{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-04-17T20:46:32Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "cumulocity-core-v2026.0.63",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-scancode-ms-specification",
    "extractedText" : "Permission to copy, display and distribute the contents of this document (the\n\"Specification\"), in any medium for any purpose without fee or royalty is\nhereby granted, provided that you include the following notice on ALL copies of\nthe Specification, or portions thereof, that you make:\nCopyright (c) Microsoft Corporation.All rights reserved.Permission to copy,\ndisplay and distribute this document is available at:\nhttp://msdn.microsoft.com/library/en-us/odcXMLRef/html/odcXMLRefLegalNotice.asp?frame=true.\n\nNo right to create modifications or derivatives of this Specification is\ngranted herein. There is a separate patent license available to parties\ninterested in implementing software programs that can read and write files that\nconform to the Specification.This patent license is available at this\nlocation:http://www.microsoft.com/mscorp/ip/format/xmlpatentlicense.asp.\n\nTHE SPECIFICATION IS PROVIDED \"AS IS\" AND MICROSOFT MAKES NO REPRESENTATIONS OR\nWARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR TITLE;\nTHAT THE CONTENTS OF THE SPECIFICATION ARE SUITABLE FOR ANY PURPOSE; NOR THAT\nTHE IMPLEMENTATION OF SUCH CONTENTS WILL NOT INFRINGE ANY THIRD PARTY PATENTS,\nCOPYRIGHTS, TRADEMARKS OR OTHER RIGHTS. MICROSOFT WILL NOT BE LIABLE FOR ANY\nDIRECT, INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF\nOR RELATING TO ANY USE OR DISTRIBUTION OF THE SPECIFICATION.\n\nThe name and trademarks of Microsoft may NOT be used in any manner, including\nadvertising or publicity pertaining to the Specification or its contents\nwithout specific, written prior permission. Title to copyright in the\nSpecification will at all times remain with Microsoft. No other rights are\ngranted by implication, estoppel or otherwise.",
    "name" : "LicenseRef-scancode-ms-specification"
  }, {
    "licenseId" : "LicenseRef-scancode-ms-ws-routing-spec",
    "extractedText" : "Microsoft WS Routing Specifications License WS/WS-Routing.xsd\n\nCopyright 2001 Microsoft Corporation. All rights reserved.\n\nThe presentation, distribution or other dissemination of the information contained herein by Microsoft is not a license, either expressly or impliedly, to any intellectual property owned or controlled by Microsoft.\n\nThis document and the information contained herein is provided on an \"AS IS\" basis and to the maximum extent permitted by applicable law, Microsoft provides the document AS IS AND WITH ALL FAULTS, and hereby disclaims all other warranties and conditions, either express, implied or statutory, including, but not limited to, any (if any) implied warranties, duties or conditions of merchantability, of fitness for a particular purpose, of accuracy or completeness of responses, of results, of workmanlike effort, of lack of viruses, and of lack of negligence, all with regard to the document. ALSO, THERE IS NO WARRANTY OR CONDITION OF TITLE, QUIET ENJOYMENT, QUIET POSSESSION, CORRESPONDENCE TO DESCRIPTION OR NON-INFRINGEMENT WITH REGARD TO THE DOCUMENT.\n\nIN NO EVENT WILL MICROSOFT BE LIABLE TO ANY OTHER PARTY FOR THE COST OF PROCURING SUBSTITUTE GOODS OR SERVICES, LOST PROFITS, LOSS OF USE, LOSS OF DATA, OR ANY INCIDENTAL, CONSEQUENTIAL, DIRECT, INDIRECT, OR SPECIAL DAMAGES WHETHER UNDER CONTRACT, TORT, WARRANTY, OR OTHERWISE, ARISING IN ANY WAY OUT OF THIS OR ANY OTHER AGREEMENT RELATING TO THIS DOCUMENT, WHETHER OR NOT SUCH PARTY HAD ADVANCE NOTICE OF THE POSSIBILITY OF SUCH DAMAGES.",
    "name" : "LicenseRef-scancode-ms-ws-routing-spec"
  }, {
    "licenseId" : "LicenseRef-scancode-ws-addressing-spec",
    "extractedText" : "WS Addressing Specification License \nWS/WS-Addressing.xsd\n\nCopyright © 2002-2004 BEA Systems Inc., International Business Machines\nCorporation, Microsoft Corporation, Inc, SAP AG, and Sun Microsystems, Inc.. All\nrights reserved.\n\nPermission to copy, display, perform, modify and distribute the WS-Addressing\nSpecification, and to authorize others to do the foregoing, in any medium\nwithout fee or royalty is hereby granted for the purpose of developing and\nevaluating the WS-Addressing Specification.\n\nBEA, IBM, Microsoft, SAP AG, and Sun Microsystems (collectively, the \"Authors\")\neach agree to grant a license to third parties, under royalty-free and otherwise\nreasonable, non-discriminatory terms and conditions, to their respective\nessential patent claims that they deem necessary to implement the WS-Addressing\nSpecification.\n\nDISCLAIMERS:\n\nTHE WS-Addressing Specification IS PROVIDED \"AS IS\", AND THE AUTHORS MAKE NO\nREPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED\nTO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-\nINFRINGEMENT, OR TITLE; THAT THE CONTENTS OF THE WS-Addressing Specification IS\nSUITABLE FOR ANY PURPOSE; NOR THAT THE IMPLEMENTATION OF SUCH CONTENTS WILL NOT\nINFRINGE ANY THIRD PARTY PATENTS, COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS.\n\nTHE AUTHORS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL OR\nCONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THE WS-Addressing Specification\nOR THE PERFORMANCE OR IMPLEMENTATION OF THE CONTENTS THEREOF.\n\nYou may remove these disclaimers from your modified versions of the WS-\nAddressing Specification provided that you effectively disclaim all warranties\nand liabilities on behalf of all copyright holders in the copies of any such\nmodified versions you distribute.\n\nThe name and trademarks of the Authors may NOT be used in any manner, including\nadvertising or publicity pertaining to the WS-Addressing Specification or its\ncontents without specific, written prior permission. Title to copyright in the\nWS-Addressing Specification will at all times remain with the Authors.\n\nNo other rights are granted by implication, estoppel or otherwise.",
    "name" : "LicenseRef-scancode-ws-addressing-spec"
  }, {
    "licenseId" : "LicenseRef-scancode-ws-trust-specification",
    "extractedText" : "WS-Trust Specification\n\nPermission to copy and display the WS-Trust Specification (the \"Specification\", which \nincludes WSDL and schema documents), in any medium without fee or royalty \nis hereby granted, provided that you include the following on ALL copies of the \nSpecification, that you make:\n\n1.  A link or URL to the Specification at one of the Authors' websites\n2. The copyright notice as shown in the Specification.\n\nIBM, Microsoft and Actional, BEA, Computer Associates, Layer 7, Netegrity, Oblix, \nOpenNetwork, Ping Identity, Reactivity, and Verisign (collectively, the \"Authors\") each \nagree to grant you a license, under royalty-free and otherwise reasonable, \nnon-discriminatory terms and conditions, to their respective essential patent claims \nthat they deem necessary to implement the Specification.\n\nTHE SPECIFICATION IS PROVIDED \"AS IS,\" AND THE AUTHORS MAKE \nNO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT \nNOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A \nPARTICULAR PURPOSE, NON-INFRINGEMENT, OR TITLE; THAT THE CONTENTS OF \nTHE SPECIFICATION ARE SUITABLE FOR ANY PURPOSE; NOR THAT THE \nIMPLEMENTATION OF SUCH CONTENTS WILL NOT INFRINGE ANY THIRD PARTY \nPATENTS, COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS.\n\nTHE AUTHORS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, \nINCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR RELATING TO ANY \nUSE OR DISTRIBUTION OF THE SPECIFICATION.\n\nThe name and trademarks of the Authors may NOT be used in any manner, \nincluding advertising or publicity pertaining to the Specification or \nits contents without specific, written prior permission. Title to \ncopyright in the Specification will at all times remain with the Authors.\n\nNo other rights are granted by implication, estoppel or otherwise.",
    "name" : "LicenseRef-scancode-ws-trust-specification"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-cumulocity-core-v2026.0.63-14a98ac8-de51-454f-b666-793e830278bf",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/cumulocity-core@2026.0.63",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "cumulocity-core",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "2026.0.63"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.blueconic-browscap-java-1.5.1",
    "copyrightText" : "Copyright (c) 2017 BlueConic",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/blueconic/browscap-java/1.5.1/browscap-java-1.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kZ0qOq3v1oroh-f9essA-JSj_6SbgsVAboJFqp8TeGs/browscap-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.blueconic/browscap-java@1.5.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.blueconic.com",
    "licenseConcluded" : "(BSD-2-Clause AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.blueconic/browscap-java",
    "versionInfo" : "1.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.14.1",
    "copyrightText" : "Copyright 2016-2021 The Apache Software Foundation\nCopyright (c) 2008 2016 http://fasterxml.com/ FasterXML\nCopyright (c) 2012 http://fasterxml.com fasterxml.com\nCopyright 2007-present the original author or authors\n\nAuthors: FasterXML; Pascal Gelinas; The Apache Software Foundation; fasterxml.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.14.1/jackson-annotations-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z5Dus2vXr2SRVrTgrqJCX_L2MUs7Ru90F7W9u0NXJIQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.14.1",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) Werner Randelshofer. Apache",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.14.1/jackson-core-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JHgKfQEnbdj7IruQ1G81ZrWkdJGJYeJMIG9kzeAcDXc/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.14.1",
    "copyrightText" : "Copyright 2010 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.14.1/jackson-databind-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tt0REp8E__NrkPRikw4UtXB6FwbBQolJCtM6ljQYlqo/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.14.1",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2012 FasterXML.com\nCopyright (c) Gerwin Klein, Steve Rowe, Regis Decamps, Google LLC.\nCopyright (c) Tom Preston-Werner\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.14.1/jackson-dataformat-yaml-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J94snMsvufhQFdvz4zTmn9TLNaiaEROShiA4tQKPSck/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.14.1",
    "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.14.1/jackson-datatype-joda-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VCJ23U9GrXe9PgxZFnpoXJJ26Cz_QOyAi_mMWnevKpI/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-datatype-joda",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.14.1",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.14.1/jackson-datatype-jsr310-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5VMXc3fv95Gn-299F0l2cfextAEehg0cQ7BbuFqmwko/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/com.fasterxml.jackson.datatype/jackson-datatype-jsr310/2.14.1",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.14.1",
    "copyrightText" : "Copyright (c) http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.14.1/jackson-jaxrs-base-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ywz1WZ4xM0dCmsGenMWpwNIept-zuwakYF9NwLxmlZU/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.14.1",
    "copyrightText" : "Copyright (c) http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.14.1/jackson-jaxrs-json-provider-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M1bKeH_b1PEJhKkQK-wzvaLmu0VFGKJt7HS7YZyXNCc/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.14.1",
    "copyrightText" : "Copyright (c), Data Geekery GmbH, contact@datageekery.com\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2016 http://fasterxml.com/ FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: Data Geekery GmbH; Eugene Petrenko (eugene.petrenko@jetbrains.com); FasterXML; INRIA, France Telecom; Ryan Heaton; Ryan Heaton, Tatu Saloranta; Steven Schlansker; Tatu Saloranta; Tatu Saloranta (tatu.saloranta@iki.fi); a community of developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.14.1/jackson-module-jaxb-annotations-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qzFOvMl_PpFk4p99fnKM2IAMK5ZzTeWSimWYdu6fTIU/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-base",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jsonSchema-2.14.1",
    "copyrightText" : "Copyright 2013 FasterXML.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jsonSchema/2.14.1/jackson-module-jsonSchema-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jsonSchema@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/apuJYFHJwAL7fFaOE2qjh10H9rnNl9fbw1cZxMuaMXU/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-module-jsonSchema",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jsonSchema",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.woodstox-woodstox-core-6.4.0",
    "copyrightText" : "Copyright (c) 2001-2013 Oracle and/or its affiliates\nCopyright (c) 2004 Tatu Saloranta, tatu.saloranta@iki.fi",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/woodstox/woodstox-core/6.4.0/woodstox-core-6.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wjONYdAsFk0hjNP-HKEVtVsCo_ZpuSAHbYmDMvBjmUE/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/woodstox",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.woodstox/woodstox-core",
    "versionInfo" : "6.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.5.1",
    "copyrightText" : "Copyright (c) http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.5.1/classmate-1.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R0oFNzi1K5Rneq9jkYvp0fPETkxByvD__3-srrD2Opo/classmate-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/java-classmate",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml/classmate",
    "versionInfo" : "1.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.flipkart.zjsonpatch-zjsonpatch-0.4.16",
    "copyrightText" : "Copyright 2016 flipkart.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/flipkart/zjsonpatch/zjsonpatch/0.4.16/zjsonpatch-0.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.flipkart.zjsonpatch/zjsonpatch@0.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tI-AEQO86SnZRfdDmEC4ogTSnzrTSQGZ1diep_6QQ50/zjsonpatch-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/flipkart-incubator/zjsonpatch/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.flipkart.zjsonpatch/zjsonpatch",
    "versionInfo" : "0.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.ben-manes.caffeine-caffeine-3.2.0",
    "copyrightText" : "Copyright 2014 Ben Manes",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/ben-manes/caffeine/caffeine/3.2.0/caffeine-3.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4IUR-VS7oadTUKcViq57-SEDc7VtrNrF33m0PRSCzY4/caffeine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ben-manes/caffeine",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.ben-manes.caffeine/caffeine",
    "versionInfo" : "3.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.mifmif-generex-1.0.2",
    "copyrightText" : "Copyright 2014 y.mifrah",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/mifmif/generex/1.0.2/generex-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kHU0y6t26qcU5tRNBdKgTCt1KbVSZWD0UVYcOBGrCok/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.mifmif/generex@1.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/mifmif/Generex/tree/master",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.mifmif/generex",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.virtuald-curvesapi-1.08",
    "copyrightText" : "Copyright (c) 2005, Graph Builder",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/virtuald/curvesapi/1.08/curvesapi-1.08.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nGodg9OLUGvU6UuyHofgz3A7u-eg-dxl4Z7VIuHgbLg/curvesapi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.virtuald/curvesapi@1.08",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/virtuald/curvesapi",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.virtuald/curvesapi",
    "versionInfo" : "1.08"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.12.1",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.12.1/gson-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yc-LQBfxiuiSTfJlkBcPbn2C5yEQJOEzgMjhG4v220w/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.12.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.6.1",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.6.1/svenson-1.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xp1Eej42oDNos8HmPBkIAthgM2lUKAA3oEC5F312b8g/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.45.0",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.45.0/error_prone_annotations-2.45.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3MInujqyoaEg9mPaxzi7Q_oSDLhoYNt8O2s_pU_RukQ/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.45.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.45.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3",
    "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.5.0-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.5.0-jre/guava-33.5.0-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.5.0-jre",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ISR2H1ShkCoIMrHh4TUWSuZZq4fWj1SE8jBXFJz5sCU/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.5.0-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.1",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qieZxy3rXt81-Y6KbR-ILpMNRNBbUmb0n__Big8Gn4Q/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-4.33.1",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/protobuf/protobuf-java/4.33.1/protobuf-java-4.33.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.protobuf/protobuf-java@4.33.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qE01IzbeLY8rkcHf98cmCzAUwlYbBl54tFGAu0kvrHw/protobuf-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.protobuf/protobuf-java",
    "versionInfo" : "4.33.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.googlecode.libphonenumber-libphonenumber-8.12.3",
    "copyrightText" : "Copyright (c) 2009 The Libphonenumber Authors\n\nAuthors: David Yonge-Mallo; Shaopeng Jia; The Libphonenumber Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/googlecode/libphonenumber/libphonenumber/8.12.3/libphonenumber-8.12.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3LOywNcRCB93bW-GVkkJdawpmJntvhh1xepLRGr4Bjo/libphonenumber-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.googlecode.libphonenumber/libphonenumber@8.12.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/libphonenumber/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.googlecode.libphonenumber/libphonenumber",
    "versionInfo" : "8.12.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.h2database-h2-mvstore-1.4.200",
    "copyrightText" : "Copyright 2004-2019 H2 Group. Multiple-Licensed",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/h2database/h2-mvstore/1.4.200/h2-mvstore-1.4.200.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1MMxJQL6MNCvJVATPTJOz4bZIwWTguzKrexjAUetejQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.h2database/h2-mvstore@1.4.200",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://h2database.com/html/mvstore.html",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.h2database/h2-mvstore",
    "versionInfo" : "1.4.200"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-3.8.9",
    "copyrightText" : "Copyright 2015 Real Logic Ltd.\nCopyright (c) 2014, Appear Networks\nCopyright (c) 2013, 2015 EclipseSource\nCopyright (c) 2008, Hazelcast, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hazelcast/hazelcast/3.8.9/hazelcast-3.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PobNUQbY9phSQcY70ku6Q8AqpLSvVLFLwjCZ2HxRyoM/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hazelcast/hazelcast@3.8.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ralfstx/minimal-json",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hazelcast/hazelcast",
    "versionInfo" : "3.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.jayway.jsonpath-json-path-2.8.0",
    "copyrightText" : "Copyright 2011 the original author or authors\n\nAuthors: Evelyn Waugh; Nigel Rees; Sergey Saiyan sergey.sova42@gmail.com; matt@mjgreenwood.net; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/jayway/jsonpath/json-path/2.8.0/json-path-2.8.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PaOXGZ18WryFcYHLjBgw8mi5u5yYfrCQMWsuNsp7jfk/json-path-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.jayway.jsonpath/json-path@2.8.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jayway/JsonPath",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.jayway.jsonpath/json-path",
    "versionInfo" : "2.8.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.lmax-disruptor-3.4.3",
    "copyrightText" : "Copyright 2016 Gil Tene\nCopyright 2011 LMAX Ltd",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/lmax/disruptor/3.4.3/disruptor-3.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OVNSlSpstt5HSHD7-d_GntBLMIXR7IyrMdBetFXNoOk/disruptor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.lmax/disruptor@3.4.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://lmax-exchange.github.com/disruptor",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.lmax/disruptor",
