{ "SPDXID" : "SPDXRef-DOCUMENT", "spdxVersion" : "SPDX-2.2", "creationInfo" : { "created" : "2026-04-17T20:46:33Z", "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ], "licenseListVersion" : "3.20" }, "name" : "cumulocity-core-agents-v2026.0.63", "dataLicense" : "CC0-1.0", "hasExtractedLicensingInfos" : [ { "licenseId" : "LicenseRef-Cumulocity-License", "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.", "name" : "Cumulocity GmbH License" }, { "licenseId" : "LicenseRef-Public-Domain", "extractedText" : "This product is released into the Public Domain and therefore has no license.", "name" : "Public Domain" } ], "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-cumulocity-core-agents-v2026.0.63-c166ede4-3952-400a-8796-b5841eb8c0f3", "packages" : [ { "SPDXID" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH", "downloadLocation" : "https://www.cumulocity.com", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:generic/cumulocity/cumulocity-core-agents@2026.0.63", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.cumulocity.com", "licenseConcluded" : "LicenseRef-Cumulocity-License", "licenseDeclared" : "LicenseRef-Cumulocity-License", "licenseInfoFromFiles" : [ ], "name" : "cumulocity-core-agents", "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)", "versionInfo" : "2026.0.63" }, { "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "generic/com.nsn.cumulocity.dependencies/svenson", "versionInfo" : "1.5.8" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32", "copyrightText" : "Copyright (c) 1999-2026, QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.32/logback-classic-1.5.32.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q9PRMpYiFT8L84aaMa6lJCbsoer7EdxBtlZqWdSvOSI/logback-classic-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.logback/logback-classic", "versionInfo" : "1.5.32" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32", "copyrightText" : "Copyright (c) 1999-2026, QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.32/logback-core-1.5.32.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z7IQFM_OqVJCP-jfbDKSFaAb3MZqRAXKaQvdeOQSHoA/logback-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.32", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND LGPL-2.1-or-later AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.logback/logback-core", "versionInfo" : "1.5.32" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21", "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FAYPPEKJfln70WdH6d5kYlr1jWNe0fksQHhTBb25MYQ/jackson-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-annotations", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-annotations", "versionInfo" : "2.21" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.2", "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.21.2/jackson-core-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qsJnXQSuWwxnv3nEFoDksTuMivM0sGsPPbISHIKRxH4/jackson-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-core", "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-core", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.2", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.21.2/jackson-databind-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xvLQKlcPwbLX1q4rkbutbYuojalAwNt9Jr7WeE82dAQ/jackson-databind-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-databind", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.21.2", "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.21.2/jackson-datatype-jdk8-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VMHJvQWlmPO2AS8_EQmfKAs-ekFNuHyvNytF1Z9ALc0/jackson-datatype-jdk8-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-java8", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.21.2", "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.21.2/jackson-datatype-joda-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G2WqMFmduR9GNa_bo5yiJ6XeFhxv6W7xM88L15HxqHU/jackson-datatype-joda-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-datatype-joda", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.2", "copyrightText" : "Copyright 2013 FasterXML.com", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.21.2/jackson-datatype-jsr310-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BXoAY8BToF9rSyVaFkLSgO8T-bbiy4fs3z-bwpTLef8/jackson-datatype-jsr310-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.21.2", "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.21.2/jackson-module-parameter-names-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uiprbO0JS93bhe2YOwOXqwVOmraNqHOwtdrK90jot8o/jackson-module-parameter-names-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-java8", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3", "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFfKHTGsG5wpfJo2-AKZfGBthRsboCCOy9rGo9Vo134/classmate-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/java-classmate", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml/classmate", "versionInfo" : "1.7.3" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://code.google.com/p/svenson/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.code.svenson/svenson", "versionInfo" : "1.5.8" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0", "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.36.0/error_prone_annotations-2.36.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9bWGnK58Q_0GOKefs5N_WRrO3saRKkdOB8y5ybh6oOg/error_prone_annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.errorprone/error_prone_annotations", "versionInfo" : "2.36.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3", "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/failureaccess", "versionInfo" : "1.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre", "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/guava", "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/guava", "versionInfo" : "33.4.8-jre" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava", "copyrightText" : "Copyright (C) 2007 The Guava Authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/listenablefuture", "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0", "copyrightText" : "Copyright 2012 Google Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/j2objc/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.j2objc/j2objc-annotations", "versionInfo" : "3.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.jayway.jsonpath-json-path-2.9.0", "copyrightText" : "Copyright 2011 the original author or authors\n\nAuthors: Evelyn Waugh; Nigel Rees; Sergey Saiyan sergey.sova42@gmail.com; matt@mjgreenwood.net; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/jayway/jsonpath/json-path/2.9.0/json-path-2.9.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzkcp-1_W2t-4lwGJE_YXvOTPvKkEAiQmDSoa3Oi3ks/json-path-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.jayway.jsonpath/json-path@2.9.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/jayway/JsonPath", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.jayway.jsonpath/json-path", "versionInfo" : "2.9.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6", "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov", "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.6/nimbus-jose-jwt-10.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s5CzC5UPQfCya0w6T9tVplJoiSuLf36E7C7Dc3SSZSs/nimbus-jose-jwt-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.nimbusds/nimbus-jose-jwt", "versionInfo" : "10.6" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0", "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-beanutils", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-beanutils/commons-beanutils", "versionInfo" : "1.11.