    "copyrightText" : "Copyright (c) 2010 Paladin Software Incorporated, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/SparseBitSet/1.3/SparseBitSet-1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SF-JdIqeQJbP3YpdnFDj8b9nFd66KbLi0wXAF2U0Nic/SparseBitSet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/SparseBitSet@1.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/SparseBitSet",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/SparseBitSet",
    "versionInfo" : "1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.17.2",
    "copyrightText" : "Copyright 2002-2024 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.17.2/commons-codec-1.17.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.17.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ka2fcg7Y8yEYU0WnwsaMMOwblubmgKDD3R113pO0R5s/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.21.0/commons-io-2.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AU79RM8_xf3CmPeGvp4-4u-2NlgOAhhLIM159CBDq_M/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2",
    "copyrightText" : "Copyright 2003-2014 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.2/commons-logging-1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEsO0wEV22BXvwXMcYIR6zdrwvnRai3_dErN8ue7Qxs/commons-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-logging/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-logging/commons-logging",
    "versionInfo" : "1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.14.8",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.14.8/micrometer-commons-1.14.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZCBmlP2jOVBNDDFcaKQxGv2mykzIzktavSFtW0XWATg/micrometer-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.14.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-commons",
    "versionInfo" : "1.14.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.14.8",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.14.8/micrometer-core-1.14.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.14.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7lkWft09yhpV0fA-wtjzvDHc9eBvKUqJ8niswoUut6g/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.14.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.14.8",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.14.8/micrometer-jakarta9-1.14.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VL2U9eL933EIest786oSHLrgkClvQXRKN3i_afIbdCI/micrometer-jakarta9-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.14.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-jakarta9",
    "versionInfo" : "1.14.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.14.8",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.14.8/micrometer-observation-1.14.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C5cFqd5Llnq2PLQtG8_b6zSISZjYOMM63-UdkGcG1oE/micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.14.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-observation",
    "versionInfo" : "1.14.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.14.8",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.14.8/micrometer-registry-prometheus-1.14.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qBpNyostrnTpMTN0AGjSDv3nsfPvutWlkZT6sOgOwYM/micrometer-registry-prometheus-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-registry-prometheus",
    "versionInfo" : "1.14.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.122.Final/netty-buffer-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7_RnE1fKKhh4oxiPRTMehEeft1yQ4xCcF014FfazswE/netty-buffer-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-buffer/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-buffer",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.122.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.122.Final/netty-codec-dns-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W_6oO0QL8-NqOh9HsOrt76XyUPMqwTTN0ijcUWFQ_-k/netty-codec-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-dns",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.122.Final",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2014 Twitter, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http2/4.1.122.Final/netty-codec-http2-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Q5t2mCjepiQlQd0wBNiNjCzBYxa0JVD67zC2E31JTZ0/netty-codec-http2-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http2/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http2",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.122.Final/netty-codec-http-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5CXGbmmOfn73nrST1rm-oVQCo7kjDOpiCA4ykCeMpNY/netty-codec-http-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-socks/4.1.122.Final/netty-codec-socks-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-socks@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9ZQ6ovR6Fga4j4IbEv8gWCrY82DW2hdcG6OeKitgI5I/netty-codec-socks-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-socks/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-socks",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.122.Final/netty-codec-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Bz0F-EhGAIoJQZUyKV6lUtBmHyMdDe7hR1dTJrowanc/netty-codec-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec/",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.122.Final/netty-common-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ixh0txCVdKaQABjzgEj-Fgqb9PFQ8l8nfmN0-GFcXBo/netty-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-common",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.122.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler-proxy/4.1.122.Final/netty-handler-proxy-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RbQhD9x62QkJm0PeXFesHOz2T1kp05fHJaPmaCViVCU/netty-handler-proxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler-proxy@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler-proxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler-proxy",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.122.Final/netty-handler-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ajC76KuZdPPWf2y3lGb1zME8bdaNzupp9hiQPFb2Z5Y/netty-handler-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.122.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-classes-macos/4.1.122.Final/netty-resolver-dns-classes-macos-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bcy1HN9H7ILHyI6LVeAOETblv9le2RqEs6fSJVJS2RM/netty-resolver-dns-classes-macos-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-classes-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-classes-macos",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.122.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2011, Google Inc.\nCopyright 2013 Google Inc.\nCopyright 2009-2010 Ning, Inc.\nCopyright 2006, 2010 The Apache Software Foundation\nCopyright 2014 The Netty Project\nCopyright 2019 The Netty Project\nCopyright 2014 Twitter, Inc.\nCopyright (c) 2004-2006, 2008, 2009, 2011 Apple Inc.\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2009 Carl Bystrsm\nCopyright (c) 2014 Cory Benfield\nCopyright (c) 2012 FuseSource, Inc. (https://fusesource.com)\nCopyright (c) 2010-2013 Jeff Mesnil (http://jmesnil.net/)\nCopyright (c) 2011, Joe Walnes, Aslak Hellesoy and contributors\nCopyright (c) 2011, Joe Walnes and contributors\nCopyright (c) 2010-2011 Matthew J. Francis and Contributors\nCopyright (c) 2004-2007 QOS.ch\nCopyright (c) 2012, 2014, 2015, 2016 Tatsuhiro Tsujikawa\nCopyright (c) 2000 - 2013 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2009 William Kinney\nCopyright (c) 2003-2008 Yuta Mori\nCopyright (c) 2020 ../../../../index.html' The Netty project\nCopyright (c) 2012, 2014, 2015, 2016 nghttp2 contributors\nCopyright (c) 2015-present, Luben Karavelov\nCopyright (c) 2000,2001,2002,2003,2004 ymnk, JCraft,Inc.