    "versionInfo" : "3.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.6/nimbus-jose-jwt-10.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s5CzC5UPQfCya0w6T9tVplJoiSuLf36E7C7Dc3SSZSs/nimbus-jose-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/nimbus-jose-jwt",
    "versionInfo" : "10.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-cometd-java-server-3.0.10-2026.0.1",
    "copyrightText" : "Copyright (c) project.inceptionYear the original author or authors\nCopyright (c) 2008-2016 the original author or authors\n\nAuthors: project.inceptionYear the original author or authors; the original author or authors",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/cometd-java-server@3.0.10-2026.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNq7VMQfBCHYTkiacPJORC_33itGMT3UwSSGAPHikAI/dependencies-~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/cometd-java-server",
    "versionInfo" : "3.0.10-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-cometd-java-websocket-javax-server-3.0.10-2026.0.1",
    "copyrightText" : "Copyright (c) project.inceptionYear the original author or authors\nCopyright (c) 2008-2016 the original author or authors\n\nAuthors: project.inceptionYear the original author or authors; the original author or authors",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/cometd-java-websocket-javax-server@3.0.10-2026.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNq7VMQfBCHYTkiacPJORC_33itGMT3UwSSGAPHikAI/dependencies-~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/cometd-java-websocket-javax-server",
    "versionInfo" : "3.0.10-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-kubernetes-client-7.3.1-2026.0.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/kubernetes-client@7.3.1-2026.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5JZXPptSv-rY2oDmVnSDfzpAbfwK9X_kviFMo8Sm1Yw/kubernetes-client-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/kubernetes-client",
    "versionInfo" : "7.3.1-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-olingo-odata2-api-2.0.13-2026.0.1",
    "copyrightText" : "Copyright 2013-2019 The Apache Software Foundation",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/olingo-odata2-api@2.0.13-2026.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNq7VMQfBCHYTkiacPJORC_33itGMT3UwSSGAPHikAI/dependencies-~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/olingo-odata2-api",
    "versionInfo" : "2.0.13-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-olingo-odata2-core-2.0.13-2026.0.1",
    "copyrightText" : "Copyright 2013-2019 The Apache Software Foundation",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/olingo-odata2-core@2.0.13-2026.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNq7VMQfBCHYTkiacPJORC_33itGMT3UwSSGAPHikAI/dependencies-~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/olingo-odata2-core",
    "versionInfo" : "2.0.13-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-pulsar-client-original-2.8.4-2026.0.1",
    "copyrightText" : "Copyright 2014, Google Inc.\nCopyright 2017-2024 The Apache Software Foundation",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNq7VMQfBCHYTkiacPJORC_33itGMT3UwSSGAPHikAI/dependencies-~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/pulsar-client-original@2.8.4-2026.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/pulsar-client-original",
    "versionInfo" : "2.8.4-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-svenson-1.6.1-2026.0.1",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNq7VMQfBCHYTkiacPJORC_33itGMT3UwSSGAPHikAI/dependencies-~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nsn.cumulocity.dependencies.osgi/svenson@1.6.1-2026.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://startups.jira.com/wiki/display/MTM/Home",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nsn.cumulocity.dependencies.osgi/svenson",
    "versionInfo" : "1.6.1-2026.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-logging-interceptor-3.12.12",
    "copyrightText" : "Copyright (c) 2015 Square, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/logging-interceptor/3.12.12/logging-interceptor-3.12.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.12.12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ORyU3volXYJQ9ESdnxvYqX4zvVBsD30UVhqZrY3aTcI/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/com.squareup.okhttp3/logging-interceptor/3.12.12",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okhttp3/logging-interceptor",
    "versionInfo" : "3.12.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-3.12.12",
    "copyrightText" : "Copyright 2013 Twitter, Inc.\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2010 The Android Open Source Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp/3.12.12/okhttp-3.12.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Vxbcz0mIgHQ96m2RRWYp_ZjZoHZ7VwzTBjOSxWgUZ5o/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okhttp3/okhttp@3.12.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/com.squareup.okhttp3/okhttp/3.12.12",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okhttp3/okhttp",
    "versionInfo" : "3.12.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okio-okio-1.15.0",
    "copyrightText" : "Copyright 2014 Square Inc.\nCopyright (c) 2014 Square, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okio/okio/1.15.0/okio-1.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VoUUI6sLcIKSxVXGNzwooWxE7Z1y1QTohD4lU-RyzUI/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okio/okio@1.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/com.squareup.okio/okio/1.15.0",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okio/okio",
    "versionInfo" : "1.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.activation-jakarta.activation-1.2.2",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W5e_zMOyUQSnDujDpTBUAIEKUdbP-2oCaLFi-PNCrwc/jakarta.activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.activation/jakarta.activation",
    "versionInfo" : "1.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.activation-javax.activation-1.2.0",
    "copyrightText" : "Copyright (c) 2017 Oracle America, Inc.\nCopyright (c) 1997-2017 Oracle and/or its affiliates\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/activation/javax.activation/1.2.0/javax.activation-1.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.activation/javax.activation@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1E89isqLeM7s3NIcC1xhI4Flg_cjn0I4zepWL81UeFI/javax.activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.activation/javax.activation",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.istack-istack-commons-runtime-3.0.12",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/istack/istack-commons-runtime/3.0.12/istack-commons-runtime-3.0.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/a0Ej_EgwNZQIokl5io1ScCRNqUp5nMzvDMt6gwcs9PY/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.istack/istack-commons-runtime",
    "versionInfo" : "3.0.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.mail-jakarta.mail-1.6.7",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009, 2018 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2010, 2019 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/mail/jakarta.mail/1.6.7/jakarta.mail-1.6.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.mail/jakarta.mail@1.6.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jyYwAbGDcgE7zwbkir4S9xOCuiExlAo4vftK_yViag0/jakarta.mail-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.mail/jakarta.mail",
    "versionInfo" : "1.6.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.xml.messaging.saaj-saaj-impl-1.5.3",
    "copyrightText" : "Copyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2020 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/xml/messaging/saaj/saaj-impl/1.5.3/saaj-impl-1.5.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E_WWphKnvnAsrPqu9I0z4L8U-xdCfUes-Kasr3YH2_U/saaj-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.xml.messaging.saaj/saaj-impl",
    "versionInfo" : "1.5.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.typesafe.netty-netty-reactive-streams-2.0.4",
    "copyrightText" : "Copyright (c) 2015 Typesafe",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/typesafe/netty/netty-reactive-streams/2.0.4/netty-reactive-streams-2.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BuvaR_KsvWREZmGRBVB_cQUo2MawylNHuKU19loU-Ts/netty-reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.typesafe.netty/netty-reactive-streams",
    "versionInfo" : "2.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.univocity-univocity-parsers-2.9.1",
    "copyrightText" : "Copyright 2014 Univocity Software Pty Ltd\nCopyright (c) 2015. Univocity Software Pty Ltd",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/univocity/univocity-parsers/2.9.1/univocity-parsers-2.9.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gNtRCYHen5tev4I8m5ZmPGrp-uU3w5kxOJ9IuoKgZvw/univocity-parsers-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.univocity/univocity-parsers@2.9.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/univocity/univocity-parsers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.univocity/univocity-parsers",
    "versionInfo" : "2.9.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.warrenstrange-googleauth-1.5.0",
    "copyrightText" : "Copyright (c) 2014-2019 Enrico M. Crisostomo",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/warrenstrange/googleauth/1.5.0/googleauth-1.5.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.warrenstrange/googleauth@1.5.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZuYSY54vd16_UFWuiXxhK2LfPMjXU8T0PoaeJm2rY-M/googleauth-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://maven.apache.org",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.warrenstrange/googleauth",
    "versionInfo" : "1.5.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.yahoo.datasketches-memory-0.8.3",
    "copyrightText" : "Copyright 2015, Yahoo! Inc.\nCopyright 2015-16, Yahoo! Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/yahoo/datasketches/memory/0.8.3/memory-0.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9RpyhKAMdm5lIRQDagNGtk-CmJbr38sq3x24H6aUcb8/memory-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.yahoo.datasketches/memory@0.8.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.yahoo.datasketches/memory",
    "versionInfo" : "0.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.yahoo.datasketches-sketches-core-0.8.3",
    "copyrightText" : "Copyright 2015, Yahoo! Inc.\nCopyright 2015-16, Yahoo! Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/yahoo/datasketches/sketches-core/0.8.3/sketches-core-0.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FlgD5DxDDB7WFgJYG5DmqCyck00QdkZaS--0Dhx55Ic/sketches-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.yahoo.datasketches/sketches-core@0.8.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.yahoo.datasketches/sketches-core",
    "versionInfo" : "0.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-SparseBitSet-1.3",
    "copyrightText" : "Copyright (c) 2010 Paladin Software Incorporated, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/SparseBitSet/1.3/SparseBitSet-1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SF-JdIqeQJbP3YpdnFDj8b9nFd66KbLi0wXAF2U0Nic/SparseBitSet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/SparseBitSet@1.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/SparseBitSet",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/SparseBitSet",
    "versionInfo" : "1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.18.0/commons-codec-1.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.18.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k8pM1DHZ-WlY4QVlqL72L0DrDf6wWZAO2dt1zTn9Q-Y/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-configuration-commons-configuration-1.10",
    "copyrightText" : "Copyright 2001-2013 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-configuration/commons-configuration/1.10/commons-configuration-1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-configuration/commons-configuration@1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jS0ba70VwlvDaCZRMb373UciP2IstAVC3MdPhOozQO4/commons-configuration-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/configuration/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-configuration/commons-configuration",
    "versionInfo" : "1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.21.0/commons-io-2.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AU79RM8_xf3CmPeGvp4-4u-2NlgOAhhLIM159CBDq_M/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6",
    "copyrightText" : "Copyright 2001-2011 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-lang/commons-lang@2.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xcmxx2ur1Z8EXrIzeYGnDv6NHJiK8KdtV-k6BBn2-9w/commons-lang-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-lang/commons-lang",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-dk.brics.automaton-automaton-1.11-8",
    "copyrightText" : "Copyright (c) 2001-2011 Anders Moeller\nCopyright (c) 2008-2011 John Gibson",
    "downloadLocation" : "https://repo1.maven.org/maven2/dk/brics/automaton/automaton/1.11-8/automaton-1.11-8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nzK54Lk_Qrp82oFJ03Nx3fwCm4R6UJEFu9bogBrtHoQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/dk.brics.automaton/automaton@1.11-8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.brics.dk/automaton/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/dk.brics.automaton/automaton",
    "versionInfo" : "1.11-8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.airlift-aircompressor-2.0.2",
    "copyrightText" : "Copyright 2011 Dain Sundstrom <dain@iq80.com>\nCopyright 2011, Google Inc.\nCopyright 2011, Google Inc. <opensource@google.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/airlift/aircompressor/2.0.2/aircompressor-2.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/m4f0-ZnugHakAlgyl9lGMj1CEVSM5ImTVlBU0-z2zlY/aircompressor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.airlift/aircompressor@2.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/airlift/aircompressor",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.airlift/aircompressor",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-client-api-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-client-api/7.3.1/kubernetes-client-api-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iPvn_x4upE9sauaaab8RwjtLM1G_ccwB5_38g0R0ptI/kubernetes-client-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-client-api@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-client-api",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-httpclient-okhttp-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-httpclient-okhttp/7.3.1/kubernetes-httpclient-okhttp-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fPXQNi1wW0KT-lLyHkRdAV83dwYyR6KM-ruMCgpMiDM/kubernetes-httpclient-okhttp-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-httpclient-okhttp@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-httpclient-okhttp",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-admissionregistration-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-admissionregistration/7.3.1/kubernetes-model-admissionregistration-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hI_IirTzOYp1lJJDjtRj67pIJJwnJnKAyqI7h1Cf9g8/kubernetes-model-admissionregistration-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-admissionregistration@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-admissionregistration",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-apiextensions-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-apiextensions/7.3.1/kubernetes-model-apiextensions-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VX8UJuSXs7kj4GI4oyosD6lwxabR3fN_GVKagkIptFw/kubernetes-model-apiextensions-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-apiextensions@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-apiextensions",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-apps-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-apps/7.3.1/kubernetes-model-apps-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-apps@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GEs1ofqN1uvx3mkDQw1vQZSDWJrvONimRZd7gciPfvs/kubernetes-model-apps-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-apps",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-autoscaling-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-autoscaling/7.3.1/kubernetes-model-autoscaling-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-autoscaling@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I1cwuIFOj-R77pDeO8rHwBRagqeLYeF6-qkTX8Fm7QY/kubernetes-model-autoscaling-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-autoscaling",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-batch-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-batch/7.3.1/kubernetes-model-batch-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-batch@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uYfdmrfr8Q5fQvmoMrJeL3Y9ngt_UDW2bJIUwLdroX8/kubernetes-model-batch-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-batch",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-certificates-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-certificates/7.3.1/kubernetes-model-certificates-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-certificates@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gFjl75yrAllf4dur8RLS3b1w6TqBGSaFv-Y8ExmA1M0/kubernetes-model-certificates-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-certificates",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-common-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-common/7.3.1/kubernetes-model-common-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9ggsUXr0ry59BkpYdFkqXi9mWG9jYUeZTpaU93VcA6k/kubernetes-model-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-common@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-common",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-coordination-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-coordination/7.3.1/kubernetes-model-coordination-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AgRLJFx1IQO_33qEBpPaUiIvVIgdZAv75jfYs744Pb8/kubernetes-model-coordination-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-coordination@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-coordination",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-core-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-core/7.3.1/kubernetes-model-core-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-731oqPabkQpF09X65zXQww1ny8HKUdCXsU45dVkxzg/kubernetes-model-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-core@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-core",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-discovery-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-discovery/7.3.1/kubernetes-model-discovery-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1S2APH74sN_qxO-9iXDK7czG89YgUMCHEz87WAoSY50/kubernetes-model-discovery-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-discovery@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-discovery",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-events-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-events/7.3.1/kubernetes-model-events-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fy21MlNBQlSRXiSpouBa62FUQkb38gQiUaGifkXy6jo/kubernetes-model-events-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-events@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-events",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-extensions-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-extensions/7.3.1/kubernetes-model-extensions-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lR0PIniRd3-lCZ--mjmqyZjxzuQuEhPAZPMCP0uEnDU/kubernetes-model-extensions-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-extensions@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-extensions",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-flowcontrol-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-flowcontrol/7.3.1/kubernetes-model-flowcontrol-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jX-uERJwZWdupDtwzZEvtCqmgHz45NzMN2qPBm9WrMU/kubernetes-model-flowcontrol-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-flowcontrol@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-flowcontrol",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-gatewayapi-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-gatewayapi/7.3.1/kubernetes-model-gatewayapi-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-gatewayapi@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JZEg74h3JatTYQ7I6rY6zHw31WA5qSwe7dFG8y4uOHU/kubernetes-model-gatewayapi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-gatewayapi",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-metrics-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-metrics/7.3.1/kubernetes-model-metrics-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-metrics@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AeW_KBpG6jTBgnOjvtJdcLC-SSE4LzSMfdJV4I3e84Q/kubernetes-model-metrics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-metrics",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-networking-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-networking/7.3.1/kubernetes-model-networking-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-networking@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3tX_JjlxqsKkQNSX7dmkKYKOJffJsqmXXg5c_Wsf84M/kubernetes-model-networking-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-networking",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-node-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-node/7.3.1/kubernetes-model-node-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-node@7.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZwVEwqReIlW0_rKR-avXs8Ve2b4MfIqsZNf2jCMFwFU/kubernetes-model-node-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-node",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-policy-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-policy/7.3.1/kubernetes-model-policy-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rDtTV32nee1XrNrmfZgpaMyIgDQW0Um8NUaZRyMM2pk/kubernetes-model-policy-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-policy@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-policy",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-rbac-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-rbac/7.3.1/kubernetes-model-rbac-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VJsltewU-D1Lu98wJRuBLr6Yqj6xjoHRf6u_5huKG9c/kubernetes-model-rbac-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-rbac@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-rbac",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-resource-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-resource/7.3.1/kubernetes-model-resource-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/X4HXnIpkcGyCzSlWE6Lmc4U0ilCMugCi1u5ZilWHu9E/kubernetes-model-resource-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-resource@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-resource",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-scheduling-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-scheduling/7.3.1/kubernetes-model-scheduling-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BCmGabW9OtJmi-QrqB52m9Kb_btFecRXHokqx4ATsbI/kubernetes-model-scheduling-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-scheduling@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-scheduling",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-storageclass-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/kubernetes-model-storageclass/7.3.1/kubernetes-model-storageclass-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4aYpZQKk2SzK8Y_La4mm1J60zv9B60JCrMbJuNCQT5U/kubernetes-model-storageclass-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/kubernetes-model-storageclass@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/kubernetes-model-storageclass",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.fabric8-zjsonpatch-7.3.1",