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.18.0/commons-codec-1.18.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.18.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k8pM1DHZ-WlY4QVlqL72L0DrDf6wWZAO2dt1zTn9Q-Y/commons-codec-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-codec/", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-codec/commons-codec", "versionInfo" : "1.18.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2", "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://commons.apache.org/collections/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-collections/commons-collections", "versionInfo" : "3.2.2" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-digester-commons-digester-2.1", "copyrightText" : "Copyright 2001-2010 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-digester/commons-digester/2.1/commons-digester-2.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-digester/commons-digester@2.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0hbTtSmWG81JnztfpNWbhA7BIqmdpBrxj860XWY7Sjw/commons-digester-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://commons.apache.org/digester/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-digester/commons-digester", "versionInfo" : "2.1" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-io/commons-io@2.20.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NlO8kR0Jl5QXiVtvjDRvRkRZKDcpxujTSIzpdY_P8yI/commons-io-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-io/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-io/commons-io", "versionInfo" : "2.20.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-validator-commons-validator-1.10.1", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-validator/commons-validator/1.10.1/commons-validator-1.10.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-validator/commons-validator@1.10.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-x_eysRGsd9ehnlwuZz2xwjFLea4w4e2DYGBqnLAhDM/commons-validator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-validator/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-validator/commons-validator", "versionInfo" : "1.10.1" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.15.10/micrometer-commons-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YQXbpZu_ZyHHT11iNXLEBR7iXZWlf-WZM-Rci4tfp6I/micrometer-commons-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.15.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-commons", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.15.10/micrometer-core-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cshRLSSJFFrH6XCufN0K7zsSRLUf5JeLNSTSvP9zGrE/micrometer-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.15.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-core", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.15.10/micrometer-jakarta9-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D07CDk9TJg7E8hSnw9G2Fo7xMRwXIBbPPXKMPbKdaiM/micrometer-jakarta9-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.15.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-jakarta9", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Maksim Petelin; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.15.10/micrometer-observation-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5gThKpaPpgXmn03qQo7kC5wqYneJl3DT-3halQCJJrw/micrometer-observation-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.15.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-observation", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.15.10/micrometer-registry-prometheus-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WD2ZQaVtmEHgACpIUz9YKfq2TUlMT7IMuyw0tVCdNtc/micrometer-registry-prometheus-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-registry-prometheus", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-api-incubator-1.45.0-alpha", "copyrightText" : "Copyright The OpenTelemetry Authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-api-incubator/1.45.0-alpha/opentelemetry-api-incubator-1.45.0-alpha.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tXmFifCd6WQTZtPcBVfAjnJPDHSvWfkEHmrXLHhZ9DQ/opentelemetry-api-incubator-~-alpha-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.opentelemetry/opentelemetry-api-incubator@1.45.0-alpha", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/open-telemetry/opentelemetry-java", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.opentelemetry/opentelemetry-api-incubator", "versionInfo" : "1.45.0-alpha" }, { "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-api-1.49.0", "copyrightText" : "Copyright 2000-2021 JetBrains s.r.o.\nCopyright 2013-2020 The OpenZipkin Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: David Beaumont; JetBrains s.r.o.; The Guava Authors; The OpenZipkin Authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-api/1.49.0/opentelemetry-api-1.49.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.opentelemetry/opentelemetry-api@1.49.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aav0N2KOTHvpvEaarj6t-guH-4bEyLDXWLG7uaZcXQk/opentelemetry-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/open-telemetry/opentelemetry-java", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.opentelemetry/opentelemetry-api", "versionInfo" : "1.49.0" }, { "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-context-1.49.0", "copyrightText" : "Copyright 2020 LINE Corporation\nCopyright Rafael Winterhalter\nCopyright 2013-2020 The OpenZipkin Authors\nCopyright 2015 The gRPC Authors\n\nAuthors: LINE Corporation; Rafael Winterhalter; The OpenZipkin Authors; The gRPC Authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-context/1.49.0/opentelemetry-context-1.49.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.opentelemetry/opentelemetry-context@1.49.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DmlaJM66GfE-04vrMG2mjbnptfE6FHsQaHjRrRbAmlg/opentelemetry-context-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/open-telemetry/opentelemetry-java", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.opentelemetry/opentelemetry-context", "versionInfo" : "1.49.0" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.3.10/prometheus-metrics-config-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UHTzQ-XwDKf_cEWqR-cvpcQlcwU-pfvxbBTS_IAhu94/prometheus-metrics-config-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-config", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.3.10/prometheus-metrics-core-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I8gCRyk7q7mtrGouy3qx9_L_d9J22Q7fniMuGpQdoIA/prometheus-metrics-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-core", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10", "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.3.10/prometheus-metrics-exposition-formats-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cBUYYlLazSiCq49QjFQGEv_0IoMLV1IgNZxx6wXDkhs/prometheus-metrics-exposition-formats-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.3.10/prometheus-metrics-exposition-textformats-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uEL0F2qPRr2_DzJKJNPnpkMtK_rrhzF-Bo4Ja8Nn5U/prometheus-metrics-exposition-textformats-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.3.10/prometheus-metrics-model-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6zzDlJBJZO1fyuySffEYb1Hs4jRARYm1_TBjE8L2pSs/prometheus-metrics-model-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-model", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.3.10/prometheus-metrics-tracer-common-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pmnxX5WNpK2YLcGxlRBkzm_zwzBqXlXjNJiqRVmC9tA/prometheus-metrics-tracer-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-tracer-common", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4", "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PRU62PFiEM2QmMRN3dinnHVhUbmo6H2GxaRvzrObX5g/jakarta.activation-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/jakartaee/jaf-api", "licenseConcluded" : "(W3C AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND OFL-1.1)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.activation/jakarta.activation-api", "versionInfo" : "2.1.4" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1", "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://projects.eclipse.org/projects/ee4j.ca", "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.annotation/jakarta.annotation-api", "versionInfo" : "2.1.