\n\nAuthors: Adrien Grand; Apple Inc.; Bjoern Hoehrmann; Carl Bystrsm; Cory Benfield; Doug Lea; FuseSource, Inc.; Google Inc.; Jeff Mesnil; Joe Walnes and contributors; Joe Walnes, Aslak Hellesoy and contributors; Luben Karavelov; Matthew J. Francis; Matthew J. Francis and Contributors; Ning, Inc.; QOS.ch; Robert Harder; Tatsuhiro Tsujikawa; Tatu Saloranta; The Apache Software Foundation; The Legion of the Bouncy Castle Inc.; The Netty Project; Twitter, Inc.; William Kinney; Yuta Mori; index.html' The Netty project; nghttp2 contributors; ymnk, JCraft,Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-native-macos/4.1.122.Final/netty-resolver-dns-native-macos-4.1.122.Final-osx-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s0R9o5u-GApQ2fSyBedgVuD4FQnIb9spKAfVQC_6Nc8/netty-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.122.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CC-PDDC AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND APSL-2.0 AND LicenseRef-scancode-protobuf AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-native-macos",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.122.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.122.Final/netty-resolver-dns-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UWxNtDkIxthVS2Cv5y6MA7vwPTjjQx_tbs0abZf9B54/netty-resolver-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.122.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.122.Final/netty-resolver-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ejS7RpQTN_juRctJcXeLEptU5hjhmhWnv1KNZ-4Um9U/netty-resolver-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.72.Final/netty-tcnative-boringssl-static-2.0.72.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.72.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yFzALH0sdZUKJ4QG0KN7vwxqD6Oh-p3w_WaZ8H056Zg/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-linux-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.72.Final/netty-tcnative-boringssl-static-2.0.72.Final-linux-aarch_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.72.Final?classifier=linux-aarch_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yFzALH0sdZUKJ4QG0KN7vwxqD6Oh-p3w_WaZ8H056Zg/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.72.Final/netty-tcnative-boringssl-static-2.0.72.Final-linux-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.72.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yFzALH0sdZUKJ4QG0KN7vwxqD6Oh-p3w_WaZ8H056Zg/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-osx-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.72.Final/netty-tcnative-boringssl-static-2.0.72.Final-osx-aarch_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yFzALH0sdZUKJ4QG0KN7vwxqD6Oh-p3w_WaZ8H056Zg/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.72.Final?classifier=osx-aarch_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.72.Final/netty-tcnative-boringssl-static-2.0.72.Final-osx-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yFzALH0sdZUKJ4QG0KN7vwxqD6Oh-p3w_WaZ8H056Zg/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.72.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-windows-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.72.Final/netty-tcnative-boringssl-static-2.0.72.Final-windows-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yFzALH0sdZUKJ4QG0KN7vwxqD6Oh-p3w_WaZ8H056Zg/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.72.Final?classifier=windows-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.72.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-classes/2.0.72.Final/netty-tcnative-classes-2.0.72.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pq42J0t9lWwsyBuHpOg5rUIdEZjok_4vNkEvPdpZGIo/netty-tcnative-classes-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.72.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-classes",
    "versionInfo" : "2.0.72.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.122.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.122.Final/netty-transport-classes-epoll-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA_5FDgoLZvGsALw_3Ez0vdMOlDtrwt8j-lRwzzJ0W0/netty-transport-classes-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-classes-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-epoll",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-kqueue-4.1.122.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-kqueue/4.1.122.Final/netty-transport-classes-kqueue-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DE2rDix1Wca-LaPNjOV4KjBb9uW1797m_6ZeQgzUF-Q/netty-transport-classes-kqueue-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.122.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-classes-kqueue/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-kqueue",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.122.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.122.Final/netty-transport-native-epoll-4.1.122.Final-linux-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HB6NnOtG1Jp8A6TWHxgFHpzDR45TPARy48pTjBeQBUU/netty-transport-native-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.122.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-epoll",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-kqueue-4.1.122.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-kqueue/4.1.122.Final/netty-transport-native-kqueue-4.1.122.Final-osx-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.122.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z7fCsHzmt0mdCm8MnvJjp4Y-j47ZOdJ5UU1S0JG-Oug/netty-transport-native-kqueue-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-kqueue",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.122.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.122.Final/netty-transport-native-unix-common-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9v5aj-rM5nUKU8CNcv8YJJkHN3m2q3vYXca1SGt0kVo/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.122.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.122.Final/netty-transport-4.1.122.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.122.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7dXsDxW1MOLWbD7NNCfnnhi3AR0ujEE0GH0M2LNqB9c/netty-transport-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport",
    "versionInfo" : "4.1.122.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.2.7",
    "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-core/1.2.7/reactor-netty-core-1.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MRITZpxIDMZNyhlBYttq3553g7vrAdalRBJWf3c0gvY/reactor-netty-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/reactor/reactor-netty",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.projectreactor.netty/reactor-netty-core",
    "versionInfo" : "1.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.2.7",
    "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-http/1.2.7/reactor-netty-http-1.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FcAKg5h9QCJV73zvgQDTC9xxWLmlxYGSEU4Dz-uuUkk/reactor-netty-http-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/reactor/reactor-netty",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.projectreactor.netty/reactor-netty-http",
    "versionInfo" : "1.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.7.7",