    "copyrightText" : "Copyright (c) 2015 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/fabric8/zjsonpatch/7.3.1/zjsonpatch-7.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Nzcn7mqb98jv6xXVlRwfM79USvlfQY4QNnoNIgwVWb8/zjsonpatch-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.fabric8/zjsonpatch@7.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.fabric8/zjsonpatch",
    "versionInfo" : "7.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.hakky54-sslcontext-kickstart-for-pem-8.3.6",
    "copyrightText" : "Copyright 2019 Thunderberry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/hakky54/sslcontext-kickstart-for-pem/8.3.6/sslcontext-kickstart-for-pem-8.3.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1uf0Liu4I_09wHXVJSsU6gT9SyDzNCnmLk0AgIz-qY0/sslcontext-kickstart-for-pem-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.hakky54/sslcontext-kickstart-for-pem@8.3.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Hakky54/sslcontext-kickstart",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.hakky54/sslcontext-kickstart-for-pem",
    "versionInfo" : "8.3.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.hakky54-sslcontext-kickstart-8.3.6",
    "copyrightText" : "Copyright 2019 Thunderberry\nCopyright (c) 2021 Square, Inc.\nCopyright (c) 2012 The Android Open Source Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/hakky54/sslcontext-kickstart/8.3.6/sslcontext-kickstart-8.3.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.hakky54/sslcontext-kickstart@8.3.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EtOEDLn906tKuK0KKslA6Wuy_6Oa9ofIwqmA4ObFPxM/sslcontext-kickstart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Hakky54/sslcontext-kickstart",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.hakky54/sslcontext-kickstart",
    "versionInfo" : "8.3.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.resilience4j-resilience4j-circuitbreaker-2.3.0",
    "copyrightText" : "Copyright 2018 Clint Checketts\nCopyright 2016 Robert Winkler\nCopyright 2020 Robert Winkler, Bohdan Storozhuk, Mahmoud Romeh, Dan Maas and others\nCopyright 2016 Robert Winkler and Bohdan Storozhuk",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/resilience4j/resilience4j-circuitbreaker/2.3.0/resilience4j-circuitbreaker-2.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/avrSRQ4hEALfUPuKA6o_zvhtZ-H6ilA-T1OM4QmtZ9c/resilience4j-circuitbreaker-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://resilience4j.readme.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.resilience4j/resilience4j-circuitbreaker",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.resilience4j-resilience4j-core-2.3.0",
    "copyrightText" : "Copyright 2020\nCopyright 2018 Clint Checketts\nCopyright 2024 Florentin Simion and Rares Vlasceanu\nCopyright 2019 Ingyu Hwang\nCopyright 2020 KrnSaurabh\nCopyright 2019 Mahmoud Romeh\nCopyright 2019 Mahmoud Romeh, Robert Winkler\nCopyright 2017 Robert Winkler\nCopyright 2020 Robert Winkler, Bohdan Storozhuk, Mahmoud Romeh, Dan Maas and others\nCopyright 2016 Robert Winkler and Bohdan Storozhuk\nCopyright 2014-2019 Vavr, http://vavr.io\nCopyright 2002-2017 the original author or authors\n\nAuthors: Clint Checketts; Florentin Simion and Rares Vlasceanu; Ingyu Hwang; Juergen Hoeller; KrnSaurabh; Mahmoud Romeh; Mahmoud Romeh, Robert Winkler; Robert Winkler; Robert Winkler and Bohdan Storozhuk; Robert Winkler, Bohdan Storozhuk, Mahmoud Romeh, Dan Maas and others; Sebastien Deleuze; Vavr; a CircuitBreaker; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/resilience4j/resilience4j-core/2.3.0/resilience4j-core-2.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6FgWebXZlFceixPJAx7XveWpKDBG009MhPWieVkAX1g/resilience4j-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://resilience4j.readme.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.resilience4j/resilience4j-core",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.resilience4j-resilience4j-ratelimiter-2.3.0",
    "copyrightText" : "Copyright 2018 Clint Checketts\nCopyright 2020 Robert Winkler, Bohdan Storozhuk, Mahmoud Romeh, Dan Maas and others\nCopyright 2016 Robert Winkler and Bohdan Storozhuk",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/resilience4j/resilience4j-ratelimiter/2.3.0/resilience4j-ratelimiter-2.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o5sL_idUnKQJsfZpROX34f-WAmXyqAsrBndO8BbPmhs/resilience4j-ratelimiter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://resilience4j.readme.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.resilience4j/resilience4j-ratelimiter",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-api-0.13.0",
    "copyrightText" : "Copyright 2018 JWTK\nCopyright (c) 2014 jsonwebtoken.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/jsonwebtoken/jjwt-api/0.13.0/jjwt-api-0.13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6hzJPvz1m7d63FgHBKmAvngiHD2R2EZwDotBr45ORRs/jjwt-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.jsonwebtoken/jjwt-api",
    "versionInfo" : "0.13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-impl-0.13.0",
    "copyrightText" : "Copyright 2018 JWTK\nCopyright (c) 2014 jsonwebtoken.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/jsonwebtoken/jjwt-impl/0.13.0/jjwt-impl-0.13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2YSbH67GXZis3MDRfDCADN_pYCO6BaopbCHHEZ4hGy8/jjwt-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.jsonwebtoken/jjwt-impl",
    "versionInfo" : "0.13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-jackson-0.13.0",
    "copyrightText" : "Copyright 2018 JWTK\nCopyright (c) 2014 jsonwebtoken.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/jsonwebtoken/jjwt-jackson/0.13.0/jjwt-jackson-0.13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/V_dwvb1LoMCfaT7JgU_JSwFApTL_ny4btN_MwwQdb-U/jjwt-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.jsonwebtoken/jjwt-jackson",
    "versionInfo" : "0.13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.9.17",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Chao Chang; Chris Bono; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Google Inc.; Gustavo Monarin; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Maciej Walkowiak; Manabu Matsuzaki; Markus Dobel; Marten Deinum; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; QOS.ch; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.9.17/micrometer-core-1.9.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qpQrjzqY0aUI62nMh5Xrdvsf9rB42UjUUAud8OnH5B4/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.9.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.9.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.9.17",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.9.17/micrometer-registry-prometheus-1.9.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_FT03eir0__aoqUQ2YwuQiV3DlsoOK6dZauZteFgoMI/micrometer-registry-prometheus-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.9.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-registry-prometheus",
    "versionInfo" : "1.9.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.moquette-moquette-broker-0.9",
    "copyrightText" : "Copyright 2012-2013 (c) Andrea Selva\nCopyright (c) 2012-2017 The original\nCopyright (c) 2012-2016 The original author or authors\n\nAuthors: Andrea Selva; The original; The original author or authors; Wagner Macedo",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/moquette/moquette-broker/0.9/moquette-broker-0.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ItR-KQcI7SLmhs7i5dmHZrDtI6xtNTnd5AddkvKcVOg/v~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.moquette/moquette-broker@0.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.moquette/moquette-broker",
    "versionInfo" : "0.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.moquette-moquette-netty-parser-0.9",
    "copyrightText" : "Copyright 2012-2013 (c) Andrea Selva\nCopyright (c) 2012-2017 The original\nCopyright (c) 2012-2016 The original author or authors\n\nAuthors: Andrea Selva; The original; The original author or authors; Wagner Macedo",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/moquette/moquette-netty-parser/0.9/moquette-netty-parser-0.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ItR-KQcI7SLmhs7i5dmHZrDtI6xtNTnd5AddkvKcVOg/v~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.moquette/moquette-netty-parser@0.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.moquette/moquette-netty-parser",
    "versionInfo" : "0.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.121.Final/netty-buffer-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2pMUdb8b-mSiWPebTHdCe_bdLUQ6sZSIjvLOVqQJRHQ/netty-buffer-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-buffer/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-buffer",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.121.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.121.Final/netty-codec-dns-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nXKXwWa0aA_PkuhISpuKRlNmib58GlxfMDMh4wnz00o/netty-codec-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-dns",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-haproxy-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-haproxy/4.1.121.Final/netty-codec-haproxy-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wlhn03Xp21NcJ_yiaJviegWZkZbAoym8pksuQ6TfWMA/netty-codec-haproxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-haproxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-haproxy",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.121.Final/netty-codec-http-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/smcvN2JSbQyqSWD5ftb_QntNwXdCPJRGDwaHAhWqRUM/netty-codec-http-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-mqtt-4.1.121.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-mqtt/4.1.121.Final/netty-codec-mqtt-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-mqtt@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AVsZRIz5BbcmkMbWIE33wxOCCz-kbBDr6IPxMF93kOo/netty-codec-mqtt-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-mqtt/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-mqtt",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.121.Final/netty-codec-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TRIg5l3JUTvoH1hVViLss2q46UJuhPL7fWUf53nF-Xg/netty-codec-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec/",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.121.Final/netty-common-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D-3jd_O2Uifqk-h8OHMbVFy9B2AtnwLQMi0uroGuv0c/netty-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-common",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.121.Final/netty-handler-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BmRDXWKGSdSMranzda4MIaVsCNcd4wly_mfaAH5i_ko/netty-handler-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.121.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.121.Final/netty-resolver-dns-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HOWi6UXJOVlLyMVtsDQW1kn1uCetMbhHWbbES1U3ZPc/netty-resolver-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.121.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.121.Final/netty-resolver-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HahK7dkDyqYucibujsA6C36MrWQWzLqUAirpvsS-TvM/netty-resolver-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcApWitAR-7YefUuTmn5GzB9Ii5XgxmjX6clBOM6z50/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-linux-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final-linux-aarch_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcApWitAR-7YefUuTmn5GzB9Ii5XgxmjX6clBOM6z50/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-aarch_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final-linux-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcApWitAR-7YefUuTmn5GzB9Ii5XgxmjX6clBOM6z50/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-osx-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final-osx-aarch_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-aarch_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcApWitAR-7YefUuTmn5GzB9Ii5XgxmjX6clBOM6z50/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final-osx-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcApWitAR-7YefUuTmn5GzB9Ii5XgxmjX6clBOM6z50/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-windows-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final-windows-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=windows-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcApWitAR-7YefUuTmn5GzB9Ii5XgxmjX6clBOM6z50/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.70.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-classes/2.0.70.Final/netty-tcnative-classes-2.0.70.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.70.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4w44YAbP4o89KIu5DGlziiKN4J4hCu4aym6b8DLiytM/netty-tcnative-classes-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-classes",
    "versionInfo" : "2.0.70.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.121.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.121.Final/netty-transport-classes-epoll-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MYNUyfJWpyrX_APPMLCBglWWuif1m3q80wbGjRhybsA/netty-transport-classes-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-classes-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-epoll",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.121.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.121.Final/netty-transport-native-epoll-4.1.121.Final-linux-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.121.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IjhB4awN_xz7ld7NBkUNoTeBNQGM95OcfyBCLLxvweo/netty-transport-native-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-epoll",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.121.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.121.Final/netty-transport-native-unix-common-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.121.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NtPWcpzEIwCeyjovNYE3FcNlSKIxxh21NwTlpDrF24o/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.121.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.121.Final/netty-transport-native-unix-common-4.1.121.Final-linux-x86_64.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.121.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NtPWcpzEIwCeyjovNYE3FcNlSKIxxh21NwTlpDrF24o/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.121.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.121.Final/netty-transport-4.1.121.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9D27bajQPR1iYjj4Yg6iiExXdz_g1qUHCdGRwQWKsv0/netty-transport-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.121.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport",
    "versionInfo" : "4.1.121.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry.javaagent-opentelemetry-javaagent-2.20.1",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2014 - Present Rafael Winterhalter\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/javaagent/opentelemetry-javaagent/2.20.1/opentelemetry-javaagent-2.20.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/geQfbcbHy07hk1k2zy4A_GayVKA0bwa-MLamfJ6I46M/opentelemetry-javaagent-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opentelemetry.javaagent/opentelemetry-javaagent@2.20.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/open-telemetry/opentelemetry-java-instrumentation",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opentelemetry.javaagent/opentelemetry-javaagent",
    "versionInfo" : "2.20.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-api-1.56.0",
    "copyrightText" : "Copyright 2000-2021 JetBrains s.r.o.\nCopyright 2013-2020 The OpenZipkin Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: David Beaumont; JetBrains s.r.o.; The Guava Authors; The OpenZipkin Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-api/1.56.0/opentelemetry-api-1.56.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gjs4zqcyPm6Yoxid7lIatfbFV7PjvuHbpHa-X0k9OOQ/opentelemetry-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opentelemetry/opentelemetry-api@1.56.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/open-telemetry/opentelemetry-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opentelemetry/opentelemetry-api",
    "versionInfo" : "1.56.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-common-1.56.0",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2000-2021 JetBrains s.r.o.\nCopyright 2020 LINE Corporation\nCopyright 2018, OpenCensus Authors\nCopyright Rafael Winterhalter\nCopyright 2013-2020 The OpenZipkin Authors\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2014 The gRPC Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: David Beaumont; Google Inc.; JetBrains s.r.o.; LINE Corporation; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; OpenCensus Authors; Rafael Winterhalter; The Guava Authors; The OpenZipkin Authors; The Prometheus Authors; The gRPC Authors; devops teams",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-common/1.56.0/opentelemetry-common-1.56.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opentelemetry/opentelemetry-common@1.56.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fvBml7N_6GaDesfy9k9UGfBye6SCVsKhUe7eFfEQspE/opentelemetry-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/open-telemetry/opentelemetry-java",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opentelemetry/opentelemetry-common",
    "versionInfo" : "1.56.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-context-1.56.0",
    "copyrightText" : "Copyright 2020 LINE Corporation\nCopyright Rafael Winterhalter\nCopyright 2013-2020 The OpenZipkin Authors\nCopyright 2015 The gRPC Authors\n\nAuthors: LINE Corporation; Rafael Winterhalter; The OpenZipkin Authors; The gRPC Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-context/1.56.0/opentelemetry-context-1.56.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opentelemetry/opentelemetry-context@1.56.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jk7GtDPlEn82x9OeWJE3LLk10T_Fg2gPQcUwhasZPO8/opentelemetry-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/open-telemetry/opentelemetry-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opentelemetry/opentelemetry-context",
    "versionInfo" : "1.56.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.15.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient/0.15.0/simpleclient-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient@0.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HFDfg_K3rP_EC721xSNrGVyyG1a48vL79fwRiFO3fro/simpleclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_common/0.15.0/simpleclient_common-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_common@0.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_common",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_common/0.15.0/simpleclient_tracer_common-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_common",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel/0.15.0/simpleclient_tracer_otel-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.15.0",
