{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-10-30T15:13:27Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "dtm-v1025.15.1",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-GPL-2.0-with-oracle-classpath-exception",
    "extractedText" : "The GNU General Public License (GPL)\n\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.\n59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nEveryone is permitted to copy and distribute verbatim copies of this license\ndocument, but changing it is not allowed.\n\nPreamble\n\nThe licenses for most software are designed to take away your freedom to share\nand change it.  By contrast, the GNU General Public License is intended to\nguarantee your freedom to share and change free software--to make sure the\nsoftware is free for all its users.  This General Public License applies to\nmost of the Free Software Foundation's software and to any other program whose\nauthors commit to using it.  (Some other Free Software Foundation software is\ncovered by the GNU Library General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not price.  Our\nGeneral Public Licenses are designed to make sure that you have the freedom to\ndistribute copies of free software (and charge for this service if you wish),\nthat you receive source code or can get it if you want it, that you can change\nthe software or use pieces of it in new free programs; and that you know you\ncan do these things.\n\nTo protect your rights, we need to make restrictions that forbid anyone to deny\nyou these rights or to ask you to surrender the rights.  These restrictions\ntranslate to certain responsibilities for you if you distribute copies of the\nsoftware, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether gratis or for\na fee, you must give the recipients all the rights that you have.  You must\nmake sure that they, too, receive or can get the source code.  And you must\nshow them these terms so they know their rights.\n\nWe protect your rights with two steps: (1) copyright the software, and (2)\noffer you this license which gives you legal permission to copy, distribute\nand/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain that\neveryone understands that there is no warranty for this free software.  If the\nsoftware is modified by someone else and passed on, we want its recipients to\nknow that what they have is not the original, so that any problems introduced\nby others will not reflect on the original authors' reputations.\n\nFinally, any free program is threatened constantly by software patents.  We\nwish to avoid the danger that redistributors of a free program will\nindividually obtain patent licenses, in effect making the program proprietary.\nTo prevent this, we have made it clear that any patent must be licensed for\neveryone's free use or not licensed at all.\n\nThe precise terms and conditions for copying, distribution and modification\nfollow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a notice\nplaced by the copyright holder saying it may be distributed under the terms of\nthis General Public License.  The \"Program\", below, refers to any such program\nor work, and a \"work based on the Program\" means either the Program or any\nderivative work under copyright law: that is to say, a work containing the\nProgram or a portion of it, either verbatim or with modifications and/or\ntranslated into another language.  (Hereinafter, translation is included\nwithout limitation in the term \"modification\".) Each licensee is addressed as\n\"you\".\n\nActivities other than copying, distribution and modification are not covered by\nthis License; they are outside its scope.  The act of running the Program is\nnot restricted, and the output from the Program is covered only if its contents\nconstitute a work based on the Program (independent of having been made by\nrunning the Program).  Whether that is true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source code as\nyou receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice and\ndisclaimer of warranty; keep intact all the notices that refer to this License\nand to the absence of any warranty; and give any other recipients of the\nProgram a copy of this License along with the Program.\n\nYou may charge a fee for the physical act of transferring a copy, and you may\nat your option offer warranty protection in exchange for a fee.\n\n2. You may modify your copy or copies of the Program or any portion of it, thus\nforming a work based on the Program, and copy and distribute such modifications\nor work under the terms of Section 1 above, provided that you also meet all of\nthese conditions:\n\n    a) You must cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change.\n\n    b) You must cause any work that you distribute or publish, that in whole or\n    in part contains or is derived from the Program or any part thereof, to be\n    licensed as a whole at no charge to all third parties under the terms of\n    this License.\n\n    c) If the modified program normally reads commands interactively when run,\n    you must cause it, when started running for such interactive use in the\n    most ordinary way, to print or display an announcement including an\n    appropriate copyright notice and a notice that there is no warranty (or\n    else, saying that you provide a warranty) and that users may redistribute\n    the program under these conditions, and telling the user how to view a copy\n    of this License.  (Exception: if the Program itself is interactive but does\n    not normally print such an announcement, your work based on the Program is\n    not required to print an announcement.)\n\nThese requirements apply to the modified work as a whole.  If identifiable\nsections of that work are not derived from the Program, and can be reasonably\nconsidered independent and separate works in themselves, then this License, and\nits terms, do not apply to those sections when you distribute them as separate\nworks.  But when you distribute the same sections as part of a whole which is a\nwork based on the Program, the distribution of the whole must be on the terms\nof this License, whose permissions for other licensees extend to the entire\nwhole, and thus to each and every part regardless of who wrote it.