    "copyrightText" : "Copyright (c) 2019-2021 VMware Inc. or its affiliates\nCopyright 2002-2017 the original author or authors\n\nAuthors: Animesh Chaturvedi; David Karnok; DoHyung Kim; Injae Kim; Injae Kim https://github.com/reactor/reactive-streams-commons; Jon Brisbin; Juergen Hoeller; Oleh Dokuka; Rossen Stoyanchev; Sebastien Deleuze; Sergei Egorov; Simon Basle; Simon Basle https://github.com/reactor/reactive-streams-commons; Stephane Maldini; VMware Inc. or its affiliates; Violeta Georgieva; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/reactor-core/3.7.7/reactor-core-3.7.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GQNVnToLS86OJLlevffTDBFYjyCYcmz5tAUxd-HfweI/reactor-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.projectreactor/reactor-core@3.7.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/reactor/reactor-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.projectreactor/reactor-core",
    "versionInfo" : "3.7.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.8",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.3.8/prometheus-metrics-config-1.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/u_g1JE_3au3WoCeMOd6gOjJyhQxvW_LIN8aikdHiu_U/prometheus-metrics-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-config",
    "versionInfo" : "1.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.8",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.3.8/prometheus-metrics-core-1.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0qgEDwDrwUgTQh25OMKyjKTtVkzv-cfuTgGM_-Vy1rE/prometheus-metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-core",
    "versionInfo" : "1.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-no-protobuf-1.3.8",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats-no-protobuf/1.3.8/prometheus-metrics-exposition-formats-no-protobuf-1.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/whHqz_aTuwQa4lSZrIXx_hOo0veYKiQYCWxyRfOcy2s/prometheus-metrics-exposition-formats-no-protobuf-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats-no-protobuf@1.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats-no-protobuf",
    "versionInfo" : "1.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.8",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.3.8/prometheus-metrics-exposition-formats-1.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMI5tRp97fsdG2tv5XK870aDGoqKxw8AP-zIV5RwvDE/prometheus-metrics-exposition-formats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats",
    "versionInfo" : "1.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.3.10/prometheus-metrics-exposition-textformats-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uEL0F2qPRr2_DzJKJNPnpkMtK_rrhzF-Bo4Ja8Nn5U/prometheus-metrics-exposition-textformats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.8",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.3.8/prometheus-metrics-model-1.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mu2QXIeLmA1zH70OW16PDSFR0fXyrbyVmUaKlX3xOo8/prometheus-metrics-model-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-model",
    "versionInfo" : "1.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.8",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.3.8/prometheus-metrics-tracer-common-1.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ji7_myAOZcrH5sX1cOc7vt1xlkrpYAWd2ztO5PChGuI/prometheus-metrics-tracer-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-tracer-common",
    "versionInfo" : "1.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1CMH1-0fwpXMh12KbPGj4IeTF6BCjS2_qs-uVluiHQE/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jakartaee/jaf-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "2.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1",
    "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1",
    "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.inject/jakarta.inject-api",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2",
    "copyrightText" : "Copyright (c) 2019,2020 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA-vINKxODilOfJFhMZt7frREieCkTHGattM2ePqCWw/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "3.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0",
    "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.10.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.6.0",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2017 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2010 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2020 Torbjorn Svensson\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.6.0/jna-platform-5.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0LVPsYceY8qk578FFCaGes_SHoEm5auNhr7wzZj4CFI/jna-platform-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.13.0",
    "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 2022 Carlos Ballesteros\nCopyright (c) 1991, 1999 Free Software Foundation, Inc\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.13.0/jna-5.13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R6VqLYed9FBTqy6gjT-XNh-Vfo0yFhbcUpGrijHdGm8/jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna",
    "versionInfo" : "5.13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.5.2",
    "copyrightText" : "Copyright 2011-2024 JSON-SMART authors\n\nAuthors: JSON-SMART authors; Uriel Chemouni",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/accessors-smart/2.5.2/accessors-smart-2.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/74ehX2Y4GaVTEKX4bTvweLzFImXUxGpSlgXH2c0gY-I/accessors-smart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.minidev/accessors-smart@2.5.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://urielch.github.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.minidev/accessors-smart",
    "versionInfo" : "2.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.5.2",
    "copyrightText" : "Copyright 2011-2024 JSON-SMART authors\n\nAuthors: FangYidong <fangyidong@yahoo.com.cn>; JSON-SMART authors; Uriel Chemouni <uchemouni@gmail.com>; uriel Chemouni",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/json-smart/2.5.2/json-smart-2.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.minidev/json-smart@2.5.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/caYHj1i7uKg4PuYSH7Ov4u6W0gnz2G1PueZaTS8nZKo/json-smart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://urielch.github.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.minidev/json-smart",
    "versionInfo" : "2.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.4",
    "copyrightText" : "Copyright 2001-2019 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JlhNu07nVRs4Pu0VRyRtyoNZzRwAc3IBNcTx63LEAc4/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.0",
    "copyrightText" : "Copyright 2002-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.26.0/commons-compress-1.26.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.26.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iFZcbnX8nJnrIcqcwCkwbrfoxBZnJkHan3lvXxi3Cik/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.26.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.10.0",
    "copyrightText" : "Copyright 2005-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-csv/1.10.0/commons-csv-1.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-csv@1.10.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dU4aZCSRroYx2eWR-wPkfrqXXu44BnY2m-2hAsYEq9M/commons-csv-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-csv/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-csv",
    "versionInfo" : "1.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.18.0",
    "copyrightText" : "Copyright 2001-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.18.0/commons-lang3-3.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M7x1qCVbeV89cDlnHVokFFrdkyTQY4-bWwCzFTDzrWA/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-math3-3.6.1",
    "attributionTexts" : [ "This product includes software developed by the University of Chicago, as Operator of Argonne National Laboratory." ],