    "copyrightText" : "Copyright 2007-present the original author or authors\nCopyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; the OpenTelemetry; The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel_agent/0.15.0/simpleclient_tracer_otel_agent-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z-shaTtnu5VCr3a_pInV_8qYB-cNRcIM277FSeRLHdQ/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel_agent",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-2.2.41",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-annotations/2.2.41/swagger-annotations-2.2.41.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uv7nRC6_bM6pSxYMvomrXgSPgIdLTxRCcgX4sPJGi_o/swagger-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.41",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-annotations",
    "versionInfo" : "2.2.41"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger-swagger-annotations-1.6.2",
    "copyrightText" : "Copyright 2016 SmartBear Software",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/swagger-annotations/1.6.2/swagger-annotations-1.6.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VgWmRc03fONEDLiihv1ry_7DQFB46q0OaXaV1FSMYN0/swagger-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://swagger.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger/swagger-annotations",
    "versionInfo" : "1.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-1.2.2",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q49I0pRC3pz_Y_WI6pJsy5uWkxpFvdRI2idbVv9yIog/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "1.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-1.3.5",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2005, 2018 Oracle and/or its affiliates\nCopyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HkDN_Gowc-fzbLhO2Xn_oaSZWi24vTMVLQb-LotgxVM/jakarta.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "1.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.jws-jakarta.jws-api-2.1.0",
    "copyrightText" : "Copyright (c) 2019, 2020 Eclipse Foundation\nCopyright (c) 2013, 2020 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/jws/jakarta.jws-api/2.1.0/jakarta.jws-api-2.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eXD3wAn0DMaIdg0glBubjnEABY5tpxkEWkhbwSrhp7E/jakarta.jws-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jws-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.jws/jakarta.jws-api",
    "versionInfo" : "2.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.mail-jakarta.mail-api-1.6.7",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/mail/jakarta.mail-api/1.6.7/jakarta.mail-api-1.6.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.mail/jakarta.mail-api@1.6.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y7rOiFH03C9rV6yu74zVx8PNXvacKzfNF6S_Za76oIU/jakarta.mail-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.mail/jakarta.mail-api",
    "versionInfo" : "1.6.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.servlet-jakarta.servlet-api-4.0.4",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) 1997-2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2018 Oracle and/or its affiliates and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/servlet/jakarta.servlet-api/4.0.4/jakarta.servlet-api-4.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IeW-mhJSfacTSC146U6UDzf1Hw9Qn9Broh-3XNqz-7Y/jakarta.servlet-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.servlet",
    "licenseConcluded" : "(Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.servlet/jakarta.servlet-api",
    "versionInfo" : "4.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-2.0.2",
    "copyrightText" : "Copyright (c) 2019 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/2.0.2/jakarta.validation-api-2.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ssIsex-ZMjXxpQ-d-bTn-DD-U5X1FH_-ksvPsn2rt2Y/jakarta.validation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.websocket-jakarta.websocket-api-1.1.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2018 Oracle and/or its affiliates and others\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/websocket/jakarta.websocket-api/1.1.2/jakarta.websocket-api-1.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.websocket/jakarta.websocket-api@1.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/B7DYF37QBGcpMWe9Joon5UnVm_3fSRjt3Tw2IW1z1Ts/jakarta.websocket-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.websocket",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.websocket/jakarta.websocket-api",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-2.1.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2006 Google Inc\nCopyright (c) 2010, 2017 Oracle and/or its affiliates\nCopyright (c) 2011, 2017 Oracle and/or its affiliates\nCopyright (c) 2011, 2019 Oracle and/or its affiliates\nCopyright (c) 2012, 2017 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2017 Oracle and/or its affiliates\nCopyright (c) 2015, 2017 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/2.1.6/jakarta.ws.rs-api-2.1.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y0WFVTb_nZBtnrdw0VBY3L0dEVr17Jspe7E7a09tCwo/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "2.1.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-2.3.3",
    "copyrightText" : "Copyright (c) 2019, 2020 Eclipse Foundation\nCopyright (c) 2005, 2019 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2020 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HFR-DCqoP85_EdCEMEFSbdsjTzZ414h0LDQ-jW4pN9g/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "2.3.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.soap-jakarta.xml.soap-api-1.4.2",
    "copyrightText" : "Copyright (c) 2019, 2020 Eclipse Foundation\nCopyright (c) 2013, 2020 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/soap/jakarta.xml.soap-api/1.4.2/jakarta.xml.soap-api-1.4.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vkoMiK6vB3jxEAdvBtm9DTOKmox2lFCrNRXi8-7tupI/jakarta.xml.soap-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/saaj-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.soap/jakarta.xml.soap-api",
    "versionInfo" : "1.4.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.ws-jakarta.xml.ws-api-2.3.3",
    "copyrightText" : "Copyright (c) 2019, 2020 Eclipse Foundation\nCopyright (c) 1997, 2020 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/ws/jakarta.xml.ws-api/2.3.3/jakarta.xml.ws-api-2.3.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lhNKc66DWFM9-8HBmaE4vhy0oMi_jzFX0rihDOX8rVo/jakarta.xml.ws-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jax-ws-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.ws/jakarta.xml.ws-api",
    "versionInfo" : "2.3.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.measure-unit-api-1.0",
    "copyrightText" : "Copyright (c) 2014-2016, Jean-Marie Dautelle, Werner Keil",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/measure/unit-api/1.0/unit-api-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3PvN-WSuXcJ6ZrR-TD7Qrt09367e3Sd8e7wAzbSSy6E/unit-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.measure/unit-api@1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://unitsofmeasurement.github.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.measure/unit-api",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.14.0",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.14.0/joda-time-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xHNk0NFo_cn7IS-LuxC1X0wKyj75VayT0ELv6uUuAYg/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jcip-jcip-annotations-1.0",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz and Tim Peierls",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jcip/jcip-annotations/1.0/jcip-annotations-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jcip/jcip-annotations@1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TDG8oCDwQtc3vPSBwp0bycUDcAFaquft_xesydctTdw/jcip-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcip.net/",
    "licenseConcluded" : "CC-BY-2.5",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jcip/jcip-annotations",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.5.2",
    "copyrightText" : "Copyright 2011-2024 JSON-SMART authors\n\nAuthors: JSON-SMART authors; Uriel Chemouni",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/accessors-smart/2.5.2/accessors-smart-2.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.minidev/accessors-smart@2.5.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/74ehX2Y4GaVTEKX4bTvweLzFImXUxGpSlgXH2c0gY-I/accessors-smart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://urielch.github.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.minidev/accessors-smart",
    "versionInfo" : "2.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.5.2",
    "copyrightText" : "Copyright 2011-2024 JSON-SMART authors\n\nAuthors: FangYidong <fangyidong@yahoo.com.cn>; JSON-SMART authors; Uriel Chemouni <uchemouni@gmail.com>; uriel Chemouni",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/minidev/json-smart/2.5.2/json-smart-2.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.minidev/json-smart@2.5.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/caYHj1i7uKg4PuYSH7Ov4u6W0gnz2G1PueZaTS8nZKo/json-smart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://urielch.github.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.minidev/json-smart",
    "versionInfo" : "2.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.sf.supercsv-super-csv-2.4.0",
    "copyrightText" : "Copyright 2007 Kasper B. Graversen",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/sf/supercsv/super-csv/2.4.0/super-csv-2.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.sf.supercsv/super-csv@2.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0LVJ0U-kZ5o9o70Va1qODC-7Y0HzOfCFlB4ZkI0XJQg/super-csv-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.sf.supercsv/super-csv",
    "versionInfo" : "2.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.antlr-ST4-4.1",
    "copyrightText" : "Copyright (c) 2012 Sam Harwell\nCopyright (c) 2011 Terence Parr",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/antlr/ST4/4.1/ST4-4.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.antlr/ST4@4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WsdtoCoP_H78yz5po6j8-RMMT6nClNkllRn2Rq6YyAE/ST4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.antlr/ST4",
    "versionInfo" : "4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.antlr-antlr-runtime-3.5.2",
    "copyrightText" : "Copyright (c) 2012 Sam Harwell\nCopyright (c) 2005-2009 Terence Parr",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/antlr/antlr-runtime/3.5.2/antlr-runtime-3.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gf7hzat0YTbsxUXovZqqeKOlVXql3d5Xxpp6l5Zd9jQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.antlr/antlr-runtime@3.5.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.antlr.org",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.antlr/antlr-runtime",
    "versionInfo" : "3.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-protobuf-1.12.0",
    "copyrightText" : "Copyright 2009-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro-protobuf/1.12.0/avro-protobuf-1.12.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wPkqYPwyAfuPOd-zMdNO3q6FdhiOsczS77K0gpNKdj0/avro-protobuf-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro-protobuf@1.12.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro-protobuf",
    "versionInfo" : "1.12.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.0",
    "copyrightText" : "Copyright 2009-2024 The Apache Software Foundation\nCopyright 2006-2015 The Guava Authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Chris Beams; Colin Sampaleanu; Juergen Hoeller; Keith Donald; Rob Harrop; Rod Johnson; Sam Brannen; The Apache Software Foundation; The Guava Authors; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro/1.12.0/avro-1.12.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hbfzBZg929frYCnZnpeWxE8ExXkNmWWOeXoCDLz_Jg4/avro-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro@1.12.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://avro.apache.org",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro",
    "versionInfo" : "1.12.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-allocator-4.14.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-common-allocator/4.14.5/bookkeeper-common-allocator-4.14.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DlJ0_dDsChJ2XOUczf9IbBj5l774U0d-FoGVSgEtklU/bookkeeper-common-allocator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-common-allocator@4.14.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-common-allocator",
    "versionInfo" : "4.14.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-circe-checksum-4.14.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation\nCopyright 2014 Trevor Robinson",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/circe-checksum/4.14.5/circe-checksum-4.14.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BLPYnzX4SCpP3MovUvdcJ9HTSlewj-hOQoNI04BY8UQ/circe-checksum-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/circe-checksum@4.14.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/circe-checksum",
    "versionInfo" : "4.14.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-cpu-affinity-4.14.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/cpu-affinity/4.14.5/cpu-affinity-4.14.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XgHVEbAqUSt6odldY2vJPH_SLlOUmXylcpqS95i149k/cpu-affinity-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/cpu-affinity@4.14.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/cpu-affinity",
    "versionInfo" : "4.14.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.5.0",
    "copyrightText" : "Copyright 2001-2025 The Apache Software Foundation\nCopyright (c) 2008-2020, Hazelcast, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.5.0/commons-collections4-4.5.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JAqs6GDG4Avpa6MKoryqZFHorKRFCEd4bWDsjgF8wJM/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.5.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.28.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GeAZl8zP9Io_wlCT9pgjRpi5nAJ3fDA-1s03Lh0SKSU/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.28.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0",
    "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.17.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-math3-3.6.1",
    "attributionTexts" : [ "This product includes software developed by the University of Chicago, as Operator of Argonne National Laboratory." ],
    "copyrightText" : "Copyright 2010-2012 CS Systemes d'Information\nCopyright 2009 Google Inc.\nCopyright 2001-2016 The Apache Software Foundation\nCopyright (c) 2001, 2002 Enthought, Inc.\nCopyright (c) 2004, Ernst Hairer\nCopyright (c) 2008, Frances Y. Kuo and Stephen Joe\nCopyright (c) 1997 - 2002, Makoto Matsumoto and Takuji Nishimura\nCopyright (c) 2003-2009 SciPy Developers\nCopyright (c) 2003-2013 SciPy Developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-math3/3.6.1/commons-math3-3.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xTRtCcByTeQkFetUFt4g2WhWxEZ5bw0PTmpRYO5O49c/commons-math3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-math/",
    "licenseConcluded" : "(Minpack AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-math3",
    "versionInfo" : "3.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-core-3.5.11",
    "copyrightText" : "Copyright 2003,2004 BEA Systems Inc. and IBM Corporation and Microsoft Corporation\nCopyright 2001 - 2005, International Business Machines Corporation and Microsoft Corporation\nCopyright 2001 Martin Gudgin, Developmentor. http://www.develop.co.uk\nCopyright 2006-2025 The Apache Software Foundation\nCopyright 2001 W3C (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright ?? 2005 World Wide Web Consortium\nCopyright (c) 2002-2004 BEA Systems Inc., International Business Machines Corporation, Microsoft Corporation, Inc, SAP AG, and Sun Microsystems, Inc\nCopyright (c) 2006 World Wide Web Consortium\n(c) 2002-2005 BEA Systems, IBM, Microsoft Corporation, Inc, and TIBCO Software Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/cxf/cxf-core/3.5.11/cxf-core-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.cxf/cxf-core@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RQghD-9svEIvE2-za7wndSfkxPNDmr1Er3uXTeAzFuo/cxf-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cxf.apache.org",
    "licenseConcluded" : "(LicenseRef-scancode-ms-ws-routing-spec AND W3C AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-scancode-ws-addressing-spec AND MIT AND W3C-19980720 AND LicenseRef-scancode-ws-trust-specification AND NTP)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.cxf/cxf-core",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-features-metrics-3.5.11",
    "copyrightText" : "Copyright 2006-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/cxf/cxf-rt-features-metrics/3.5.11/cxf-rt-features-metrics-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e1TQz38RsV01fZlHLMjJXUYBxET0lkMqK0UnXAPDOeU/cxf-rt-features-metrics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.cxf/cxf-rt-features-metrics@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.cxf/cxf-rt-features-metrics",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-frontend-jaxrs-3.5.11",
    "copyrightText" : "Copyright 2006-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/cxf/cxf-rt-frontend-jaxrs/3.5.11/cxf-rt-frontend-jaxrs-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/h5ZZXxxzGszftqCQIXZTOVTblwE3cKTqWw6Ou4MBvZ4/cxf-rt-frontend-jaxrs-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cxf.apache.org",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-3-Clause AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.cxf/cxf-rt-frontend-jaxrs",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-security-3.5.11",
    "copyrightText" : "Copyright 2006-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/cxf/cxf-rt-security/3.5.11/cxf-rt-security-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_nQvYSCkTyeKXMFqENkVLSzEJWkxjDC718xbnG-Z9os/cxf-rt-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cxf.apache.org",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.cxf/cxf-rt-security",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-transports-http-jetty-3.5.11",
    "copyrightText" : "Copyright 2006-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/cxf/cxf-rt-transports-http-jetty/3.5.11/cxf-rt-transports-http-jetty-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AKwNXUMzry63ZLdHhCmHU-bNk0kRnH5qi_vd7qcWcY0/cxf-rt-transports-http-jetty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cxf.apache.org",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND MIT AND CDDL-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.cxf/cxf-rt-transports-http-jetty",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-transports-http-3.5.11",
    "copyrightText" : "Copyright 2006-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/cxf/cxf-rt-transports-http/3.5.11/cxf-rt-transports-http-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F26Dut4TxqE4sGvrKgl3nENSUsaekhJbBrdPu7_Yc1o/cxf-rt-transports-http-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cxf.apache.org",
    "licenseConcluded" : "(BSD-3-Clause AND MPL-2.0 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.cxf/cxf-rt-transports-http",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.geronimo.specs-geronimo-jta-1.1-spec-1.1.1",
    "copyrightText" : "Copyright 2003-2008 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/geronimo/specs/geronimo-jta_1.1_spec/1.1.1/geronimo-jta_1.1_spec-1.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D0rL3no1yRzP6-WYribEIpU-BEDE7p6EjEKz65nEcfQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.apache.geronimo.specs/geronimo-jta_1.1_spec/1.1.1",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpasyncclient-4.1.5",
    "copyrightText" : "Copyright 2010-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpasyncclient/4.1.5/httpasyncclient-4.1.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CdoQYCpl_b8Mpw8IQGznygUXT5kIW8OAIev5FspRLi4/httpasyncclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-asyncclient",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpasyncclient",
    "versionInfo" : "4.1.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-nio-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore-nio/4.4.16/httpcore-nio-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MjnagzBxdQAOxJ5IcxK1ZBLNJvGRSEFwt6dHLFXga3M/httpcore-nio-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore-nio",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.17.2",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.17.2/log4j-api-2.17.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RP_yN_NNZjf34UtbZOLACWpqaLLdBwR9gWsgcZ_6tyM/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-core-2.17.2",
    "copyrightText" : "Copyright 1999-2012 Apache Software Foundation\nCopyright Terracotta, Inc.\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2005-2006 Tim Fennell\nCopyright (c) 2017 public",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.17.2/log4j-core-2.17.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z1IfhFmxxrT1d7RaAryb0qvOIr1J8GQEmrVQHOpg79k/log4j-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND BSD-2-Clause AND BSD-3-Clause AND MPL-2.0 AND Apache-2.0 AND MIT AND CDDL-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-core",