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1", "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/injection-api", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.inject/jakarta.inject-api", "versionInfo" : "2.0.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2", "copyrightText" : "Copyright (c) 2019,2020 Eclipse Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA-vINKxODilOfJFhMZt7frREieCkTHGattM2ePqCWw/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://beanvalidation.org", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.validation/jakarta.validation-api", "versionInfo" : "3.0.2" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0", "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api", "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api", "versionInfo" : "3.1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14", "copyrightText" : "Copyright 2001-2005 Stephen Colebourne", "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.joda.org/joda-time/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/joda-time/joda-time", "versionInfo" : "2.10.14" }, { "SPDXID" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.5.2", "copyrightText" : "Copyright 2011-2024 JSON-SMART authors\n\nAuthors: JSON-SMART authors; Uriel Chemouni", "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/accessors-smart/2.5.2/accessors-smart-2.5.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/net.minidev/accessors-smart@2.5.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/74ehX2Y4GaVTEKX4bTvweLzFImXUxGpSlgXH2c0gY-I/accessors-smart-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://urielch.github.io/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/net.minidev/accessors-smart", "versionInfo" : "2.5.2" }, { "SPDXID" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.5.2", "copyrightText" : "Copyright 2011-2024 JSON-SMART authors\n\nAuthors: FangYidong ; JSON-SMART authors; Uriel Chemouni ; uriel Chemouni", "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/json-smart/2.5.2/json-smart-2.5.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/net.minidev/json-smart@2.5.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/caYHj1i7uKg4PuYSH7Ov4u6W0gnz2G1PueZaTS8nZKo/json-smart-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://urielch.github.io/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/net.minidev/json-smart", "versionInfo" : "2.5.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0", "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-lang/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-lang3", "versionInfo" : "3.17.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-fluent-5.5.1", "copyrightText" : "Copyright 2011-2021 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5-fluent/5.5.1/httpclient5-fluent-5.5.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5-fluent@5.5.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D2TOH3j77uspU2wG-Eq1PeX2qrVw5tKt7lMa67-RQfI/httpclient5-fluent-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents.client5/httpclient5-fluent", "versionInfo" : "5.5.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-5.5.2", "copyrightText" : "Copyright 1999-2021 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.5.2/httpclient5-5.5.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hM5fWGIwWRMsiuIGPdAnLhyiDj0hwSpHtr477k80qwU/httpclient5-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(MPL-2.0 AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents.client5/httpclient5", "versionInfo" : "5.5.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-h2-5.3.6", "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/core5/httpcore5-h2/5.3.6/httpcore5-h2-5.3.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/52uUI8XPaFoLaddqiXDnI6W7A__vfgksCiT7FiNSiq4/httpcore5-h2-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents.core5/httpcore5-h2", "versionInfo" : "5.3.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-5.3.6", "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/core5/httpcore5/5.3.6/httpcore5-5.3.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aCZWevGVF8EX5ikORwAMG3CGF5ifAiCPxVAKiC87pAA/httpcore5-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents.core5/httpcore5", "versionInfo" : "5.3.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14", "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/fluent-hc/4.5.14/fluent-hc-4.5.14.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Beykp52o_7Kq-JfqMiy3kjazjuggNjwoJIvwxGBTcVQ/fluent-hc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.14", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/fluent-hc", "versionInfo" : "4.5.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14", "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpclient", "versionInfo" : "4.5.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16", "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-core-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpcore", "versionInfo" : "4.4.16" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3", "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.logging.log4j/log4j-api", "versionInfo" : "2.24.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3", "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j", "versionInfo" : "2.24.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-4.0.5-classifier-pkg", "copyrightText" : "Copyright 2017-2025 Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/bouncy-castle-bc/4.0.5/bouncy-castle-bc-4.0.5-pkg.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.pulsar/bouncy-castle-bc@4.0.5?classifier=pkg", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CnOdqpja7FjQFGeNPyg-aAsYqS3su9InrJk04bXN_F4/bouncy-castle-bc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.pulsar/bouncy-castle-bc", "versionInfo" : "4.0.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-4.0.5", "copyrightText" : "Copyright 2017-2025 Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-admin-api/4.0.5/pulsar-client-admin-api-4.0.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CtptNUVMaFZdK2m-wfFb_w-xw-hiD3P63kqa3RKZT5U/pulsar-client-admin-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-admin-api@4.0.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.pulsar/pulsar-client-admin-api", "versionInfo" : "4.0.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-all-4.0.5", "copyrightText" : "Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz\nCopyright 2013 FasterXML.\nCopyright 2013 FasterXML.com\nCopyright 2010 Google Inc.\nCopyright 2010 Ning, Inc.\nCopyright 2018-2020 Raffaello Giulietti\nCopyright 2016 SmartBear Software\nCopyright 2020 Splunk Inc.