    "copyrightText" : "Copyright 2010-2012 CS Systemes d'Information\nCopyright 2009 Google Inc.\nCopyright 2001-2016 The Apache Software Foundation\nCopyright (c) 2001, 2002 Enthought, Inc.\nCopyright (c) 2004, Ernst Hairer\nCopyright (c) 2008, Frances Y. Kuo and Stephen Joe\nCopyright (c) 1997 - 2002, Makoto Matsumoto and Takuji Nishimura\nCopyright (c) 2003-2009 SciPy Developers\nCopyright (c) 2003-2013 SciPy Developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-math3/3.6.1/commons-math3-3.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xTRtCcByTeQkFetUFt4g2WhWxEZ5bw0PTmpRYO5O49c/commons-math3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-math/",
    "licenseConcluded" : "(Minpack AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-math3",
    "versionInfo" : "3.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.10.0",
    "copyrightText" : "Copyright 2014-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.10.0/commons-text-1.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-text@1.10.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J62J0kPVzf6BPhiPa__5LqqXznLvRRSrZ09cWOO8sp4/commons-text-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-text",
    "versionInfo" : "1.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.2",
    "copyrightText" : "Client Copyright 2010-2016 The Apache Software Foundation\nCopyright 2010 Newcastle University",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.client/1.0.2/org.apache.oltu.oauth2.client-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QAIZpae70Gtl3WXuz_M8QvqMMmjIm52UksizDBMkEJg/org.apache.oltu.oauth2.client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client@1.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.2",
    "copyrightText" : "Common Copyright 2010-2016 The Apache Software Foundation\nCopyright 2010 Newcastle University",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.common/1.0.2/org.apache.oltu.oauth2.common-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/29kLvSZ2K73lm_3MEIAOOrF5ps66SU7CjgfSuawgMzE/org.apache.oltu.oauth2.common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common@1.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-lite-5.4.0",
    "copyrightText" : "Copyright 2003-2024 The Apache Software Foundation\nCopyright 2001 The Internet Society and W3C (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright (c) Microsoft Corporation\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2015-2021 the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml-lite/5.4.0/poi-ooxml-lite-5.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi-ooxml-lite@5.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6dP4vBhTaW8Hn2xywIa7AUGPTH-e6s_aSWsegBJwW7k/poi-ooxml-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND W3C-19980720 AND LicenseRef-scancode-ms-specification)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi-ooxml-lite",
    "versionInfo" : "5.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-5.4.0",
    "copyrightText" : "Copyright 2003-2024 The Apache Software Foundation\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2008-2014 FedICT.\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2015-2021 the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml/5.4.0/poi-ooxml-5.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi-ooxml@5.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vmTIKP5sKOzmDtwpPfycsfXkQ2cJ66FxwxsjFXW8W8w/poi-ooxml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi-ooxml",
    "versionInfo" : "5.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-5.4.0",
    "copyrightText" : "Copyright 2003-2024 The Apache Software Foundation\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2015-2021 the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi/5.4.0/poi-5.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi@5.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WuevuJbwO1eru7ugUztuWQyro1QgqY5rtea3McDQkC4/poi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi",
    "versionInfo" : "5.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tika-tika-core-3.2.2",
    "copyrightText" : "Copyright 2010 International Press Telecommunications Council\nCopyright 2016 Norconex Inc.\nCopyright 2007-2025 The Apache Software Foundation\nCopyright (c) Ian F. Darwin 1986, 1987, 1989, 1990, 1991, 1992, 1994, 1995\nparts Copyright 2010 International Press Telecommunications Council",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tika/tika-core/3.2.2/tika-core-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tika/tika-core@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nQqUEnOeVsRUSf22gTL1d6B2JMnc2BC0IsEP0Mg8VOc/tika-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tika.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-scancode-iptc-2006 AND MIT AND BSD-2-Clause-Darwin AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tika/tika-core",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.42",
    "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2025 The Apache Software Foundation\nCopyright (c) 1999-2025, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2025, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.42/tomcat-embed-core-10.1.42.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.42",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HCKmTL2AwEvlYw1vdnRUtrFQUvG6vxJWgVsli5V_DEA/tomcat-embed-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core",
    "versionInfo" : "10.1.42"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.42",
    "copyrightText" : "Copyright 1999-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.42/tomcat-embed-el-10.1.42.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.42",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TqggFwpoiwkuctPkbTfi5t5zYWs6lCSZVCGNEIj5sTs/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "10.1.42"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.42",
    "copyrightText" : "Copyright 1999-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.42/tomcat-embed-websocket-10.1.42.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zyUnym2-TpY_vmaG_aXpiKJoIA01o-BP7320AYrOpPg/tomcat-embed-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket",
    "versionInfo" : "10.1.42"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.xmlbeans-xmlbeans-5.3.0",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 1999-2003 Apache Software Foundation\nCopyright (c) 2001-2003 Apache Software Foundation\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 1994-2002 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2015-2021 the original\ncopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/xmlbeans/xmlbeans/5.3.0/xmlbeans-5.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.xmlbeans/xmlbeans@5.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZL9gIlEeV_IUQndR201PbYlQACHW2C6aja43wdFRO3U/xmlbeans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://xmlbeans.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND W3C-19980720)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.xmlbeans/xmlbeans",
    "versionInfo" : "5.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.9.24",