    "versionInfo" : "2.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-slf4j-impl-2.17.2",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-slf4j-impl/2.17.2/log4j-slf4j-impl-2.17.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VcQJ5LneQwNCJkPyGDFPftpG484ZxK3JUKf7UaJR-ek/log4j-slf4j-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-slf4j-impl",
    "versionInfo" : "2.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.olingo-olingo-odata2-api-2.0.13",
    "copyrightText" : "Copyright 2013-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/olingo/olingo-odata2-api/2.0.13/olingo-odata2-api-2.0.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qB-Ga7z8Z5gL-X8zjz56UaXiLauaxvbx06VPX2VgFBQ/olingo-odata2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.olingo/olingo-odata2-api@2.0.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.olingo/olingo-odata2-api",
    "versionInfo" : "2.0.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.olingo-olingo-odata2-core-2.0.13",
    "copyrightText" : "Copyright 2013-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/olingo/olingo-odata2-core/2.0.13/olingo-odata2-core-2.0.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ezcZEdAI-Ucscy5J19s_WAlAUsXc2uKrOyPaS564T6o/olingo-odata2-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.olingo/olingo-odata2-core@2.0.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.olingo/olingo-odata2-core",
    "versionInfo" : "2.0.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-lite-5.5.1",
    "copyrightText" : "Copyright 2003-2025 The Apache Software Foundation\nCopyright 2001 The Internet Society and W3C (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright (c) Microsoft Corporation\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2015-2021 the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml-lite/5.5.1/poi-ooxml-lite-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RJVCW4dcgO2EwkS_J3Id7zykDvGNnWlh-uZccMzVrBI/poi-ooxml-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi-ooxml-lite@5.5.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND W3C-19980720 AND LicenseRef-scancode-ms-specification)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi-ooxml-lite",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-5.5.1",
    "copyrightText" : "Copyright 2003-2025 The Apache Software Foundation\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2008-2014 FedICT.\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2015-2021 the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml/5.5.1/poi-ooxml-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UDYIty7sLzt98Dfdzgg959EtA7iSDbOdDf4eLKI6ot8/poi-ooxml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi-ooxml@5.5.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi-ooxml",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.poi-poi-5.5.1",
    "copyrightText" : "Copyright 2003-2025 The Apache Software Foundation\nCopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2009-2018 FedICT (federal ICT department of Belgium), e-Contract.be BVBA (https://www.e-contract.be), Bart Hanssens from FedICT\nCopyright (c) 2015 Inbot\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright (c) 2006-2007 Valek Filippov (frob@df.ru)\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2015-2021 the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/poi/poi/5.5.1/poi-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.poi/poi@5.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UuHaoSn5srdyYLpVm84dDoZ8deN3lU1E2wwDbAP4_Q8/poi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://poi.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.poi/poi",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-2.8.4-classifier-pkg",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/bouncy-castle-bc/2.8.4/bouncy-castle-bc-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/bouncy-castle-bc@2.8.4?classifier=pkg",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IcZ-JPCei1s15jUF667zj1H76t365TiN3qjUSE5yza4/bouncy-castle-bc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/bouncy-castle-bc",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-admin-api/2.8.4/pulsar-client-admin-api-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-admin-api@2.8.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kcq7rjYvA7eqqjXuVSvMF4Cibu1BhJ6KEtKf8hvfL2k/pulsar-client-admin-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-admin-api",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-original-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-admin-original/2.8.4/pulsar-client-admin-original-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-admin-original@2.8.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ld5nYZefaU3vZLxrmgb3CN6TsBgVQNzRZgcviOsYyQM/pulsar-client-admin-original-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-admin-original",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-api/2.8.4/pulsar-client-api-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ka7k5RbZ3GtDye9RrnoTDc4SToYJLDdH0xCYoXYkZVo/pulsar-client-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-api@2.8.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-api",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-messagecrypto-bc-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-messagecrypto-bc/2.8.4/pulsar-client-messagecrypto-bc-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/v-r0nLgRDHDcgpecI8mVPYIOIBXFhhFmpkmBpeaWQdg/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-messagecrypto-bc@2.8.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.apache.pulsar/pulsar-client-messagecrypto-bc/2.8.4",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-messagecrypto-bc",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-original-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-original/2.8.4/pulsar-client-original-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mfwPoolECDc6-FBtEEicJcUC8raPp0WDzgqKEFHvBm0/pulsar-client-original-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-original@2.8.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-original",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-common-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation\nCopyright 2020 Splunk Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-common/2.8.4/pulsar-common-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JLiF_dd0oWHkBLXVd9LbtsVJoyOsGNLmgK6Zf-0YSMQ/pulsar-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-common@2.8.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-common",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-core-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-package-core/2.8.4/pulsar-package-core-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W8nkw7F4tzjwh05_iyvYR9YqAXoWt1hpxwbMTrfvbOo/pulsar-package-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-package-core@2.8.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-package-core",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-transaction-common-2.8.4",
    "copyrightText" : "Copyright 2017-2020 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-transaction-common/2.8.4/pulsar-transaction-common-2.8.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mKWE0LXzQ8SnGnp09n5PsSsM9EFF9FazllwZ78T3v8Q/pulsar-transaction-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-transaction-common@2.8.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-transaction-common",
    "versionInfo" : "2.8.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-9.0.83",
    "copyrightText" : "Copyright 1999-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/9.0.83/tomcat-embed-el-9.0.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VRZTAS9WuQA-lPj_msa-0EJier3cmlmVBODzpEpzLyI/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "9.0.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.ws.xmlschema-xmlschema-core-2.3.1",
    "copyrightText" : "Copyright 2004-2023 The Apache Software Foundation\nPortions Copyright 2006 International Business Machines Corp.\nPortions Copyright (c) World Wide Web Consortium 2006, 2007",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/ws/xmlschema/xmlschema-core/2.3.1/xmlschema-core-2.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2XlH4IbxYI5z4q-ym_oL9F4-pQDE4tiqmAUfG-fykX8/xmlschema-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.ws.xmlschema/xmlschema-core",
    "versionInfo" : "2.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.xmlbeans-xmlbeans-5.3.0",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 1999-2003 Apache Software Foundation\nCopyright (c) 2001-2003 Apache Software Foundation\nCopyright (c) 2002-2023 EPFL\nCopyright (c) 2011-2023 Lightbend, Inc.\nCopyright 2001-2003 (c) World Wide Web Consortium (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 1994-2002 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2015-2021 the original\ncopyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/xmlbeans/xmlbeans/5.3.0/xmlbeans-5.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.xmlbeans/xmlbeans@5.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZL9gIlEeV_IUQndR201PbYlQACHW2C6aja43wdFRO3U/xmlbeans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://xmlbeans.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND W3C-19980720)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.xmlbeans/xmlbeans",
    "versionInfo" : "5.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apiguardian-apiguardian-api-1.1.2",
    "copyrightText" : "Copyright 2002-2017 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apiguardian/apiguardian-api/1.1.2/apiguardian-api-1.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7MusS1gy-E2NewV8FbVfrms9IK_efX7rOk-w0AhwTVA/apiguardian-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/apiguardian-team/apiguardian",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apiguardian/apiguardian-api",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjrt-1.9.21.1",
    "copyrightText" : "Copyright (c) 2005 Contributors\nCopyright (c) Copyright 1999-2001 Xerox Corporation, 2002 Palo A lto Research Center, Incorporated\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2006 IBM Corporation and others\nCopyright (c) 2000-2005 INRIA, France Telecom\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002-2018 Palo Alto Research Center, Incorporated (PARC), Contributors\n\nAuthors: Alexandre Vasseur; Andy Clement; Contributors; IBM Corporation; IBM Corporation and others; INRIA, France Telecom; Xerox Corporation, Palo A lto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC); Xerox Corporation, Palo Alto Research Center, Incorporated (PARC), Contributors; colyer Annotation; colyer Marker; the Apache Software Foundation http://www.apache.org/ http://www.apache.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjrt/1.9.21.1/aspectjrt-1.9.21.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aspectj/aspectjrt@1.9.21.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5V1zYBNS0F91M_KFtovoFCeaRf9hJI786YUAkKOhOoU/aspectjrt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/aspectj/",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aspectj/aspectjrt",
    "versionInfo" : "1.9.21.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.9.21.1",
    "copyrightText" : "Copyright (c) 2002,2010\nCopyright (c) 2005 Contributors\nCopyright (c) Copyright 1999-2001 Xerox Corporation, 2002 Palo A lto Research Center, Incorporated\nCopyright (c) 2004 IBM\nCopyright (c) 2005 IBM, Contributors\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2000, 2003 IBM Corporation and others\nCopyright (c) 2004, 2013 IBM, VMware\nCopyright (c) 2000-2005 INRIA, France Telecom\nCopyright (c) 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC). 2004 IBM Corporation\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC) and others\nCopyright (c) 2010 SpringSource, Contributors\nCopyright (c) 2001 The Apache Software Foundation\nCopyright (c) 2016-17 The Apache Software Foundation\nCopyright (c) 2013 VMware\nCopyright (c) 2012 VMware, Inc.\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1998-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002-2018 Palo Alto Research Center, Incorporated (PARC), Contributors\n\nAuthors: <A HREF http://www.inf.fu-berlin.de/~ehaase'> E. Haase; <A HREF http://www.inf.fu-berlin.de/~ehaase'> Enver Haase; <A HREF http://www.vmeng.com/beard'> Patrick C. Beard; <A HREF markus.dahm@berlin.de'> M. Dahm; A. Nevado; Abraham Nevado; Adrian Colyer; Adrian Sampson; Alexander Kriegisch; Alexandre Vasseur; Andy Clement; Andy Clement, Abraham Nevado; Chris Nokleberg; Contributors; David Dixon-Peugh; David Knibb; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erik Hilsdale; Eugene Kuleshov; IBM; IBM Corporation; IBM Corporation and others; IBM, Contributors; IBM, VMware; INRIA, France Telecom; Jason Zaugg; Jim Hugunin; John Kew; Joseph MacFarlane; Juozas Baliuka; Konstantin Shagin <konst@cs.technion.ac.il>; Kris De Volder; Lyor Goldstein; M. Dahm; Mario Ivankovits; Mik Kersten; Niko Matsakis; Palo Alto Research Center, Incorporated; Palo Alto Research Center, Incorporated (PARC); Palo Alto Research Center, Incorporated (PARC) and others; Palo Alto Research Center, Incorporated (PARC). IBM Corporation; Prashant Deva; Rafael Winterhalter; Rajendra Inamdar, Vishal Vishnoi; Remi Forax; Ron Bodkin; SpringSource, Contributors; The Apache Software Foundation; Thomas Hallgren; Thomas Kiviaho; Tuomas Kiviaho; VMware; VMware, Inc.; Xerox Corporation, Palo A lto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC); Xerox Corporation, Palo Alto Research Center, Incorporated (PARC), Contributors; a ClassWriter; colyer Annotation; colyer Creates; colyer Facade; colyer Implementors; colyer Instances; colyer Marker; colyer Matches; the Apache Software Foundation (http://www.apache.org/); the Apache Software Foundation http://www.apache.org/ http://www.apache.org; the PatternParser",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjweaver/1.9.21.1/aspectjweaver-1.9.21.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mLsGz4aUo_JeUUsoVoKJNWx-Rqp8OKTA_Gg7eWYU4e4/aspectjweaver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aspectj/aspectjweaver@1.9.21.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/aspectj/",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aspectj/aspectjweaver",
    "versionInfo" : "1.9.21.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-netty-utils-2.12.1",
    "copyrightText" : "Copyright (c) 2015 AsyncHttpClient Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/asynchttpclient/async-http-client-netty-utils/2.12.1/async-http-client-netty-utils-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/itD9b3v__XXR0jGNMNR7atzyE5Z10flKHJhbeqbMpq0/async-http-client-netty-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.asynchttpclient/async-http-client-netty-utils",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-2.12.1",
    "copyrightText" : "Copyright 2010 Ning, Inc.\nCopyright (c) 2014 AsyncHttpClient Project\nCopyright (c) 2007 Google Inc.\nCopyright (c) 2010-2012 Sonatype, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/asynchttpclient/async-http-client/2.12.1/async-http-client-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FauhlPUC5nFGRWzewdeNX8kQEQ8F1koUiwIW_aEFTKg/async-http-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.asynchttpclient/async-http-client@2.12.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.asynchttpclient/async-http-client",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.78.1/bcpkix-jdk18on-1.78.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.78.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b2cWV45eM6_2mMsYRqjw77Mlu_ur6sL214SFPwnGty4/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/java.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.78.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.78.1/bcutil-jdk18on-1.78.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.78.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.woodstox-stax2-api-4.2.1",
    "copyrightText" : "Copyright (c) 2004- Tatu Saloranta, tatu.saloranta@iki.fi",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/woodstox/stax2-api/4.2.1/stax2-api-4.2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9Ialzi2hOUkil079CFc3hzw5mEfQVSGzDQZaTZpNm_c/stax2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/FasterXML/stax2-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.codehaus.woodstox/stax2-api",
    "versionInfo" : "4.2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-server-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-server/3.0.10/cometd-java-server-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-server@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hEANOm0Sf5eePXkHaJAOW8Ceu1nBM5Of4h5W63UZUhQ/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.cometd.java/cometd-java-server/3.0.10",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-server",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-websocket-common-server-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-websocket-common-server/3.0.10/cometd-java-websocket-common-server-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-websocket-common-server@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R3sFVZvqLlH9n3vLc0AqBJjYtUlaHTTKAhnpTShUec0/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.cometd.java/cometd-java-websocket-common-server/3.0.10",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-websocket-common-server",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-websocket-javax-server-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-websocket-javax-server/3.0.10/cometd-java-websocket-javax-server-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-websocket-javax-server@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k8IsY4yZFV4gY2k29cGz5TOg0wiDOScxvla_FSagv_U/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.cometd.java/cometd-java-websocket-javax-server/3.0.10",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-websocket-javax-server",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-javax-websocket-client-impl-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/javax-websocket-client-impl/9.4.57.v20241219/javax-websocket-client-impl-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4GGGU8eL7hWsajPkzy9aukxRQY9iJncY6FdlEpMsWUE/javax-websocket-client-impl-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/javax-websocket-client-impl",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-javax-websocket-server-impl-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/javax-websocket-server-impl/9.4.57.v20241219/javax-websocket-server-impl-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-server-impl@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Pw9tHN4COGSR_UM16vbm94-hqZ7xXF1j8bRtno51RoM/javax-websocket-server-impl-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/javax-websocket-server-impl",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-api-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-api/9.4.57.v20241219/websocket-api-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-api@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AT5HKfpRWqo0A9zsnJpsO1wg3ffeaZih7SFP1fOL3Y8/websocket-api-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-api",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-client-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-client/9.4.57.v20241219/websocket-client-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x1X5nHyJDjjoXZ862momf26_h-IsuD19t1lQch6NLCI/websocket-client-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-client",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-common-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-common/9.4.57.v20241219/websocket-common-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c_HUcvdUmJ8q4BXi8RmX-cglZvuIzpxMKsY3d3tavC4/websocket-common-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-common",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-server-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-server/9.4.57.v20241219/websocket-server-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-server@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kZ-xm9zu5RxBquaGLuN47qp43KqRBxfZkfjato59scY/websocket-server-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-server",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-servlet/9.4.57.v20241219/websocket-servlet-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T7l-XZBXNfFRqY_8OHY3xIj3GmCHAsmgZvAKCL0KMyo/websocket-servlet-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-servlet",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-annotations-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-annotations/9.4.57.v20241219/jetty-annotations-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-annotations@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M60vstwlIQz3dOKONQ3hee6jExZxbf_NLRjYOKKMFM4/jetty-annotations-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-annotations",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-client-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-client/9.4.57.v20241219/jetty-client-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bfmLoxkS2teLUje6ublL1ki193OEBjYcGhHyE2JykYQ/jetty-client-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-client",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-continuation-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-continuation/9.4.57.v20241219/jetty-continuation-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J3aKhDeeD8cWJemX4eHelxDm7YuqwLJZq79zE44oTns/jetty-continuation-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-continuation",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-http/9.4.57.v20241219/jetty-http-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M1ZjDImZApLW8akPBRxlUU_MyXXHqyvf2cGeGWJSXB4/jetty-http-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-http",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-io/9.4.57.v20241219/jetty-io-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pgtEbmBohCzQESa6RM-M-b0IrgS7qNqv67FamE9i_9Q/jetty-io-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-io",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-plus-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-plus/9.4.57.v20241219/jetty-plus-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UtPtRrJpqv92FRk3tW_3t2_fZGhkD1o4Mw9qDD9rWPY/jetty-plus-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-plus",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-security-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-security/9.4.57.v20241219/jetty-security-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XBB-QiFwFh5ooftM0k4dxdLYdCuRI5pyazqWIrIkfEw/jetty-security-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-security",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-server-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-server/9.4.57.v20241219/jetty-server-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dyzoJzpnHyWZy4QenXYszavRkfKGme2-wr22oor6j00/jetty-server-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-server",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlet-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-servlet/9.4.57.v20241219/jetty-servlet-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tK9vTW96yZwPUseAcBgTUZbckVfASVwI8Ih482O1Wjw/jetty-servlet-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-servlet",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlets-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-servlets/9.4.57.v20241219/jetty-servlets-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0_PPlbFweMd-N_cBLT_YaWtUBI93hVOwNcwufY6zWqA/jetty-servlets-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-servlets",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/9.4.57.v20241219/jetty-util-ajax-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M-Kl-aB_CN9Ozt-Vxs_vvdRhIa_qPiLr_ql_-1V5wSg/jetty-util-ajax-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.4.57.v20241219",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/9.4.57.v20241219/jetty-util-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rEBptmwo3NcCLsKnRZhuy3BIua2pbiAm9dwXJTCjFGA/jetty-util-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND MIT AND CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-webapp-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-webapp/9.4.57.v20241219/jetty-webapp-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LXmes6fe0_PC_puu-TE4jWtPoDibBKtUbwNY0QDhAjU/jetty-webapp-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-webapp",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-xml-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-xml/9.4.57.v20241219/jetty-xml-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qHnB42luRMn4vGfsI1I_CWEj5VFs1N-wWaGdzn0cfcM/jetty-xml-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-xml",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.paho-org.eclipse.paho.client.mqttv3-1.2.5",
    "copyrightText" : "Copyright (c) 2017 BMW Car IT GmbH.\nCopyright (c) 2014 IBM Corp.\nCopyright (c) 2009, 2018 IBM Corp and others\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/paho/org.eclipse.paho.client.mqttv3/1.2.5/org.eclipse.paho.client.mqttv3-1.2.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3@1.2.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lQPu-Hk5vFXLNaMhpm0SENEa4qJGXkltEFdvRQmqqIY/org.eclipse.paho.client.mqttv3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3",
    "versionInfo" : "1.2.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/2.6.1/aopalliance-repackaged-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZP3p4YKr0R3CENOiXs8YJytJbCUBj6mU27whuG2Iths/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-jakarta.inject-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/jakarta.inject/2.6.1/jakarta.inject-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/00VxZo7tpxThVTBUNPjfPHetMjKhRwvxVhei8aukNyE/jakarta.inject-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/jakarta.inject",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2007, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2011, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/2.6.1/hk2-api-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x8JH4mrJQmZ42cc3RfNQvcUka1A1_aNuBsqku1Plph4/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/2.6.1/hk2-locator-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFnXptZi5aVwNkgZcnDH2w0VpkYtzzTuji9EHSeCW-8/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2007, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2019 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/2.6.1/hk2-utils-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GUtvQLJSJ74hARf0pn6jX-qrBRfl29ps65Wi9NP9ZPM/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-runtime-2.3.9",
    "copyrightText" : "Copyright (c) 2013, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/jaxb-runtime/2.3.9/jaxb-runtime-2.3.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FBpP-SxfvSdA4gGD-kRrV5IStaHxXVxseS3mULN96cA/jaxb-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/jaxb-runtime",
    "versionInfo" : "2.3.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-txw2-2.3.9",
    "copyrightText" : "Copyright (c) 2005, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/txw2/2.3.9/txw2-2.3.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/utI9D3hG0KSy82TlhwBI9LgiKNJcVkoN10b_lc6tKGo/txw2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/txw2",
    "versionInfo" : "2.3.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-2.45",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2024 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/2.45/jersey-client-2.45.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.45",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GMez7URlfj6UQocDztlu9jC9J1ZG7rDf_XkB0-WJJWM/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "2.45"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-2.45",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2024 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/2.45/jersey-common-2.45.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.45",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/v01wGpWlbyCp6V-ydzcmtTbuyk3HRcUb28D9LeCl_vM/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CC0-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "2.45"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.ext-jersey-entity-filtering-2.45",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2013, 2024 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Andy Pemberton (pembertona at gmail.com); Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/ext/jersey-entity-filtering/2.45/jersey-entity-filtering-2.45.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.45",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b5vXxPM8Vh0sAZOcUBp0bh25Zc7K2G87WAw7yWZDIQE/jersey-entity-filtering-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.ext/jersey-entity-filtering",
    "versionInfo" : "2.45"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-2.45",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2024 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/2.45/jersey-hk2-2.45.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.45",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2pYbhH-1lmKlfI2aht42fSLSFAQlZCoLmJyGYjsy6IQ/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "2.45"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-json-jackson-2.45",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2023 FasterXML, LLC.\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2024 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Red Hat, Inc.; Shigeru Chiba; Stepan Kopriva; Tatu Saloranta; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-json-jackson/2.45/jersey-media-json-jackson-2.45.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H_Deody_hyIlwxGqqKtUl-NJPKHpCTWoc-sCRQg8xAU/jersey-media-json-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.45",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-json-jackson",
    "versionInfo" : "2.45"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-2.45",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2024 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/2.45/jersey-media-multipart-2.45.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0KcqAPguw6fl-w40UHcna8l-berazM4SK4oIXCLh__E/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.45",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "2.45"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-6.2.5.Final",
    "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI\n(c) 2012 SERLI",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/6.2.5.Final/hibernate-validator-6.2.5.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YmnnMzyAmxT4qlG0p17_v_lQV32NQ2hg47cdu8J24hY/hibernate-validator-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hibernate.org/validator/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hibernate.validator/hibernate-validator",
    "versionInfo" : "6.2.5.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.30.2-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.4.3.Final",
    "copyrightText" : "Copyright 2010 Red Hat, Inc\nCopyright 2011 Red Hat, Inc\nCopyright 2013 Red Hat, Inc\nCopyright 2017 Red Hat, Inc\nCopyright 2019 Red Hat, Inc\nCopyright 2010 Red Hat, Inc., and individual contributors\nCopyright 2011 Red Hat, Inc., and individual contributors\n\nAuthors: david.lloyd@redhat.com David M. Lloyd; jperkins@redhat.com James R. Perkins; Red Hat, Inc.; Red Hat, Inc., and individual contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.4.3.Final/jboss-logging-3.4.3.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YaznZ_WcQoTgF3WO-U2WDJv9iF93m5_dhgLAvCz00OE/jboss-logging-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.jboss.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jboss.logging/jboss-logging",
    "versionInfo" : "3.4.3.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.6.21",
    "copyrightText" : "Copyright 2007 Google Inc.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\nCopyright 2011 The Guava Authors\ncopyright Char (c)\n\nAuthors: Char; Google Inc.; JetBrains s.r.o. and Kotlin Programming Language contributors; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-common/1.6.21/kotlin-stdlib-common-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2PVCAkpWxkA9Ni8F-gXNeQ0Nz8zfORWEXsfw7zab6ds/kotlin-stdlib-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-common",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.6.21",
    "copyrightText" : "Copyright 2010-2017 JetBrains s.r.o.\nCopyright 2010-2020 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk7/1.6.21/kotlin-stdlib-jdk7-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5e7zFfVAof8HGX1gfoDs9CPFC7ToMusgNPsvm_Igwzg/kotlin-stdlib-jdk7-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.6.21",
    "copyrightText" : "Copyright 2010-2017 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk8/1.6.21/kotlin-stdlib-jdk8-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aRBKm4I7Yr4VAk2mvBqNfeSnjTWa-87yTo6rV4bipms/kotlin-stdlib-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.6.21",
    "copyrightText" : "Copyright Eric Ford & Hubert Holin 2001\nCopyright 2010-2015 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: Eric Ford & Hubert Holin; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib/1.6.21/kotlin-stdlib-1.6.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.6.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XdByfa3WxrCg6U6uotuAeKIEiSILs_ds13nhH9Za5rw/kotlin-stdlib-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib",
    "versionInfo" : "1.6.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0",
    "copyrightText" : "Copyright 2000-2009 JetBrains s.r.o.\nCopyright 2006 Sascha Weinreuter",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/annotations/13.0/annotations-13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains/annotations@13.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ohV-6iNW-UvYl5NCKrBCcnGieF-bAwlofJHFZGSfYhM/annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.jetbrains.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains/annotations",
    "versionInfo" : "13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains-annotations-17.0.0",
    "copyrightText" : "Copyright 2000-2009 JetBrains s.r.o.\nCopyright 2006 Sascha Weinreuter",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/annotations/17.0.0/annotations-17.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UIc_YIi_b-RQbQuU3bB3QnpFi68jAhM7c0IFf1-S3Ks/annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains/annotations@17.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JetBrains/java-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains/annotations",
    "versionInfo" : "17.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0",
    "copyrightText" : "Copyright 2018-2020 The JSpecify",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jspecify.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jspecify/jspecify",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.staxex-stax-ex-1.8.3",
    "copyrightText" : "Copyright (c) 1997, 2020 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/staxex/stax-ex/1.8.3/stax-ex-1.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NI7p3rocahN7nifUd4J5hGCIsExP2xfEeuZ5mWxCyDI/stax-ex-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.staxex/stax-ex",
    "versionInfo" : "1.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.mongodb-bson-record-codec-5.5.1",
    "copyrightText" : "Copyright 2008-present MongoDB, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/mongodb/bson-record-codec/5.5.1/bson-record-codec-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.mongodb/bson-record-codec@5.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dcUIPn-lecLCxtbFto_gAYfv4z6WqRRSsuqy2rDFzew/bson-record-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bsonspec.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.mongodb/bson-record-codec",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.mongodb-bson-5.5.1",
    "copyrightText" : "Copyright 2018 Cezary Bartosiak\nCopyright 2010 The Guava Authors\nCopyright (c) 2008-2014 Atlassian Pty Ltd\nCopyright 2008-present MongoDB, Inc.\n\nAuthors: Atlassian Pty Ltd; Cezary Bartosiak; MongoDB, Inc.; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/mongodb/bson/5.5.1/bson-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.mongodb/bson@5.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jR6nVna-KlOnf8ykgeXFEqMqtqG3Qtm6SoNhfJsdqNA/bson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bsonspec.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.mongodb/bson",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.mongodb-mongodb-driver-core-5.5.1",
    "copyrightText" : "Copyright 2010 The Guava Authors\nCopyright 2017 Tom Bentley\nCopyright (c) 2008-2014 Atlassian Pty Ltd\nCopyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright (c) 2008 The Guava Authors\nCopyright (c) 2015-2018 all contributors https://github.com/marianobarrios/tls-channel\nCopyright 2008-present MongoDB, Inc.\n\nAuthors: Atlassian Pty Ltd; Brian Goetz and Tim Peierls; MongoDB, Inc.; The Guava Authors; Tom Bentley; all contributors; the Cluster",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/mongodb/mongodb-driver-core/5.5.1/mongodb-driver-core-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.mongodb/mongodb-driver-core@5.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mqgkEKqf85xI3pvDBl_OZFQEx0GKnlAvq449He8dxIM/mongodb-driver-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.mongodb.com/",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND CC-BY-2.5)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.mongodb/mongodb-driver-core",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.mongodb-mongodb-driver-legacy-5.5.1",
    "copyrightText" : "Copyright 2008-present MongoDB, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/mongodb/mongodb-driver-legacy/5.5.1/mongodb-driver-legacy-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.mongodb/mongodb-driver-legacy@5.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q1HjswC4mf9D5VroU6KSlcfVgZcknWlPq02BPrjkXxY/mongodb-driver-legacy-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.mongodb.com/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.mongodb/mongodb-driver-legacy",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.mongodb-mongodb-driver-sync-5.5.1",
    "copyrightText" : "Copyright 2008-present MongoDB, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/mongodb/mongodb-driver-sync/5.5.1/mongodb-driver-sync-5.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZdvXrZD91hkthHUKQx03qykub2-4viXnw4hbNZTItpc/mongodb-driver-sync-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.mongodb/mongodb-driver-sync@5.5.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.mongodb.com/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.mongodb/mongodb-driver-sync",
    "versionInfo" : "5.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.organicdesign-Paguro-3.1.4",
    "copyrightText" : "Copyright 2013-12-30 PlanBase Inc. & Glen Peterson\nCopyright Rich Hickey\nCopyright Rich Hickey. Errors\nCopyright (c) 2014-03-08 PlanBase Inc. & Glen Peterson\nCopyright (c) Rich Hickey",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/organicdesign/Paguro/3.1.4/Paguro-3.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5llxZrEjndqt5hzWKtmYiJgUPv9RZAWlFqx3OgKaCMc/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.organicdesign/Paguro@3.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/GlenKPeterson/Paguro",
    "licenseConcluded" : "(EPL-1.0 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.organicdesign/Paguro",
    "versionInfo" : "3.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-commons-9.7.1",
    "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm-commons/9.7.1/asm-commons-9.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yy_wHDdHnpsXJllyUwj0241r-gcBE7EQkYmo_q4qbIg/asm-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ow2.asm/asm-commons@9.7.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://asm.ow2.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ow2.asm/asm-commons",
    "versionInfo" : "9.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-tree-9.7.1",
    "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm-tree/9.7.1/asm-tree-9.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mfOEyTAhQHL5bj42JsY918Y8RlK7j3_1qBUnLqNK-Ug/asm-tree-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ow2.asm/asm-tree@9.7.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://asm.ow2.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ow2.asm/asm-tree",
    "versionInfo" : "9.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.4",
    "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm/9.4/asm-9.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YLa2ORHQUppGkBv1jiuskRmIG4rjXNiJMyqgtu2mmh4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ow2.asm/asm@9.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://asm.ow2.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ow2.asm/asm",
    "versionInfo" : "9.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4",
    "copyrightText" : "Copyright 2014 Reactive Streams",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzlZKD1w0srcX7HUjm-dlT3mVAU0KPihSho4sZTZnm4/reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.reactive-streams.org/",
    "licenseConcluded" : "MIT-0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.reactivestreams/reactive-streams",
    "versionInfo" : "1.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-1.7.36",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/1.7.36/jcl-over-slf4j-1.7.36.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BeyphBjhDjWZk0uS6-NwGdCWL7CZf17809Nys4blioE/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "1.7.36"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.36",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/1.7.36/jul-to-slf4j-1.7.36.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6WirelimZdtzKfvPHaftyDl-xWFR5cH8f1b3dtOa3ho/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "1.7.36"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-1.7.36",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1e_pYdVpIUbxVgpqhLr4dhS7Dbfkyuwz3AAGnl8mRWw/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "1.7.36"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-2.9",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2018, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/snakeyaml/snakeyaml-engine/2.9/snakeyaml-engine-2.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/979sJA0T2r_4kkRJwBa7wZgyBnraf5iH1z_ImsPB6CE/snakeyaml-engine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml-engine",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.snakeyaml/snakeyaml-engine",