\nCopyright 2014 The Error Prone Authors\nCopyright 2019 The Guava Authors\nCopyright 2013 The Netty Project\nCopyright 2014 Trevor Robinson\nCopyright 2015-16, Yahoo! Inc.\nCopyright 2016, Yahoo! Inc.\nCopyright (c) 2004-2006, 2008, 2009, 2011 Apple Inc.\nCopyright (c) 2014 AsyncHttpClient Project\nCopyright (c) 2004 Bill Burke\nCopyright (c) 2008-2009 Bjoern Hoehrmann \nCopyright (c) 2005 Brian Goetz\nCopyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright (c) 2019 Christoph Hellwig\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2004-2006 Intel Corporation\nCopyright (c) 2019 Jens Axboe\nCopyright (c) 2011, Joe Walnes and contributors\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2004-2011 QOS.ch\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2008, SnakeYAML\nCopyright (c) 2010-2012 Sonatype, Inc.\nCopyright (c) 2016 - 2020 Spotify AB\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2020 The Go Authors\nCopyright (c) 2017 The Gson authors\nCopyright (c) 2005 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright 2002-2020 the original author or authors\n\nAuthors: ; Adam Lindenthal; Adam Winer; Adrien Grand; Al Chou; Alan Green; Alban Peignier; Alex Chaffee (alex@apache.org); Alex Maltinsky; Alex Matevossian; Alex Saydakov; Alexander Saydadov; Alexander Saydakov; Alexey Stashok; Alistair Young; Andrew C. Oliver (acoliver at apache dot org); Andrew Dinn; Andy Pemberton (pembertona at gmail.com); Anthony Zana; Antony Riley; Apache Ant; Apache Avalon project; Apache Jakarta POI; Apache Jakarta Turbine; Apache Jakarta Velocity; Apache Software Foundation; Apple Chow; Apple Inc.; Archimedes Trajano; Arun Mammen Thomas; AsyncHttpClient Project; Atkinson, et al; Austin Appleby; Bart Calder; Ben Yu; Benoit Lacelle; Bill Burke; Bill Shannon; Bin Zhu; Bjoern Hoehrmann; Bob Lee; Bob Lee (crazybob@crazybob.org); Borislav Ivanov; Brett Randall; Brett Randall and Shigeru Chiba; Brian Goetz; Brian Goetz and Tim Peierls; Brian Milch; Brian S O'Neill; Bruno Harbulot; Bryan Atsatt; C. Scott Ananian; Catherine Berry; Charles Fry; Chris Audley; Chris Beams; Chris Feldhacker; Chris Hyzer; Chris Nokleberg; Chris Povirk; Christian Hammers ; Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland Multi-licensed EPL; Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz; Christoph Hellwig; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff Click; Cliff L. Biffle; Colin Decker; Colin Evans; Colin Sampaleanu; Commons Configuration team; Craig Berry; Craig McClanahan; Craig R. McClanahan; Daniel J. Bernstein; Daniel L. Rall; Daniel Lemire; Darick Tong; David Beaumont; Dimitris Andreou; Dmitri Plotnikov; Doug Lea; Doug Lea and Martin Buchholz; Eclipse Foundation; Edo Liberty; Emily Soldal; Emmanuel Bourg; Eric Fellheimer; Eric Pugh; Erik Kline; FasterXML; FasterXML.com; Gary D. Gregory; Gary Gregory; Gaurav Gupta; Geoff Pike; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google Inc.; Gregor Rayman; Gregory Kick; Gustav Trede; Harry Cheung; Harry Heymann; Hayward Chan; Helge Tesgaard; Hiroshi Yamauchi; Holger Krauth; Hubert Iwaniuk; Imran M Yousuf (imran at smartitengineering.com); Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Intel Corporation; Isaac Shum; Jakub Podlesak; Jakub Podlesak (jakub.podlesak @ oracle.com); Jakub Podlesak (jakub.podlesak at oracle.com); James Sexton; Jan Sorensen; Janek Bogucki; Jared Levy; Jason Gritman; Jason Lee; Jason T. Greene; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jeff Varszegi; Jens Axboe; Jens Nyman; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Jesse Wilson; Jitendra Kotamraju; Jitendra Kotamraju, Martin Grebac; Joe Fialli; Joe Walnes and contributors; Joel Leitch; Johannes Henkel; John Mani; John Wells (john.wells at oracle.com); Jon Malkin; Jon Noack; Joseph Fialli; Joshua O'Madadhain; Juergen Hoeller; Julien Silland; Justin Couch; Justin Mahoney; Justin T. Sampson; Justin Thaler; Karl Wright (kwright@metacarta.com); Keiron Liddle, Aftex Software ; Keith Bottner; Keith Donald; Keith Stanger; Kevin Bourrillion; Kevin Damm; Kevin Lang; Kohsuke Kawaguchi; Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com) Joseph Fialli; Kohsuke Kawaguchi, Joe Fialli; Kohsuke Kawaguchi, Martin Grebac; Kohsuke Kawaguchi, Sun Microsystems, Inc.; Kohsuke Kawaguchi, Sun Microsystems, Inc. Ryan Shoemaker, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems, Inc.; Kohsuke Kawaguchi, Sun Microsystems, Inc. Sekhar Vajjhala, Sun Microsystems, Inc.; Kohsuke Kawaguchi, Sun Microsystems,Inc. Sekhar Vajjhala, Sun Microsystems, Inc.; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Lee Rhodes; Libor Kramolis; Louis Wasserman; Lovro Pandzic; Luke Sandberg; Maarten Coene; Marc Hadley; Marc Hadley http://www.ietf.org/rfc/rfc2109.txt; Marc Hadley http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html; Marc Hadley http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html; Marc Johnson (mjohnson at apache dot org); Marcin Mikosik; Marek Potociar; Marek Potociar (marek.potociar at oracle.com); Margaret Odell and Robert Russell; Mario Winterer; Mark Davis; Mark Reinhold; Marten Hedborg; Martin Buchholz; Martin Matula; Masato Tezuka; Mason Taube; Mason Taube (mason.taube at oracle.com); Matt Benson; Matthew Hawthorne; Matthew Inger; Matthias Eichel; Max Spivak; Michael Becke; Michael Davey; Michael Lancaster; Michal Gajdos; Mick Killianey; Mike Bostock; Mike Bowler; Mike Ward; Miles Barr; Miroslav Fuksa; Miroslav.Kos@oracle.com; Moritz Petersen; Muga Nishizawa; Nick Kralevich; Nick Piepmeier; Nick Williams; Nicolas De Loof; Nikolay Metchev; Ning, Inc.; Nishant Thakkar; Norm Deane; Oliver Heger; Omar Darwish; Ondrej Kosatka; Oracle and/or its affiliates; Pankaj Kakkar; Patrik Dudits; Paul Marks; Paul Sandoz; Pavel Bucek; Pavel Bucek (pavel.bucek at oracle.com); Payara Foundation and/or its affiliates; Payara Service Ltd. and/or its affiliates; Pedro Kowalski (pallipp at gmail.com); Pete Gieser; Pete Gillin; Petr Bouda; Petr Janouch; Phil Steitz; Prashant Deva; Praveenkumar Venkatesan; Purple Technology; QOS.ch; Qian Huang; Rafal Krupinski; Rafal.Krzewski@e-point.pl' Rafal Krzewski; Raffaello Giulietti; Raimundo Mirisola; Ralph Schaer; Reuben Sivan; Rey Francois; Rob Harrop; Robert Burrell Donkin; Robert Harder; Robert Konigsberg; Robert Scholte; Rod Johnson; Rodney Waldhoff; Roman Grigoriadi; Ryan Heaton; Ryan Heaton http://json-schema.org/ JSON Schema; Ryan Lubke (ryan.lubke at oracle.com); Ryan Shoemaker, Sun Microsystems, Inc.; Ryan Shoemaker, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems, Inc.; Ryan Shoemaker, Sun Microsystems, Inc. Kohsuke Kawaguchi, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems, Inc.; Sam Brannen; Sanjeeb.Sahoo@Sun.COM; Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Scott Johnson; Scott Sanders (sanders at apache dot org); Sean C. Sullivan; Sean Schofield; Sebastian Kanthak; Sekhar Vajjhala, Sun Microsystems Inc. Kohsuke Kawaguchi, Sun Microsystems Inc.; Sekhar Vajjhala, Sun Microsystems, Inc.; Sekhar Vajjhala, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems Inc.; Sekhar Vajjhala, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems Inc. Kohsuke Kawaguchi, Sun Microsystems, Inc. Ryan Shoemaker,Sun Microsystems Inc.; Sergey Beryozkin; Shardul Deo; Shigeru Chiba; SmartBear Software; SnakeYAML; Sonatype, Inc.; Splunk Inc.; Spotify AB; Stefan Katerkamp (stefan@katerkamp.de); Stepan Koltsov; Stepan Kopriva; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Steve Cohen; Steve McKay; Sven Mawson; Sverre Sundsdal; Tatu Saloranta; TeaTrove project; Tetsuya Kaneuchi; The Android Open Source Project; The Error Prone