    "copyrightText" : "Copyright (c) 2002,2010\nCopyright (c) 2005 Contributors\nCopyright (c) Copyright 1999-2001 Xerox Corporation, 2002 Palo A lto Research Center, Incorporated\nCopyright (c) 2004 IBM\nCopyright (c) 2005 IBM, Contributors\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2000, 2003 IBM Corporation and others\nCopyright (c) 2004, 2013 IBM, VMware\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC). 2004 IBM Corporation\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC) and others\nCopyright (c) 2010 SpringSource, Contributors\nCopyright (c) 2001 The Apache Software Foundation\nCopyright (c) 2016-17 The Apache Software Foundation\nCopyright (c) 2013 VMware\nCopyright (c) 2012 VMware, Inc.\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1998-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002-2018 Palo Alto Research Center, Incorporated (PARC), Contributors\n\nAuthors: <A HREF https://www.inf.fu-berlin.de/~ehaase'> E. Haase; <A HREF https://www.inf.fu-berlin.de/~ehaase'> Enver Haase; <A HREF https://www.vmeng.com/beard'> Patrick C. Beard; <A HREF markus.dahm@berlin.de'> M. Dahm; A. Nevado; Abraham Nevado; Adrian Colyer; Adrian Sampson; Alexander Kriegisch; Alexandre Vasseur; Andy Clement; Andy Clement, Abraham Nevado; Chris Nokleberg; Contributors; David Dixon-Peugh; David Knibb; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erik Hilsdale; Eugene Kuleshov; IBM; IBM Corporation; IBM Corporation and others; IBM, Contributors; IBM, VMware; INRIA, France Telecom; Jason Zaugg; Jim Hugunin; John Kew; Joseph MacFarlane; Juozas Baliuka; Konstantin Shagin <konst@cs.technion.ac.il>; Kris De Volder; Lyor Goldstein; M. Dahm; Mario Ivankovits; Mik Kersten; Niko Matsakis; Palo Alto Research Center, Incorporated; Palo Alto Research Center, Incorporated (PARC); Palo Alto Research Center, Incorporated (PARC) and others; Palo Alto Research Center, Incorporated (PARC). IBM Corporation; Prashant Deva; Rafael Winterhalter; Rajendra Inamdar, Vishal Vishnoi; Remi Forax; Ron Bodkin; SpringSource, Contributors; The Apache Software Foundation; Thomas Hallgren; Thomas Kiviaho; Tuomas Kiviaho; VMware; VMware, Inc.; Xerox Corporation, Palo A lto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC); Xerox Corporation, Palo Alto Research Center, Incorporated (PARC), Contributors; a ClassWriter; colyer Annotation; colyer Creates; colyer Facade; colyer Implementors; colyer Instances; colyer Marker; colyer Matches; the Apache Software Foundation (https://www.apache.org/); the Apache Software Foundation https://www.apache.org/ https://www.apache.org; the PatternParser",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjweaver/1.9.24/aspectjweaver-1.9.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-QYI03K9f5a8uOruaJZBzc1Pv_skfy1BB8uRJ9d8-w/aspectjweaver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aspectj/aspectjweaver@1.9.24",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/aspectj/",
    "licenseConcluded" : "(EPL-1.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aspectj/aspectjweaver",
    "versionInfo" : "1.9.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.83/bcpkix-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.83",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.83/bcprov-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zE8V1-GtU4SiFszz3rR-PeuXrmkONULdAL_Juj_q9EQ/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.83",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.83/bcutil-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.83",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.angus-angus-activation-2.0.2",
    "copyrightText" : "Copyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021, 2023 Oracle and/or its affiliates\nCopyright (c) 2022, 2023 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.angus/angus-activation@2.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pbhIngrF2j2CaOuO8alw4ie47UOYnllMurwN3dtTbFE/angus-activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.angus/angus-activation",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.angus-jakarta.mail-2.0.3",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009, 2024 Jason Mehrens\nCopyright (c) 1997, 2022 Oracle and/or its affiliates\nCopyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 1997, 2024 Oracle and/or its affiliates\nCopyright (c) 2021, 2023 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/angus/jakarta.mail/2.0.3/jakarta.mail-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.angus/jakarta.mail@2.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BIXxT9HFludymPpZHVqIIbm6EWif9aUw3_ajxar4Owg/jakarta.mail-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND MPL-1.1 AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.angus/jakarta.mail",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.22",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.22/jetty-util-ajax-12.0.22.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.22",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g6AOtmweIow_r2K7aTux7jyWtacSCxr8CDkt9nH87Dg/jetty-util-ajax-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "12.0.22"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.22",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.22/jetty-util-12.0.22.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J7NOUXO4fcIDjaq257gvQim4PjaLbI3mMOiCcmW8qOc/jetty-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.22",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "12.0.22"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6",
    "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.10/jersey-apache-connector-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OURi0ZaWU_ZGMXhcmSfDKIGaNTDsQ12RlqIrf_swN4I/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.10/jersey-client-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YnNMnFRc0jv1RZQ7jOvehT9XPFz_RSXPg9QEbVlv4kw/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.10/jersey-common-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WYdXn9T8Ie4QLUpxtpp2O8DhnjOgSIUKFxvIKqd4Lqs/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.10/jersey-hk2-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-Aleg4gQJAEBjIASWrgjg39kTqjHWXVIZS34BzUC74w/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.10/jersey-media-multipart-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bU7ZVbXI_oYMvo1GmHDVkr2V8ilufY3Zmqks7MSBH2M/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.2.Final",
    "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.2.Final/hibernate-validator-8.0.2.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ea6B0dJlADwa8XirwlEqD5Me8zch6Js0xrZm3M89WDg/hibernate-validator-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hibernate.org/validator/",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hibernate.validator/hibernate-validator",
    "versionInfo" : "8.0.2.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0",
    "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TooTallNate/Java-WebSocket",
    "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.java-websocket/Java-WebSocket",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.30.2-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.1.Final",
    "copyrightText" : "Copyright 2023 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.1.Final/jboss-logging-3.6.1.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8bKGfuaPmMQ4m34FF5a68eRXtBOYCa4Z33_fdOtSy94/jboss-logging-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.jboss.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jboss.logging/jboss-logging",
    "versionInfo" : "3.6.1.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.9.25",
    "copyrightText" : "Copyright 2007 Google Inc.\nCopyright 2010-2016 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\nCopyright 2011 The Guava Authors\ncopyright Char (c)\n\nAuthors: Char; Google Inc.; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-common/1.9.25/kotlin-stdlib-common-1.9.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ybu8e7YihO6ltk6y-fFtjXyfYnMVmsjo1iZb0iB-aSY/kotlin-stdlib-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-common",
    "versionInfo" : "1.9.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.9.25",
    "copyrightText" : "Copyright 2010-2024 JetBrains s.r.o. and Kotlin Programming Language contributors.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk7/1.9.25/kotlin-stdlib-jdk7-1.9.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XGCDh4TR1HF3gTBQmwgD6-SbbaHpD_osvZZEXkxAt3Q/kotlin-stdlib-jdk7-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7",