    "versionInfo" : "2.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-2.7.18",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.\nCopyright 2012-2019 the original author or authors\n\nAuthors: Aarti Gupta; Akshay Dubey; Alen Turkovic; Alex Derkach; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Dan Zheng; Daniel Fernandez; Dave Syer; David Liu; Dirk Deyne; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Henryk Konsek; Issam El-atif; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Wilke; Johannes Edmeier; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lasse Lindqvist; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Gmeiner; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Paulius Dambrauskas; Piotr Maj; Quinten De Swaef; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Rob Winch; Rodolpho S. Couto; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Kuptsov; Sergey Serdyuk; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Taeik Lim; Thiago Hirata; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yogesh Lonkar; Yulin Qin; Yunkun Huang; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/2.7.18/spring-boot-autoconfigure-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/niDjlaW0cmYTRW7yOUuaH5UluVRTOKq-wCw8ew5p6yw/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-data-mongodb-2.7.18",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-data-mongodb/2.7.18/spring-boot-starter-data-mongodb-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/L1iQEmc-mc11MbSs9A-YnNuSWQH8H7www2-fuHckDUY/spring-boot-starter-data-mongodb-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-mongodb@2.7.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-data-mongodb",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jetty-2.7.18",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-jetty/2.7.18/spring-boot-starter-jetty-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qFMygmVL8HIxaxiTExNgTBtQjsd6vElKssNcR4KHSSs/spring-boot-starter-jetty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-jetty@2.7.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-jetty",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-2.7.18",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/2.7.18/spring-boot-starter-logging-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XoyyOIgDWz-zqkxpgWk0XQRXwU1xyJ1leIsoDIJpb4Q/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-2.7.18",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/2.7.18/spring-boot-starter-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UvXexPF91ddKkubsAd2vQmtejKUYVxdhi-sP8IEVX3Y/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-2.7.18",
    "copyrightText" : "Copyright (c) 2012-2023 VMware, Inc.\nCopyright 2002-2020 the original author or authors\n\nAuthors: Alexander Heusingfeld; Anand Shah; Andrey Hihlovskiy; Andy Clement; Andy Wilkinson; Anton Telechev; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Craig Burke; Cyril Dangerville; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henning Pottker; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Pascal Zwick; Paul Aly; Peter Leibiger; Raheela Aslam; Raja Kolli; Raphael von der Grun; Robert Thornton; Ruben Dijkstra; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/2.7.18/spring-boot-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/76unmqKNC7jC20WEFevQBZOCwzhu-IReQpHOcahVJPY/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@2.7.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.data-spring-data-commons-2.7.18",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright (c) 2010-2021 Pivotal Software, Inc.\nCopyright 2008-2023 the original author or authors\n\nAuthors: Alessandro Nistico; Alex Bondarev; Anastasiia Smirnova; Ariel Carrera; Barak Schoster; Ben Hale; Christoph Strobl; Christph Strobl; Christpoh Strobl; Colin Gao; Diego Krupitza; Dirk Mahler; Eberhard Wolff; Fabian Henniges; Florian Cramer; Francisco Soler; Gerrit Meier; Graeme Rocher; Greg Turnquist; Hantsy Bai; Henning Rohlfs; Jens Schauder; Johannes Englmeier; Johannes Englmeier https://www.xmlbeam.org https://www.xmlbeam.org @soundtrack Dr. Kobayashi Maru & The Mothership Connection; John Blum; Jon Brisbin; Jurgen Diez; Keegan Witt; Kevin Raymond; Kyrylo Merzlikin; Maciek Opala; Marcel Overdijk; Mariusz Maczkowski; Mark Paluch; Mark Paluch https://www.threeten.org/threetenbp' https://www.threeten.org/threetenbp; Mark Paluchs; Mark Pollack; Martin Baumgartner; Matias Hermosilla; Michael Cramer; Michael Hunger; Mikael Klamra; Mikhael Sokolov; Myeonghyeon Lee; Nick Williams; Oliver Drotbohm; Oliver Gierke; Patryk Wasik; Pavel Horal; Peter Rietzler; Philipp Huegelmeyer; Pivotal Software, Inc.; Ranie Jade Ramiso; Reda Housni Alaoui; Rod Johnson; Roman Rodov; Ryan Tenney; Sebastien Deleuze; Shaun Chyxion; Thomas Darimont; Thomas Eizinger; Thomas Risberg; Tjeu Kayim; Tobias Trelle; Tomasz Wysocki; Vedran Pavic; Xeno Amess; Yoann de Martino; Yuki Yoshida; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/data/spring-data-commons/2.7.18/spring-data-commons-2.7.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2qh03Tl9ENcDvQvIXOUxa3dbznNjPEQ-ih5NcMhSvnU/spring-data-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.data/spring-data-commons@2.7.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.data/spring-data-commons",
    "versionInfo" : "2.7.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.data-spring-data-mongodb-3.4.18",
    "copyrightText" : "Copyright 2019-2022 the original author or authors\n\nAuthors: Alessio Fachechi; Alexey Plotnik; Amol Nayak; Andreas Zink; Anton Barkan; Anton Buzdalkin; Artyom Gabeev; Bartlomiej Mazur; Becca Gaspard; Bjorn Harvold; Borislav Rangelov; Brendon Puntin; Brice Vandeputte; Christoph Leiter; Christoph Strobl; Christoph Strobl https://docs.mongodb.com/manual/core/index-wildcard; Christoph Strobl https://docs.mongodb.com/manual/reference/aggregation-variables' Aggregation Variables; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/arrayToObject/ https://docs.mongodb.com/manual/reference/operator/aggregation/arrayToObject; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/cond/ https://docs.mongodb.com/manual/reference/operator/aggregation/cond; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/convert/ https://docs.mongodb.com/manual/reference/operator/aggregation/convert; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/dateFromParts/ https://docs.mongodb.com/manual/reference/operator/aggregation/dateFromParts; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/dateFromString/ https://docs.mongodb.com/manual/reference/operator/aggregation/dateFromString; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/dateToParts/ https://docs.mongodb.com/manual/reference/operator/aggregation/dateToParts; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/mergeObjects/ https://docs.mongodb.com/manual/reference/operator/aggregation/mergeObjects; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/objectToArray/ https://docs.mongodb.com/manual/reference/operator/aggregation/objectToArray; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/out; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/redact/ https://docs.mongodb.com/manual/reference/operator/aggregation/redact; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toBool/ https://docs.mongodb.com/manual/reference/operator/aggregation/toBool; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toDate/ https://docs.mongodb.com/manual/reference/operator/aggregation/toDate; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toDecimal/ https://docs.mongodb.com/manual/reference/operator/aggregation/toDecimal; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toDouble/ https://docs.mongodb.com/manual/reference/operator/aggregation/toDouble; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toInt/ https://docs.mongodb.com/manual/reference/operator/aggregation/toInt; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toLong/ https://docs.mongodb.com/manual/reference/operator/aggregation/toLong; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toObjectId/ https://docs.mongodb.com/manual/reference/operator/aggregation/toObjectId; Christoph Strobl https://docs.mongodb.com/manual/reference/operator/aggregation/toString/ https://docs.mongodb.com/manual/reference/operator/aggregation/toString; Christoph Strobl https://docs.mongodb.com/master/reference/operator/aggregation/unionWith/ Aggregation Pipeline Stage; Christph Strobl; Christpoh Strobl; Chrstoph Strobl; Chuong Ngo; Cimon Lucas; Clement Petit; Dave Perryman; David Julia; Denis Zavedeev; Divya Srivastava; Domenique Tilleuil; Edward Prentice; Firat KUCUK; Florian Buecklers; Graeme Rocher; Grame Rocher; Gustavo de Geus; Hartmut Lang; Heesu Jung; Ivan Volzhev; Jacob Botuck; James McNee; Jeff Yemin; Jens Schauder; Jens Schauder https://docs.mongodb.com/manual/reference/collation; Jerome Guyon; John Brisbin; John Willemin; Johno Crawford; Jon Brisbin; Jon Brisbin <jbrisbin@vmware.com>; Jordi Llach; Juergen Zimmermann; Khaled Baklouti; Komi Innocent; Konstantin Volivach; Laszlo Csontos; Laurent Canet; Maciej Walkowiak; Maninder Singh; Mark Paluch; Mark Paluch https://docs.mongodb.com/manual/core/tailable-cursors/ Tailable Cursors; Mark Paluch https://docs.mongodb.com/manual/reference/method/db.collection.update; Mark Paluch https://docs.mongodb.com/manual/reference/operator/aggregation/ifNull/ https://docs.mongodb.com/manual/reference/operator/aggregation/ifNull; Mark Pollack; Mark Pollak; Martin Baumgartner; Martin Macko; Mathieu Ouellet; Matt Morrissette; Mehran Behnam; Michael J. Simons; Michail Nikolaev; Michal Kurcius; Michal Vich; Minsu Kim; Mushtaq Ahmed; Nick Stolwijk; Niklas Helge Hanft; Niko Schmuck; Nikolay Bogdanov; Oliver Gierke; Owen Q; Patrik Wasik; Patryk Wasik; Pavel Vodrazka; Philipp Schneider; Ralph Schaer; Robert Guo; Rocco Lagrotteria; Rogerio Meneguelli Gatto; Roman Puchkovskiy; Ross Lawley; Ruben J Garcia; Ryan Gibb; Sangyong Choi; Sebastian Herold; Sebastien Deleuze; Sebastien Gerard; Sergey Shcherbakov; Shashank Sharma; Shashank Sharma https://docs.mongodb.com/manual/reference/operator/aggregation/in/ https://docs.mongodb.com/manual/reference/operator/aggregation/in; Stephen Tyler Conrad; Thiago Diniz da Silveira; Thomas Darimont; Thomas Risberg; Tjeu Kayim; Tobias Trelle; Trisha Gee; Viktor Khoroshko; Wonwoo Lee; Yadhukrishna S Pai; Yoann de Martino; Zied Yaich; Ziemowit Stolarczyk; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/data/spring-data-mongodb/3.4.18/spring-data-mongodb-3.4.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.data/spring-data-mongodb@3.4.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e0BXlFXdUdFNktv-GYAdkDpjYkYsrZwUece5fE1YIus/spring-data-mongodb-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.data/spring-data-mongodb",
    "versionInfo" : "3.4.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-1.3.4",
    "copyrightText" : "Copyright 2002-2008 the original author or authors\nCopyright 2002-2014 the original author or authors\nCopyright 2006-2007 the original author or authors\nCopyright 2006-2012 the original author or authors\nCopyright 2006-2013 the original author or authors\nCopyright 2006-2014 the original author or authors\nCopyright 2006-2019 the original author or authors\nCopyright 2006-2020 the original author or authors\nCopyright 2006-2021 the original author or authors\nCopyright 2012-2013 the original author or authors\nCopyright 2012-2015 the original author or authors\nCopyright 2013-2019 the original author or authors\nCopyright 2014 the original author or authors\nCopyright 2014-2019 the original author or authors\nCopyright 2014-2022 the original author or authors\nCopyright 2015 the original author or authors\nCopyright 2015-2019 the original author or authors\nCopyright 2016-2018 the original author or authors\nCopyright 2019 the original author or authors\nCopyright 2022-2022 the original author or authors\n\nAuthors: Aldo Sinanaj; Aleksandr Shamukov; Artem Bilan; Chase Diem; Dan Garrette; Dave Syer; Gary Russell; Gianluca Medici; James Carr; Jon Travis; Josh Long; Kim In Hoi; Lucas Ward; Maksim Kita; Marius Grama; Mark Fisher; Markus Heiden; Michael Minella; Nathanael Roberts; Randell Callahan; Rob Harrop; Tomaz Fernandes",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/retry/spring-retry/1.3.4/spring-retry-1.3.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.retry/spring-retry@1.3.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/keRcGiNePzPPzg_DVN0dv5Fvwgb738Q17XQXYeSab58/spring-retry-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.springsource.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.retry/spring-retry",
    "versionInfo" : "1.3.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-5.8.14",
    "copyrightText" : "Copyright 2002-2011 the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne <ch4mp@c4-soft.com>; Jesus Ascama Arias; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Michael Vitz; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Tadaya Tsuyukubo; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/5.8.14/spring-security-config-5.8.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@5.8.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/psOsQNDuSEETnLWFGIyzOgTx2htb1wx6UbdSa00z-ME/spring-security-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-config",
    "versionInfo" : "5.8.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-5.8.14",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2002-2013 the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Greg Turnquist; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/5.8.14/spring-security-core-5.8.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@5.8.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wr_iE-kUoQMmd3OtqlAEimYDf0lKz2_kh1blF_Dh1OE/spring-security-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-core",
    "versionInfo" : "5.8.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-5.8.14",
    "copyrightText" : "Copyright (c) 2006 Damien Miller <djm@mindrot.org>\nCopyright 2002-2011 the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; William Tran; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/5.8.14/spring-security-crypto-5.8.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MUIMqWHOiL6O09cILfZEFypPoZ4eRfWlWeaFAVZy-hw/spring-security-crypto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@5.8.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-crypto",
    "versionInfo" : "5.8.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-5.8.14",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2002-2012 the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christophe Gilles; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Zeeshan Adnan; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/5.8.14/spring-security-web-5.8.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/P-beni6ldDdjv8j3HV-TUYnVJ8TJ4N-1FKKIe8bHmeA/spring-security-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@5.8.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-web",
    "versionInfo" : "5.8.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2006 the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Steve Souza; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/5.3.39/spring-aop-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Cor3p6tk_EP3OcmbzyTbC8g-ZEDj5N021h_hZxUA1rU/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@5.3.39",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2007 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBean. FactoryBean; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/5.3.39/spring-beans-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JPzkEYF24Gfv9DYEmHO8CfOP3hvIR27OjrWkuK3I2aA/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@5.3.39",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Alef Arendsen; Ben Manes; Brian Clozel; Chris Beams; Costin Leau; Darren Davison; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Mark Fisher; OW2 Consortium; Pivotal, Inc.; Rob Harrop; Sam Brannen; Stas Volsky; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context-support/5.3.39/spring-context-support-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JmAe6jam_AWvC1yGmHGeSBqFROb_1a01elOpHCddSNc/spring-context-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context-support@5.3.39",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context-support",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2005 the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Colin Sampaleanu; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Ruslan Sibgatullin; Sam Brannen; Sebastien Deleuze; Seth Ladd; Stephane Nicoll; Tobias Montagna-Hay; Vedran Pavic; Victor Brown; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/5.3.39/spring-context-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dMSCmpnkva8HzQEIzFJE18Hpom5RO4gLtQliTcZk3qQ/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@5.3.39",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003,2004 The Apache Software Foundation\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Arjen Poutsma; Ben Hale; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Gary Russell; Gunnar Hillert; Hyunjin Choi; INRIA, France Telecom; Jason Zaugg; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Loic Ledoyen; Luke Taylor; Marius Bogoevici; Mark Fisher; Mark Paluch; Mark Pollack; Mattias Severson; OW2 Consortium; Oleg Zhurakousky; Oliver Gierke; Philippe Marschall; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Stephane Maldini; Stephane Nicoll; The Apache Software Foundation; Vladislav Kisel; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/5.3.39/spring-core-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3lvG0mFsoa91ea011h2rydeKDD_ga7Lao6c-VKAmgp0/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@5.3.39",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2009 the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; INRIA, France Telecom; Ivo Smid; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/5.3.39/spring-expression-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@5.3.39",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/faZYcnKfaFpW3fem7b11CoGEfdXqU7tLo7OulTr3z-Q/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2017 the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/5.3.39/spring-jcl-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@5.3.39",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7rZ_3l4v9vct2qPe7TFSdqabYfKx80VZZcsrYZaoAYU/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-tx-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2008 the original author or authors\n\nAuthors: Adrian Colyer; Chris Beams; Christian Dupuis; Colin Sampaleanu; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Mark Paluch; OW2 Consortium; Oliver Drotbohm; Pivotal, Inc.; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thierry Templier; Thomas Risberg; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-tx/5.3.39/spring-tx-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-tx@5.3.39",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/66PjD7Dus6pkFHmA9FRBwHGi4ga7ZbO_7iKmYzBGI5k/spring-tx-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-tx",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-5.3.39",
    "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ],
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2024 Pivotal, Inc.\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; INRIA, France Telecom; Jakub Narloch; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Luciano Leggieri; Marek Hawrylczak; Mark Paluch; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/5.3.39/spring-web-5.3.39.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@5.3.39",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sWglfdj3o44u_3VlSc2nVwoyXbAFuSi5zcYJ8ZGRYtw/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "5.3.39"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-1.33",
    "copyrightText" : "Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz\nCopyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/1.33/snakeyaml-1.33.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hfC79-H_ChvJRvAG8z-Ot1Azub5XDmviZg_iC9z_1ak/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@1.33",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "1.33"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-faux-pas-0.9.0",
    "copyrightText" : "Copyright (c) 2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/faux-pas/0.9.0/faux-pas-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0AaqTHJDHT6APEqGhcdT_VC-rzDQ4BmtWYjPuAd7v30/faux-pas-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/faux-pas@0.9.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/zalando/faux-pas",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/faux-pas",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-logbook-api-2.14.0",
    "copyrightText" : "Copyright (c) 2015-2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/logbook-api/2.14.0/logbook-api-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/u0e9vq2qL1zCVQI9IvAYv8tJyniJxjFdUa6lS4CPxPo/logbook-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/logbook-api@2.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/logbook-api",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-logbook-common-2.14.0",
    "copyrightText" : "Copyright (c) 2015-2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/logbook-common/2.14.0/logbook-common-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9alDs5Dy2hn-089v_-53UMCUbB2UOjvI91ZxS1uL0kE/logbook-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/logbook-common@2.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/logbook-common",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-logbook-core-2.14.0",