Authors; The Go Authors; The Gson authors; The Guava Authors; The JSR-330 Expert Group; The Netty Project; Tim O'Brien; Timothy Gerard Endres (time@ice.com); Tolstopyatov Vsevolod; Tom Ball; Tom Beerbower; Tomasz Blachowicz; Torbjorn Gannholm; Travis Reeder; Trevor Miller; Trevor Robinson; Ulrich Drepper ; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; Warren Dukes; Western Airlines; William Kinney; Yahoo! Inc.; Yegor Bugayenko (yegor256 at java.net); Yoann Rodiere; Zoltan Kiss; adonovan@google.com (Alan Donovan); adrian@jboss.org Adrian Brock; alex@purpletech.com Alexander Day Chaffee; an ObjectImporter; ben.manes@gmail.com; benyu@google.com; bill@jboss.org Bill Burke; chrise@esha.com Christopher Elkins; code CacheBuilder; david@davidkarlsen.com David J. M. Karlsen; dlr@finemaltcoding.com Daniel Rall; ebourg@apache.org Emmanuel Bourg; epugh@upstate.com Eric Pugh; fredrik@westermarck.com Fredrik Westermarck; gcoladonato@yahoo.com Greg Coladonato; geirm@optonline.net Geir Magnusson Jr; ggregory@seagullsw.com Gary Gregory; gpike@google.com (Geoff Pike); herve.quiroz@esil.univ-mrs.fr' Herve Quiroz; hps@intermeta.de' Henning P. Schmiedehausen; http://commons.apache.org/configuration/team-list.html' Commons Configuration team; http://jakarta.apache.org/turbine/ Apache Jakarta Turbine; https://github.com/franz1981; https://rome.dev.java.net; hubick@java.net; imran@smartitengineering.com; ipriha@surfeu.fi' Ilkka Priha; janekdb@yahoo.co.uk' Janek Bogucki; jon@latchkey.com Jon S. Stevens; jvanzyl@apache.org Jason van Zyl; kjohnson@transparent.com Kent Johnson; knielsen@apache.org Kasper Nielsen; ksh@scand.com Konstantin Shaposhnikov; kylemaddison@google.com (Kyle Maddison); leon@opticode.co.za' Leon Messerschmidt; mpoeschl@marmot.at' Martin Poeschl; nicolas.deloof@gmail.com Nicolas De Loof; nissim@nksystems.com Nissim Karpenstein; ola.berg@arkitema.se' Ola Berg; rand_mcneely@yahoo.com Rand McNeely; raphael.jolivet@gmail.com; ricardo.gladwell@btinternet.com Ricardo Gladwell; rsc@google.com; sbailliez@apache.org Stephane Bailliez; sdowney@panix.com Steve Downey; sergek@lokitech.com Serge Knystautas; shapira@mpi.com Yoav Shapira; stefan.bodewig@epost.de' Stefan Bodewig; stefano@apache.org Stefano Mazzocchi; steve.downey@netfolio.com Steve Downey; steven@caswell.name' Steven Caswell; the Caversham Project at the University of Otago; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-all/4.0.5/pulsar-client-all-4.0.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-3Q4qoUHFS7qtL8Et3CDooTTZBREsQTWCyqkTqWE9Pg/pulsar-client-all-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-all@4.0.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CC-PDDC AND LGPL-2.1-only AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND MIT AND APSL-2.0 AND CC-BY-2.5 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.pulsar/pulsar-client-all", "versionInfo" : "4.0.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-4.0.5", "copyrightText" : "Copyright 2017-2025 Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-api/4.0.5/pulsar-client-api-4.0.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EAkO_DnqzWLbYZZAmxt_y07fThGxoe48bCQ4y2-DGUI/pulsar-client-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-api@4.0.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.pulsar/pulsar-client-api", "versionInfo" : "4.0.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-core-4.0.5", "copyrightText" : "Copyright 2017-2025 Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-package-core/4.0.5/pulsar-package-core-4.0.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Roor83j3AZkxfJVy8ZcMvEzOO2VgmYMYuwXXBNbCYvg/pulsar-package-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-package-core@4.0.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.pulsar/pulsar-package-core", "versionInfo" : "4.0.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.53", "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2026 The Apache Software Foundation\nCopyright (c) 1999-2026, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2026, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.53/tomcat-embed-core-10.1.53.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/63f55G8TakLNgM0N1lyEgudMbo2wq1CBcebTpRXoGqY/tomcat-embed-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.53", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core", "versionInfo" : "10.1.53" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.53", "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.53/tomcat-embed-el-10.1.53.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SmQc4dnuCkYqXLhFR5hxM9WYCpLTI5FYNfyTtIlf9fw/tomcat-embed-el-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.53", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el", "versionInfo" : "10.1.53" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.53", "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.53/tomcat-embed-websocket-10.1.53.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.53", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5Vmg47MJlL7qWTbtjpKAyMfVy2n0CgncUYl9-k3kKOo/tomcat-embed-websocket-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket", "versionInfo" : "10.1.53" }, { "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.9.25.1", "copyrightText" : "Copyright (c) 2002,2010\nCopyright (c) 2005 Contributors\nCopyright (c) Copyright 1999-2001 Xerox Corporation, 2002 Palo A lto Research Center, Incorporated\nCopyright (c) 2004 IBM\nCopyright (c) 2005 IBM, Contributors\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2000, 2003 IBM Corporation and others\nCopyright (c) 2004, 2013 IBM, VMware\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC). 2004 IBM Corporation\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC) and others\nCopyright (c) 2010 SpringSource, Contributors\nCopyright (c) 2001 The Apache Software Foundation\nCopyright (c) 2016-17 The Apache Software Foundation\nCopyright (c) 2013 VMware\nCopyright (c) 2012 VMware, Inc.\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1998-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002-2018 Palo Alto Research Center, Incorporated (PARC), Contributors\n\nAuthors: E. Haase; Enver Haase; Patrick C. Beard; M. Dahm; A. Nevado; Abraham Nevado; Adrian Colyer; Adrian Sampson; Alexander Kriegisch; Alexandre Vasseur; Andy Clement; Andy Clement, Abraham Nevado; Chris Nokleberg; Contributors; David Dixon-Peugh; David Knibb; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erik Hilsdale; Eugene Kuleshov; IBM; IBM Corporation; IBM Corporation and others; IBM, Contributors; IBM, VMware; INRIA, France Telecom; Jason Zaugg; Jim Hugunin; John Kew; Joseph MacFarlane; Juozas Baliuka; Konstantin Shagin ; Kris De Volder; Lyor Goldstein; M. Dahm; Mario Ivankovits; Mik Kersten; Niko Matsakis; Palo Alto Research Center, Incorporated; Palo Alto Research Center, Incorporated (PARC); Palo Alto Research Center, Incorporated (PARC) and others; Palo Alto Research Center, Incorporated (PARC). IBM Corporation; Prashant Deva; Rafael Winterhalter; Rajendra Inamdar, Vishal Vishnoi; Remi Forax; Ron Bodkin; SpringSource, Contributors; The Apache Software Foundation; Thomas Hallgren; Thomas Kiviaho; Tuomas Kiviaho; VMware; VMware, Inc.; Xerox Corporation, Palo A lto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC); Xerox Corporation, Palo Alto Research Center, Incorporated (PARC), Contributors; a ClassWriter; colyer Annotation; colyer Creates; colyer Facade; colyer Implementors; colyer Instances; colyer Marker; colyer Matches; the Apache Software Foundation (https://www.apache.org/); the Apache Software Foundation https://www.apache.org/ https://www.apache.org; the PatternParser", "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjweaver/1.9.25.1/aspectjweaver-1.9.25.