    "versionInfo" : "1.9.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.9.25",
    "copyrightText" : "Copyright 2010-2024 JetBrains s.r.o. and Kotlin Programming Language contributors.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk8/1.9.25/kotlin-stdlib-jdk8-1.9.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/We88yKZbPKAjHWMRMqmSTXv3l2XaezbxvHKN_aeRVR8/kotlin-stdlib-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8",
    "versionInfo" : "1.9.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.9.25",
    "copyrightText" : "Copyright Eric Ford & Hubert Holin 2001\nCopyright 2007 Google Inc.\nCopyright 2010-2015 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\nCopyright 2011 The Guava Authors\ncopyright Char (c)\n\nAuthors: Char; Eric Ford & Hubert Holin; Google Inc.; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib/1.9.25/kotlin-stdlib-1.9.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H_ou_y42fV1QEajK_73U8MF7fM-BB4eu1UN_HHKoDss/kotlin-stdlib-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib",
    "versionInfo" : "1.9.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0",
    "copyrightText" : "Copyright 2000-2009 JetBrains s.r.o.\nCopyright 2006 Sascha Weinreuter",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/annotations/13.0/annotations-13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ohV-6iNW-UvYl5NCKrBCcnGieF-bAwlofJHFZGSfYhM/annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains/annotations@13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.jetbrains.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains/annotations",
    "versionInfo" : "13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.json-json-20140107",
    "copyrightText" : "Copyright (c) 2002 JSON.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/json/json/20140107/json-20140107.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1JD9qauiay-oMBIC7vqgMZbkp_rdlW_k94kMh5TCpWw/json-20140107-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.json/json@20140107",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/douglascrockford/JSON-java",
    "licenseConcluded" : "JSON",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.json/json",
    "versionInfo" : "20140107"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.15.3",
    "copyrightText" : "Copyright (c) 2009-2022 Jonathan Hedley <https://jsoup.org/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jsoup/jsoup/1.15.3/jsoup-1.15.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cP15GiMuhAd00_9apJXGTLjycM3Q_Yy2Wubk-3CKNOI/jsoup-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jsoup/jsoup@1.15.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jsoup.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jsoup/jsoup",
    "versionInfo" : "1.15.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.22.1",
    "copyrightText" : "Copyright (c) 2009-2025 Jonathan Hedley <https://jsoup.org/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jsoup/jsoup/1.22.1/jsoup-1.22.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Greq1FYbl06EQ-a4G7E3DYfLbyMgYN8RLEv16_dIY2Q/jsoup-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jsoup/jsoup@1.22.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jsoup.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jsoup/jsoup",
    "versionInfo" : "1.22.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0",
    "copyrightText" : "Copyright 2018-2020 The JSpecify",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jspecify.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jspecify/jspecify",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.7.1",
    "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ow2.asm/asm@9.7.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hTIAnSN4IrFluMjBvZn0ZHORyNo3UZYP3tiwzuEk4nA/asm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://asm.ow2.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ow2.asm/asm",
    "versionInfo" : "9.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4",
    "copyrightText" : "Copyright 2014 Reactive Streams",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzlZKD1w0srcX7HUjm-dlT3mVAU0KPihSho4sZTZnm4/reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.reactive-streams.org/",
    "licenseConcluded" : "MIT-0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.reactivestreams/reactive-streams",
    "versionInfo" : "1.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fQc2eKipjY0kpA5RY8tMSF1CmGwn1uqL1jZo391dDj4/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-2019 the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.4.7/spring-boot-actuator-autoconfigure-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YNKI9FgvwqwBMkYL1bUbHXtRjyIxII9fpLKZy44mPdg/spring-boot-actuator-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-2019 the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Young Jae; Yulin Qin; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.4.7/spring-boot-actuator-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/psx0Qct187_GPWHU0g313fnluUX3uE7TDxbtddXkATk/spring-boot-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-2019 the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Fernando Cappi; Filip Hrisafov; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.4.7/spring-boot-autoconfigure-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/O2pqwudwrzpKXbx7e7WSqyM644TSfasMIJ5Pyn3x5r0/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/3.4.7/spring-boot-starter-actuator-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GRz0yWrjP0yAlZrekIoVOiN0oUNYYVNUNc7MeBTMDEA/spring-boot-starter-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-actuator",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-aop-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-aop/3.4.7/spring-boot-starter-aop-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/toBAXVfGTG3Tq1y5ci7cIFfqdI_dbtm_XEynvajlKiM/spring-boot-starter-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-aop@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-aop",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jdbc-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-jdbc/3.4.7/spring-boot-starter-jdbc-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@3.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zEghO9Uauwium_9aFv-9OVtNLhfPnBYU72Qm5jXkQtg/spring-boot-starter-jdbc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-jdbc",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/3.4.7/spring-boot-starter-json-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oM72KIqINcxtfMDfW5MnAMcnNYu9RxYsj9NPFL9FLSo/spring-boot-starter-json-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-json",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.4.7/spring-boot-starter-logging-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/urxFX6w6XDDLcq41T57EMCx_qAPkxQIs4lqdliHdN9o/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-mail-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-mail/3.4.7/spring-boot-starter-mail-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-mail@3.