\n\nThus, it is not the intent of this section to claim rights or contest your\nrights to work written entirely by you; rather, the intent is to exercise the\nright to control the distribution of derivative or collective works based on\nthe Program.\n\nIn addition, mere aggregation of another work not based on the Program with the\nProgram (or with a work based on the Program) on a volume of a storage or\ndistribution medium does not bring the other work under the scope of this\nLicense.\n\n3. You may copy and distribute the Program (or a work based on it, under\nSection 2) in object code or executable form under the terms of Sections 1 and\n2 above provided that you also do one of the following:\n\n    a) Accompany it with the complete corresponding machine-readable source\n    code, which must be distributed under the terms of Sections 1 and 2 above\n    on a medium customarily used for software interchange; or,\n\n    b) Accompany it with a written offer, valid for at least three years, to\n    give any third party, for a charge no more than your cost of physically\n    performing source distribution, a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of Sections 1\n    and 2 above on a medium customarily used for software interchange; or,\n\n    c) Accompany it with the information you received as to the offer to\n    distribute corresponding source code.  (This alternative is allowed only\n    for noncommercial distribution and only if you received the program in\n    object code or executable form with such an offer, in accord with\n    Subsection b above.)\n\nThe source code for a work means the preferred form of the work for making\nmodifications to it.  For an executable work, complete source code means all\nthe source code for all modules it contains, plus any associated interface\ndefinition files, plus the scripts used to control compilation and installation\nof the executable.  However, as a special exception, the source code\ndistributed need not include anything that is normally distributed (in either\nsource or binary form) with the major components (compiler, kernel, and so on)\nof the operating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering access to copy\nfrom a designated place, then offering equivalent access to copy the source\ncode from the same place counts as distribution of the source code, even though\nthird parties are not compelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program except as\nexpressly provided under this License.  Any attempt otherwise to copy, modify,\nsublicense or distribute the Program is void, and will automatically terminate\nyour rights under this License.  However, parties who have received copies, or\nrights, from you under this License will not have their licenses terminated so\nlong as such parties remain in full compliance.\n\n5. You are not required to accept this License, since you have not signed it.\nHowever, nothing else grants you permission to modify or distribute the Program\nor its derivative works.  These actions are prohibited by law if you do not\naccept this License.  Therefore, by modifying or distributing the Program (or\nany work based on the Program), you indicate your acceptance of this License to\ndo so, and all its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the Program),\nthe recipient automatically receives a license from the original licensor to\ncopy, distribute or modify the Program subject to these terms and conditions.\nYou may not impose any further restrictions on the recipients' exercise of the\nrights granted herein.  You are not responsible for enforcing compliance by\nthird parties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues), conditions\nare imposed on you (whether by court order, agreement or otherwise) that\ncontradict the conditions of this License, they do not excuse you from the\nconditions of this License.  If you cannot distribute so as to satisfy\nsimultaneously your obligations under this License and any other pertinent\nobligations, then as a consequence you may not distribute the Program at all.\nFor example, if a patent license would not permit royalty-free redistribution\nof the Program by all those who receive copies directly or indirectly through\nyou, then the only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under any\nparticular circumstance, the balance of the section is intended to apply and\nthe section as a whole is intended to apply in other circumstances.\n\nIt is not the purpose of this section to induce you to infringe any patents or\nother property right claims or to contest validity of any such claims; this\nsection has the sole purpose of protecting the integrity of the free software\ndistribution system, which is implemented by public license practices.  Many\npeople have made generous contributions to the wide range of software\ndistributed through that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing to\ndistribute software through any other system and a licensee cannot impose that\nchoice.\n\nThis section is intended to make thoroughly clear what is believed to be a\nconsequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in certain\ncountries either by patents or by copyrighted interfaces, the original\ncopyright holder who places the Program under this License may add an explicit\ngeographical distribution limitation excluding those countries, so that\ndistribution is permitted only in or among countries not thus excluded.  In\nsuch case, this License incorporates the limitation as if written in the body\nof this License.\n\n9. The Free Software Foundation may publish revised and/or new versions of the\nGeneral Public License from time to time.  Such new versions will be similar in\nspirit to the present version, but may differ in detail to address new problems\nor concerns.\n\nEach version is given a distinguishing version number.  If the Program\nspecifies a version number of this License which applies to it and \"any later\nversion\", you have the option of following the terms and conditions either of\nthat version or of any later version published by the Free Software Foundation.\nIf the Program does not specify a version number of this License, you may\nchoose any version ever published by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free programs\nwhose distribution conditions are different, write to the author to ask for\npermission.  For software which is copyrighted by the Free Software Foundation,\nwrite to the Free Software Foundation; we sometimes make exceptions for this.