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.aspectj/aspectjweaver@1.9.25.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i__E50DkV1uT1UJv6QkUEjguwZeQUUiVhe52GZE_E3s/aspectjweaver-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.eclipse.org/aspectj/", "licenseConcluded" : "(EPL-1.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.aspectj/aspectjweaver", "versionInfo" : "1.9.25.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1", "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.78.1/bcpkix-jdk18on-1.78.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcpkix-jdk18on", "versionInfo" : "1.78.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.79", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.79/bcpkix-jdk18on-1.79.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.79", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tb2tVpaVHBOW2MFc0ohi8oWWtgxY-lR9Xih4q29FGJ4/r1rv79.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcpkix-jdk18on", "versionInfo" : "1.79" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b2cWV45eM6_2mMsYRqjw77Mlu_ur6sL214SFPwnGty4/bcprov-jdk18on-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.bouncycastle.org/java.html", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcprov-jdk18on", "versionInfo" : "1.78.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.79", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.79/bcprov-jdk18on-1.79.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DXFIxCzXbHFXsws5cZs6MrBlRw8HJz_IGBgQ4JJw6ro/bcprov-jdk18on-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.bouncycastle.org/java.html", "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcprov-jdk18on", "versionInfo" : "1.79" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1", "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.78.1/bcutil-jdk18on-1.78.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcutil-jdk18on", "versionInfo" : "1.78.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.79", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.79/bcutil-jdk18on-1.79.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tb2tVpaVHBOW2MFc0ohi8oWWtgxY-lR9Xih4q29FGJ4/r1rv79.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.79", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcutil-jdk18on", "versionInfo" : "1.79" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/bayeux-api", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/cometd-java-client", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/cometd-java-common", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25", "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ], "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.25/jetty-util-ajax-12.0.25.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.25", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MlBdgH06sFwFG34mdFmktMfqBaBZVME3axZ1TNJ5fec/jetty-util-ajax-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.jetty/jetty-util-ajax", "versionInfo" : "12.0.25" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25", "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ], "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.25/jetty-util-12.0.25.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.25", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fyRe10si-Sp2CYEl8KFav6V6nFhhnN6Ii1XfzmRPsYw/jetty-util-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.jetty/jetty-util", "versionInfo" : "12.0.25" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6", "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-api", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-locator", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-utils", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3", "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/osgi-resource-locator", "versionInfo" : "1.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.11/jersey-apache-connector-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SQGAvKCLb_YeIGpdm5DjRAFzHDlA3HXaKH0uoJhOIE/jersey-apache-connector-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.11/jersey-client-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFjkdmYyZIHDOWs70Y5lX-e5ktE_v-nP68lBbE6IWc0/jersey-client-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.core/jersey-client", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.11/jersey-common-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3lGNO9mwu28Bux_-Nu4u-Z-oHnHcwzF4DrIghQIHeY/jersey-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.core/jersey-common", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.11/jersey-hk2-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TebQJATQdwGRUPpC7VduvmcqQ2dc1hXux_4MMMU9sA0/jersey-hk2-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.inject/jersey-hk2", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.11/jersey-media-multipart-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l7JeW-thtrqp3-KRhvIyVi8fupF-HoJOx5jPiVp5Bv8/jersey-media-multipart-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND GPL-2.0-only WITH Classpath-exception-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2", "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker", "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://hdrhistogram.github.io/HdrHistogram/", "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hdrhistogram/HdrHistogram", "versionInfo" : "2.2.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final", "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI", "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.3.Final/hibernate-validator-8.0.3.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.3.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xGDFrb_wMfreSEhbwws_H9EC2UHSwbM5qieHyeehJ2U/hibernate-validator-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://hibernate.org/validator", "licenseConcluded" : "(CC-PDDC AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hibernate.validator/hibernate-validator", "versionInfo" : "8.0.3.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0", "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich", "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/TooTallNate/Java-WebSocket", "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.java-websocket/Java-WebSocket", "versionInfo" : "1.6.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA", "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba", "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.javassist.org/", "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.javassist/javassist", "versionInfo" : "3.30.2-GA" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final", "copyrightText" : "Copyright 2023 Red Hat, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.3.Final/jboss-logging-3.6.3.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uvI3EFUkHy5LdLFSEGRYKeGb49613nbl5zJk5Fw1lJw/jboss-logging-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.jboss.org", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jboss.logging/jboss-logging", "versionInfo" : "3.6.3.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0", "copyrightText" : "Copyright 2018-2020 The JSpecify", "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://jspecify.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jspecify/jspecify", "versionInfo" : "1.