    "copyrightText" : "Copyright (c) 2015-2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/logbook-core/2.14.0/logbook-core-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ADaZ97PV0rUE1LVytJa-kopA1TaCnnpgXORBxRV9hPY/logbook-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/logbook-core@2.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/logbook-core",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-logbook-jaxrs-2.14.0",
    "copyrightText" : "Copyright (c) 2015-2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/logbook-jaxrs/2.14.0/logbook-jaxrs-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4G92x5vJLZ3T4erXyvgKwdpDoRusp64Wb_Kouu2UUKk/logbook-jaxrs-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/logbook-jaxrs@2.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/logbook-jaxrs",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-logbook-netty-2.14.0",
    "copyrightText" : "Copyright (c) 2015-2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/logbook-netty/2.14.0/logbook-netty-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qobf7o13bLtsS9fvAiM3iTWEjuxQ5tGWs9dbtvba4eY/logbook-netty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/logbook-netty@2.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/logbook-netty",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zalando-logbook-servlet-2.14.0",
    "copyrightText" : "Copyright (c) 2015-2016 Zalando SE\nCopyright 2007-present the original author or authors\n\nAuthors: Zalando SE; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zalando/logbook-servlet/2.14.0/logbook-servlet-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zalando/logbook-servlet@2.14.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/a2svwCpDTZmA59pXwHRdSkyJe4Ff0-7C8-EcEKLnHYU/logbook-servlet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zalando/logbook-servlet",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-si.uom-si-quantity-0.7",
    "copyrightText" : "Copyright (c) 2005-2014, Jean-Marie Dautelle, Werner Keil\nCopyright (c) 2014 Jean-Marie Dautelle, Werner Keil, V2COM",
    "downloadLocation" : "https://repo1.maven.org/maven2/si/uom/si-quantity/0.7/si-quantity-0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/si.uom/si-quantity@0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XBQIRos_D9KYg1VIkuVImwCDP2EpGUKQNPRCedhYe4w/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/si.uom/si-quantity/0.7",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/si.uom/si-quantity",
    "versionInfo" : "0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-si.uom-si-units-0.7",
    "copyrightText" : "Copyright (c) 2005-2014, Jean-Marie Dautelle, Werner Keil\nCopyright (c) 2005-2017, Jean-Marie Dautelle, Werner Keil and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/si/uom/si-units/0.7/si-units-0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/si.uom/si-units@0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/itIHhT86OalEDD5wp_g1rbSmIL--874o5BgZq1FetpA/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/si.uom/si-units/0.7",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/si.uom/si-units",
    "versionInfo" : "0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-systems.uom-systems-common-0.7.1",
    "copyrightText" : "Copyright (c) 2005-2015, Jean-Marie Dautelle, Werner Keil",
    "downloadLocation" : "https://repo1.maven.org/maven2/systems/uom/systems-common/0.7.1/systems-common-0.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/systems.uom/systems-common@0.7.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kwscNsWaJzqQ7q5TbLanbDz-zc8yeSQJ2EXu2usoWbY/systems-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/systems.uom/systems-common",
    "versionInfo" : "0.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-systems.uom-systems-quantity-0.7.1",
    "copyrightText" : "Copyright (c) 2005-2015, Jean-Marie Dautelle, Werner Keil\nCopyright (c) 2005-2017, Jean-Marie Dautelle, Werner Keil and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/systems/uom/systems-quantity/0.7.1/systems-quantity-0.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/systems.uom/systems-quantity@0.7.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wSbT2IHWWXWs7dXkpxZEme1Z6NzzBy53FvrjTe-kFYg/systems-quantity-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/systems.uom/systems-quantity",
    "versionInfo" : "0.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-systems.uom-systems-unicode-0.7.1",
    "copyrightText" : "Copyright (c) 2005-2016, Jean-Marie Dautelle, Werner Keil",
    "downloadLocation" : "https://repo1.maven.org/maven2/systems/uom/systems-unicode/0.7.1/systems-unicode-0.7.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/systems.uom/systems-unicode@0.7.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rCCQ_5f_gic6vyWyp273wbntSxW2JSfDkZGY1RQDskI/systems-unicode-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/systems.uom/systems-unicode",
    "versionInfo" : "0.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-tec.units-unit-ri-1.0.3",
    "copyrightText" : "Copyright (c) 2005-2017, Jean-Marie Dautelle, Werner Keil\nPortions Copyright 1990-2006, Oracle and/or its affiliates\nPortions Copyright 1999-2010 Research In Motion Limited. 295 Phillip Street, Waterloo, Ontario, Canada, N2L 3W8\nPortions Copyright 1990-2006 Sun Microsystems, Inc.\nPortions Copyright (c) 1997, 2013, Oracle and/or its affiliates\nPortions Copyright (c) 2004 by Sun Microsystems, Inc.\n(c) Copyright IBM Corp. 1996\n(c) Copyright Taligent, Inc. 1996",
    "downloadLocation" : "https://repo1.maven.org/maven2/tec/units/unit-ri/1.0.3/unit-ri-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/tec.units/unit-ri@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xZ-MDHFGKpQPueYrZcoViIYNeRY4js3K6zxh4hmSPas/unit-ri-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/unitsofmeasurement/unit-ri",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/tec.units/unit-ri",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-tec.uom.lib-uom-lib-common-1.0.2",
    "copyrightText" : "Copyright (c) 2005-2014, Jean-Marie Dautelle, Werner Keil",
    "downloadLocation" : "https://repo1.maven.org/maven2/tec/uom/lib/uom-lib-common/1.0.2/uom-lib-common-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/tec.uom.lib/uom-lib-common@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pKZfMJaxM8jt_aZxAukSJFbcWSIExH1eFF7Y8n-Peu4/uom-lib-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/tec.uom.lib/uom-lib-common",
    "versionInfo" : "1.0.2"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-api-0.13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-jakarta.inject-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-impl-0.13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.paho-org.eclipse.paho.client.mqttv3-1.2.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.resilience4j-resilience4j-ratelimiter-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.9.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-webapp-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.moquette-moquette-broker-0.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-xml-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-jackson-0.13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.9.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-mqtt-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlet-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-haproxy-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlets-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.moquette-moquette-netty-parser-0.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-linux-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.121.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-json-jackson-2.45"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.121.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.ext-jersey-entity-filtering-2.45"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-2.45"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.70.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-2.45"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.121.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-2.45"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-runtime-2.3.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-windows-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-txw2-2.3.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.70.Final-classifier-osx-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-javax-websocket-server-impl-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-api-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-websocket-javax-server-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-javax-websocket-client-impl-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-server-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-websocket-common-server-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-client-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-common-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-plus-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-security-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-client-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-continuation-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-annotations-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-server-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-server-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.antlr-antlr-runtime-3.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.sf.supercsv-super-csv-2.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-2.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.antlr-ST4-4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-accessors-smart-2.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.36"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.minidev-json-smart-2.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-1.7.36"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jcip-jcip-annotations-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-1.7.36"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.ws-jakarta.xml.ws-api-2.3.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-tree-9.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.measure-unit-api-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.organicdesign-Paguro-3.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.soap-jakarta.xml.soap-api-1.4.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-commons-9.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.blueconic-browscap-java-1.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-math3-3.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-5.8.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-core-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.retry-spring-retry-1.3.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-5.8.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-cpu-affinity-4.14.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.data-spring-data-commons-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.5.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.data-spring-data-mongodb-3.4.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-allocator-4.14.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-circe-checksum-4.14.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-protobuf-1.12.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jetty-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-data-mongodb-2.7.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-2.2.41"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-context-1.56.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.4.3.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.6.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-api-1.56.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-6.2.5.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry-opentelemetry-common-1.56.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-2.45"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opentelemetry.javaagent-opentelemetry-javaagent-2.20.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-2.1.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.mongodb-mongodb-driver-sync-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-2.3.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.mongodb-mongodb-driver-core-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.websocket-jakarta.websocket-api-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.mongodb-mongodb-driver-legacy-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.mail-jakarta.mail-api-1.6.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.mongodb-bson-record-codec-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.servlet-jakarta.servlet-api-4.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.mongodb-bson-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-1.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.staxex-stax-ex-1.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.jws-jakarta.jws-api-2.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger-swagger-annotations-1.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-1.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains-annotations-17.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.xmlbeans-xmlbeans-5.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jsonSchema-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-9.0.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.woodstox-woodstox-core-6.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.ws.xmlschema-xmlschema-core-2.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-core-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-transaction-common-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.ben-manes.caffeine-caffeine-3.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-original-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.mifmif-generex-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-common-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.flipkart.zjsonpatch-zjsonpatch-0.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-messagecrypto-bc-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apiguardian-apiguardian-api-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjrt-1.9.21.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.virtuald-curvesapi-1.08"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.5.0-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.woodstox-stax2-api-4.2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.45.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.googlecode.libphonenumber-libphonenumber-8.12.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.h2database-h2-mvstore-1.4.200"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.9.21.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-4.33.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-netty-utils-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-3.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.jayway.jsonpath-json-path-2.8.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.lmax-disruptor-3.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-nio-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-tx-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-cometd-java-websocket-javax-server-3.0.10-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.geronimo.specs-geronimo-jta-1.1-spec-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-kubernetes-client-7.3.1-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpasyncclient-4.1.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-transports-http-jetty-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-cometd-java-server-3.0.10-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-transports-http-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-pulsar-client-original-2.8.4-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-frontend-jaxrs-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-svenson-1.6.1-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-security-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-olingo-odata2-api-2.0.13-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-5.8.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nsn.cumulocity.dependencies.osgi-olingo-odata2-core-2.0.13-2026.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.cxf-cxf-rt-features-metrics-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-5.8.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-5.3.39"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-logging-interceptor-3.12.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-3.12.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okio-okio-1.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-2.8.4-classifier-pkg"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-si.uom-si-quantity-0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.istack-istack-commons-runtime-3.0.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-logbook-netty-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.mail-jakarta.mail-1.6.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-logbook-servlet-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.activation-jakarta.activation-1.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.olingo-olingo-odata2-core-2.0.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-logbook-core-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.activation-javax.activation-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.poi-poi-ooxml-lite-5.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-logbook-jaxrs-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.univocity-univocity-parsers-2.9.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-slf4j-impl-2.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-logbook-api-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.warrenstrange-googleauth-1.5.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.olingo-olingo-odata2-api-2.0.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-logbook-common-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.xml.messaging.saaj-saaj-impl-1.5.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-1.33"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.typesafe.netty-netty-reactive-streams-2.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-core-2.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zalando-faux-pas-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-original-2.8.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-tec.uom.lib-uom-lib-common-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-systems.uom-systems-unicode-0.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-tec.units-unit-ri-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.yahoo.datasketches-sketches-core-0.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-systems.uom-systems-common-0.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-SparseBitSet-1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-systems.uom-systems-quantity-0.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.yahoo.datasketches-memory-0.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-si.uom-si-units-0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-configuration-commons-configuration-1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-dk.brics.automaton-automaton-1.11-8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-httpclient-okhttp-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-admissionregistration-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.airlift-aircompressor-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-client-api-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-autoscaling-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-batch-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-apiextensions-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-apps-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-certificates-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-common-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-coordination-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-events-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-extensions-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-core-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-discovery-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-metrics-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-networking-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-flowcontrol-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-gatewayapi-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-node-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-policy-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-rbac-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-storageclass-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-zjsonpatch-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-resource-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.fabric8-kubernetes-model-scheduling-7.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.resilience4j-resilience4j-circuitbreaker-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.resilience4j-resilience4j-core-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.hakky54-sslcontext-kickstart-for-pem-8.3.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-cumulocity-core-2026.0.63",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.hakky54-sslcontext-kickstart-8.3.6"
  } ]
}