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9oN3KtKOhZkPkGep6Le3a7Tz_Kq1xNBGNwaiUo5Y9JU/spring-boot-starter-mail-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-mail",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/3.4.7/spring-boot-starter-security-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HrHoEHaGvQBHmawfXHwTZqKW9k2Z0Qcp7WYtRplN2Jw/spring-boot-starter-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-security",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/3.4.7/spring-boot-starter-tomcat-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tIlCgRVuudcj8LPdSEYSQNapWjCux5ApUAF68zNN_o0/spring-boot-starter-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-validation/3.4.7/spring-boot-starter-validation-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-7rqq33CgT9nhiGckOfBQyVmBWyBSBifoaVVPW5RVRI/spring-boot-starter-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-validation@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-validation",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/3.4.7/spring-boot-starter-web-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bUgmbFBN0bcpBPE989QngWCqg6EmOP5luyftlu-qI8Y/spring-boot-starter-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-web",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.4.7/spring-boot-starter-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/majyuMC9lKRqYxrwRphyOlb-Qv12wb5dLCdR9E778A8/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.4.7",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.4.7/spring-boot-3.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gSPBtxz7RIZEicrOXcQP4m29_cB6Ke2W_hK35cMpteo/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.4.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "3.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-2.0.12",
    "copyrightText" : "Copyright (c) 2006-2023 the original author or authors\nCopyright 2002-2008 the original author or authors\n\nAuthors: Aftab Shaikh; Aldo Sinanaj; Aleksandr Shamukov; Andreas Ahlenstorf; Anton Aharkau; Artem Bilan; Chase Diem; Dan Garrette; Dave Syer; Emanuele Ivaldi; Evgeny Lazarev; Gary Russell; Gianluca Medici; Henning Pottker; Huijin Hong; James Carr; Jon Travis; Josh Long; Kim In Hoi; Kim Sumin; Lucas Ward; Maksim Kita; Marcin Zajaczkowski; Marius Grama; Marius Lichtblau; Mark Fisher; Markus Heiden; Michael Minella; Morulai Planinski; Nathanael Roberts; Randell Callahan; Rob Harrop; Roman Akentev; Ruslan Stelmachenko; Tobias Soloschenko; Tomaz Fernandes; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/retry/spring-retry/2.0.12/spring-retry-2.0.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AnwA5F7VCVTha60FB-XNkglBqNcHbmUIP774CY-Xv8w/spring-retry-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.retry/spring-retry@2.0.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-retry",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.retry/spring-retry",
    "versionInfo" : "2.0.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.4.7",
    "copyrightText" : "Copyright 2002-2024 the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne <ch4mp@c4-soft.com>; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/6.4.7/spring-security-config-6.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@6.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DYl4Kv6nqXmYUnXoIgCHSHNnH9_RUwQJcqqk8SpMzFM/spring-security-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-config",
    "versionInfo" : "6.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.4.7",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2002-2013 the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/6.4.7/spring-security-core-6.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@6.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GhDWPbRJWle5dq-qj7OK0S7NKpjsTSw4eEMyzkF2lMw/spring-security-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-core",
    "versionInfo" : "6.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.4.7",
    "copyrightText" : "Copyright (c) 2006 Damien Miller <djm@mindrot.org>\nCopyright 2002-2011 the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/6.4.7/spring-security-crypto-6.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@6.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Aja3-X1ANmqDaPPBvTDWslr5s3tOfPapaUrjeL_I7KA/spring-security-crypto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-crypto",
    "versionInfo" : "6.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.4.7",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2002-2024 the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Zeeshan Adnan; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/6.4.7/spring-security-web-6.4.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@6.4.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZpNZdOV8Q-tKEBiu0rCdNbRvTY6A9YOMrJVzdJCaqDw/spring-security-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-web",
    "versionInfo" : "6.4.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2006 the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.8/spring-aop-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ql1_gKqANjmDC5vPIlFjIzFNX3GRcd6T5qLMWCKUqXk/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aspects-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2012 the original author or authors\n\nAuthors: Adrian Colyer; Chris Beams; Costin Leau; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rod Johnson; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aspects/6.2.8/spring-aspects-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pVLncJ6hnigDuK40N7fq8UJTJ7pj9Kuj3fp8CTBLf-Q/spring-aspects-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aspects@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aspects",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2007 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBean. Class; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.8/spring-beans-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ReAAp6OIvYj6kjTAJkeJbVhNUm42d_CIBmMYOxVKQd4/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Alef Arendsen; Ben Manes; Brian Clozel; Chris Beams; Darren Davison; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Rob Harrop; Sam Brannen; Sebastien Deleuze; Stas Volsky; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context-support/6.2.8/spring-context-support-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DDrydu0YxWc92zEpJ7diiJp3u6eIJVIRIEOd38kRs08/spring-context-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context-support@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context-support",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2005 the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.8/spring-context-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WA9G0iD5RdMrdT0NES4pMDD13FkfnX86rZG5VmJSh1E/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.8/spring-core-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e7Bp2PgZdO6jyROD-CaO2R2LT_KGq2AX-VlR8z4rw0s/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2012 the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.8/spring-expression-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TJrZCGEszJ9LLGoZ-NeRoG4oj5VEV3PbmmU6zhgst5Y/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2017 the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.8/spring-jcl-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C5Q_UNZ_BdJJD2wKwYLasnAVWZiZL9el0YnReFPGAIA/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jdbc-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2007 the original author or authors\n\nAuthors: Ben Blinebury; Chris Baldwin; Chris Beams; Christian Dupuis; Costin Leau; Dave Syer; Dmitriy Kopylenko; Giuseppe Milicia; Henning Pottker; INRIA, France Telecom; Jean-Pierre Pawlak; Jens Schauder; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jonathan Bregler; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Kiril Nugmanov; Mahmoud Ben Hassine; Mario Arias; Marten Deinum; Mohamed Lahyane; Nicolas Debeissat; Nicolas Fabre; OW2 Consortium; Oliver Gierke; Philippe Marschall; Pivotal, Inc.; Rick Evans; Rod Johnson; Sam Brannen; Sebastien Deleuze; Slawomir Dymitrow; Stephane Nicoll; Subhobrata Dey; Thomas Risberg; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jdbc/6.2.8/spring-jdbc-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jdbc@6.2.