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15", "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jvnet.mimepull/mimepull", "versionInfo" : "1.9.15" }, { "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3", "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene", "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://latencyutils.github.io/LatencyUtils/", "licenseConcluded" : "CC0-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.latencyutils/LatencyUtils", "versionInfo" : "2.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.7.1", "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom", "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hTIAnSN4IrFluMjBvZn0ZHORyNo3UZYP3tiwzuEk4nA/asm-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.ow2.asm/asm@9.7.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://asm.ow2.io/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.ow2.asm/asm", "versionInfo" : "9.7.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17", "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/jcl-over-slf4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fQc2eKipjY0kpA5RY8tMSF1CmGwn1uqL1jZo391dDj4/jul-to-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/jul-to-slf4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/slf4j-api", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael Berry; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Wick Dynex; Yanming Zhou; Yongjun Hong; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.5.13/spring-boot-actuator-autoconfigure-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qM1Vrhn5pRKBIJLxuC8k276zGw1B-bMUI3jGbQqQ3Os/spring-boot-actuator-autoconfigure-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nabil Fawwaz Elqayyim; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Tommy Karlsson; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Xiong Tang; Young Jae; Yulin Qin; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.5.13/spring-boot-actuator-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MK768KVojQZgk0L32_OgahdvR30Wo47C1zuZckoKyf0/spring-boot-actuator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-actuator", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmitry Sulman; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Florian Lemaire; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Pedro Xavier Leite Cavadas; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.5.13/spring-boot-autoconfigure-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LuxV4VpV9t8JzrrGjEGTK-6xYYGKEtKZ5DLY4-n15do/spring-boot-autoconfigure-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-autoconfigure", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-configuration-processor-3.5.13", "copyrightText" : "Copyright (c) 2010 The Android Open Source Project\nCopyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Dmytro Nosan; Jonas Kessler; Kris De Volder; Moritz Halbritter; Pavel Anisimov; Scott Frederick; Stephane Nicoll; The Android Open Source Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-configuration-processor/3.5.13/spring-boot-configuration-processor-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ry8sFgzuzR5zWHDWgZDi9UOCDtizGtlAu5D_pPucB3A/spring-boot-configuration-processor-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-configuration-processor", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/3.5.13/spring-boot-starter-actuator-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AtExloF06w-vDS7jw2nn3kfeesOqdlXwdlSGLcQ4jak/spring-boot-starter-actuator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-actuator", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/3.5.13/spring-boot-starter-json-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e4jWB2hFmab1xDfAt74-Y55w_HEDksQiH4H4DPtdWT8/spring-boot-starter-json-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-json", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.5.13/spring-boot-starter-logging-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5fw_0zraYl_7voCFsy6BuBqxo21zNIT8tYzrulTioL8/spring-boot-starter-logging-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-logging", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/3.5.13/spring-boot-starter-security-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5vRQfv6LyeCINTNy1bRdBhh7f7s1AgQu-kwqkSXDR1w/spring-boot-starter-security-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-security", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/3.5.13/spring-boot-starter-tomcat-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kAtsyxlhJFmWQ4maWbTbeeBHbU1pKRKgrNkR1eHBcsE/spring-boot-starter-tomcat-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/3.5.13/spring-boot-starter-web-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1lH2ueoU4mTz3qjjA3rqk4tMzuHyNMP93qsNdT2rK0g/spring-boot-starter-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-web", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.5.13/spring-boot-starter-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GRoeX2vsgR9dduGW3M_PnUMwSKd0tVVso19HxniUr80/spring-boot-starter-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andrey Litvitski; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daeho Kwon; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nan Chiu; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.5.13/spring-boot-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E8p1TSHRrSNERP-wjygNUPG0DFC3OHMg6ZC8n8H_HmM/spring-boot-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.hateoas-spring-hateoas-2.5.2", "copyrightText" : "Copyright 2011-2022 the original author or authors\n\nAuthors: Alexander Baetz; Andrew Naydyonock; Christoph Strobl; Dietrich Schulten; Drummond Dawson; Greg Turnquist; JamesE Richardson; Jeff Stano; Jeffrey Walraven; Jens Schauder; Johhny Lim; Juergen Zimmerman; Kamill Sokol; Kevin Conaway; Lars Michele; Manish Misra; Mark Paluch; Michael Schout; Michael Wirth; Michal Stochmialek; Oemer Yildiz; Oliver Drotbohm; Oliver Drotbohm https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml' Official IANA; Oliver Gierke; Oliver Trosien; Przemek Nowak; Reda Housni Alaoui; Ricardo Gladwell; Roland Kulcsar; Ross Turner; Tom Bunting; Vedran Pavic; Viliam Durina; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/hateoas/spring-hateoas/2.5.2/spring-hateoas-2.5.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WFWeogKdZCj1IStOqy1XC8-FwTTOPWAPaBMDnVyd72U/spring-hateoas-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-hateoas", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.hateoas/spring-hateoas", "versionInfo" : "2.5.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.plugin-spring-plugin-core-3.0.0", "copyrightText" : "Copyright (c) 2008-2019 Pivotal Software, Inc.\nCopyright 2010-2022 the original author or authors\n\nAuthors: Oliver Drotbohm; Oliver Gierke; Pivotal Software, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/plugin/spring-plugin-core/3.0.0/spring-plugin-core-3.0.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6bA015_FRTyf0ylG7EomQOk_bVMK2JTefm2vCJq-msM/spring-plugin-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-plugin/spring-plugin-core", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.plugin/spring-plugin-core", "versionInfo" : "3.