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QGoj-217OX1wjlapj-tGga_5VTvaq0hMH4a4rQQZhaw/spring-jdbc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jdbc",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-tx-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2008 the original author or authors\n\nAuthors: Adrian Colyer; Chris Beams; Christian Dupuis; Colin Sampaleanu; Dmitriy Kopylenko; Enric Sala; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Mark Paluch; OW2 Consortium; Oliver Drotbohm; Pivotal, Inc.; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-tx/6.2.8/spring-tx-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-tx@6.2.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0V2DsbAjoMktAuQAfjLqsHosgu7lcrqbph5g_sinbj4/spring-tx-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-tx",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.8/spring-web-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ukbshaU-N7sbPkfPrHy1IScKvO81pqCFl1wfHo_1wBo/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.8",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2010 the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Thomas Risberg; Vedran Pavic; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.8/spring-webmvc-6.2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jlWwsAQ1oQhwgO9qa90lwRQ7e3oDF7I_oYfl4DnHomg/spring-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-webmvc",
    "versionInfo" : "6.2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.xerial-sqlite-jdbc-3.42.0.0",
    "copyrightText" : "Copyright 2016 Magnus Reftel\nCopyright 2007 Taro L. Saito\nCopyright (c) 2006, David Crawshaw\nCopyright (c) 2007 David Crawshaw <david@zentus.com>\nCopyright (c) 2021 Gauthier Roebroeck <gauthier.roebroeck@gmail.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.42.0.0/sqlite-jdbc-3.42.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BwMwxHSBXwu-n95BwHSmmM_F6DrpnlbBBw9VWQ9TYqE/sqlite-jdbc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.xerial/sqlite-jdbc@3.42.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/xerial/sqlite-jdbc",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.xerial/sqlite-jdbc",
    "versionInfo" : "3.42.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.3",
    "copyrightText" : "Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz\nCopyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.3/snakeyaml-2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ho_sLT7g4VjbrADXg1YitD9JdnadW3rucyGmT5xArbc/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.3"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-billing-2.0.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-math3-3.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.xmlbeans-xmlbeans-5.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.9.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.42"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.42"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tika-tika-core-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.42"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-5.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-5.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-lite-5.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.9.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.9.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.9.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.9.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.1.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.2.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.22.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.json-json-20140107"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.15.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.22"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.angus-jakarta.mail-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.22"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.angus-angus-activation-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jdbc-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.18.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-csv-2.18.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.18.4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.18.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.18.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.18.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aspects-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.virtuald-curvesapi-1.08"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-tx-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.ozlerhakan-poiji-3.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-4.31.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.xerial-sqlite-jdbc-3.42.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-persistence-extension-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.azure-msal4j-1.13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-mail-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.ews-java-api-ews-java-api-2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-5.29.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-aop-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-content-type-2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jdbc-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-auth-0.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.microsoft.graph-microsoft-graph-core-2.0.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-oauth2-oidc-sdk-9.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.opencsv-opencsv-5.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-lang-tag-1.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-4.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okio-okio-jvm-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-5.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-2.0.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-SparseBitSet-1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.14.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.14.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.4.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-identity-1.12.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-json-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-xml-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.18.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.14.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.14.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-core-http-netty-1.15.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.azure-azure-core-1.49.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.14.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.122.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-linux-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-osx-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-kqueue-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.72.Final-classifier-windows-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.72.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.122.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.122.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-kqueue-4.1.122.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.7.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-no-protobuf-1.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-billing-2.0.32",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.8"
  } ]
}