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-2.0.12", "copyrightText" : "Copyright (c) 2006-2023 the original author or authors\nCopyright 2002-2008 the original author or authors\n\nAuthors: Aftab Shaikh; Aldo Sinanaj; Aleksandr Shamukov; Andreas Ahlenstorf; Anton Aharkau; Artem Bilan; Chase Diem; Dan Garrette; Dave Syer; Emanuele Ivaldi; Evgeny Lazarev; Gary Russell; Gianluca Medici; Henning Pottker; Huijin Hong; James Carr; Jon Travis; Josh Long; Kim In Hoi; Kim Sumin; Lucas Ward; Maksim Kita; Marcin Zajaczkowski; Marius Grama; Marius Lichtblau; Mark Fisher; Markus Heiden; Michael Minella; Morulai Planinski; Nathanael Roberts; Randell Callahan; Rob Harrop; Roman Akentev; Ruslan Stelmachenko; Tobias Soloschenko; Tomaz Fernandes; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/retry/spring-retry/2.0.12/spring-retry-2.0.12.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.retry/spring-retry@2.0.12", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AnwA5F7VCVTha60FB-XNkglBqNcHbmUIP774CY-Xv8w/spring-retry-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-retry", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.retry/spring-retry", "versionInfo" : "2.0.12" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.9", "copyrightText" : "Copyright 2004-present the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ding Hao; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne ; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Pat McCusker; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/6.5.9/spring-security-config-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@6.5.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nZUCgaHURHNR26NoiH3XGaVee3jvyYWKNE_caI4qbV0/spring-security-config-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-config", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.9", "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/6.5.9/spring-security-core-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@6.5.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NfIRbLtdWIL1wW_tLh5VyAelT4K1jhpwv-yia28jNLU/spring-security-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-core", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.9", "copyrightText" : "Copyright (c) 2006 Damien Miller \nCopyright 2004-present the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/6.5.9/spring-security-crypto-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@6.5.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zB5v97tz2OACsjfNbbsZyR9_AuPFaKBCOumX-iQZfjU/spring-security-crypto-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-crypto", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.9", "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Claudenir Freitas; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Daeho Kwon; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Michal Okosy; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Nikita Konev; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sangyoon Jeong; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Yoobin Yoon; Zeeshan Adnan; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/6.5.9/spring-security-web-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@6.5.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tSrlCXzZ1YK7EGOjwFFRsACCGQ1jfGzRofr3o2GB6f8/spring-security-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-web", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.17/spring-aop-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NOUf0er1203jwHYX3NMxVfIVtqw4fsDlio7zjzYnroo/spring-aop-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-aop", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. Therefore; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.17/spring-beans-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f9peXVqlxLMH3VXPTN5VMSIq5UhabGo8dpB4qVEzpao/spring-beans-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-beans", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.17/spring-context-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tQmsk1uWXTR7s4EHLi1bsi8ia28Sf0qmq_JG6nqlroI/spring-context-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-context", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.17/spring-core-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o8gSdVJh9AdfMtFRHZkG2dPKCPIeTADOf0Gv18zv6lw/spring-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-core", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.17/spring-expression-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p6Ihxuv4tF5d7ljOqE6O8j16MDVzLVacbWDDESJ4dHM/spring-expression-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-expression", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.17/spring-jcl-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cuAMiMrufw6J9qa2UdETJg7geWy4vnCk3C0NS3g9WSM/spring-jcl-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-jcl", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.17/spring-web-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hS5ujBEYHNrwdzW7vNlrhWlZZMCUZzBBK0vMikHFCOU/spring-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-web", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Taeik Lim; Thomas Risberg; Vedran Pavic; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.17/spring-webmvc-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sGOzN6BYu5Q08nytgKdkj7Amh0z7yJFpRgOab0GMan8/spring-webmvc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-webmvc", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4", "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML", "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.4", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO38iEj-NCzAqI21sz6Ktwg7iVuQ5IRLxSB8qyAgRHA/snakeyaml-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.yaml/snakeyaml", "versionInfo" : "2.4" } ], "relationships" : [ { "spdxElementId" : "SPDXRef-DOCUMENT", "relationshipType" : "DESCRIBES", "relatedSpdxElement" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-configuration-processor-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.7.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.jayway.jsonpath-json-path-2.9.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-2.0.12" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.hateoas-spring-hateoas-2.5.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.plugin-spring-plugin-core-3.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-digester-commons-digester-2.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-validator-commons-validator-1.10.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-context-1.49.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-api-incubator-1.45.0-alpha" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-api-1.49.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-fluent-5.5.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.5.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.5.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-h2-5.3.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-5.3.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-5.5.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-4.0.5" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-4.0.5-classifier-pkg" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-core-4.0.5" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.53" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-all-4.0.5" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-4.0.5" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.9.25.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.53" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.53" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.79" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.79" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.79" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-agents-2026.0.63", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11" } ] }