\nOur decision will be guided by the two goals of preserving the free status of\nall derivatives of our free software and of promoting the sharing and reuse of\nsoftware generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR\nTHE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN OTHERWISE\nSTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE\nPROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND\nPERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE,\nYOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL\nANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE\nPROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER\nOR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\nHow to Apply These Terms to Your New Programs\n\nIf you develop a new program, and you want it to be of the greatest possible\nuse to the public, the best way to achieve this is to make it free software\nwhich everyone can redistribute and change under these terms.\n\nTo do so, attach the following notices to the program.  It is safest to attach\nthem to the start of each source file to most effectively convey the exclusion\nof warranty; and each file should have at least the \"copyright\" line and a\npointer to where the full notice is found.\n\n    One line to give the program's name and a brief idea of what it does.\n\n    Copyright (C) <year> <name of author>\n\n    This program is free software; you can redistribute it and/or modify it\n    under the terms of the GNU General Public License as published by the Free\n    Software Foundation; either version 2 of the License, or (at your option)\n    any later version.\n\n    This program is distributed in the hope that it will be useful, but WITHOUT\n    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\n    FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for\n    more details.\n\n    You should have received a copy of the GNU General Public License along\n    with this program; if not, write to the Free Software Foundation, Inc., 59\n    Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nAlso add information on how to contact you by electronic and paper mail.\n\nIf the program is interactive, make it output a short notice like this when it\nstarts in an interactive mode:\n\n    Gnomovision version 69, Copyright (C) year name of author Gnomovision comes\n    with ABSOLUTELY NO WARRANTY; for details type 'show w'.  This is free\n    software, and you are welcome to redistribute it under certain conditions;\n    type 'show c' for details.\n\nThe hypothetical commands 'show w' and 'show c' should show the appropriate\nparts of the General Public License.  Of course, the commands you use may be\ncalled something other than 'show w' and 'show c'; they could even be\nmouse-clicks or menu items--whatever suits your program.\n\nYou should also get your employer (if you work as a programmer) or your school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.  Here\nis a sample; alter the names:\n\n    Yoyodyne, Inc., hereby disclaims all copyright interest in the program\n    'Gnomovision' (which makes passes at compilers) written by James Hacker.\n\n    signature of Ty Coon, 1 April 1989\n\n    Ty Coon, President of Vice\n\nThis General Public License does not permit incorporating your program into\nproprietary programs.  If your program is a subroutine library, you may\nconsider it more useful to permit linking proprietary applications with the\nlibrary.  If this is what you want to do, use the GNU Library General Public\nLicense instead of this License.\n\n\n\"CLASSPATH\" EXCEPTION TO THE GPL\n\nCertain source files distributed by Oracle America and/or its affiliates are\nsubject to the following clarification and special exception to the GPL, but\nonly where Oracle has expressly included in the particular source file's header\nthe words \"Oracle designates this particular file as subject to the \"Classpath\"\nexception as provided by Oracle in the LICENSE file that accompanied this code.\"\n\n    Linking this library statically or dynamically with other modules is making\n    a combined work based on this library.  Thus, the terms and conditions of\n    the GNU General Public License cover the whole combination.\n\n    As a special exception, the copyright holders of this library give you\n    permission to link this library with independent modules to produce an\n    executable, regardless of the license terms of these independent modules,\n    and to copy and distribute the resulting executable under terms of your\n    choice, provided that you also meet, for each linked independent module,\n    the terms and conditions of the license of that module.  An independent\n    module is a module which is not derived from or based on this library.  If\n    you modify this library, you may extend this exception to your version of\n    the library, but you are not obligated to do so.  If you do not wish to do\n    so, delete this exception statement from your version.\n\n\n\n\nADDITIONAL INFORMATION ABOUT LICENSING\n\nCertain files distributed by Oracle America, Inc. and/or its affiliates are\nsubject to the following clarification and special exception to the GPLv2,\nbased on the GNU Project exception for its Classpath libraries, known as the\nGNU Classpath Exception.\n\nNote that Oracle includes multiple, independent programs in this software\npackage.  Some of those programs are provided under licenses deemed\nincompatible with the GPLv2 by the Free Software Foundation and others.\nFor example, the package includes programs licensed under the Apache\nLicense, Version 2.0 and may include FreeType. Such programs are licensed\nto you under their original licenses.\n\nOracle facilitates your further distribution of this package by adding the\nClasspath Exception to the necessary parts of its GPLv2 code, which permits\nyou to use that code in combination with other independent modules not\nlicensed under the GPLv2. However, note that this would not permit you to\ncommingle code under an incompatible license with Oracle's GPLv2 licensed\ncode by, for example, cutting and pasting such code into a file also\ncontaining Oracle's GPLv2 licensed code and then distributing the result.\n\nAdditionally, if you were to remove the Classpath Exception from any of the\nfiles to which it applies and distribute the result, you would likely be\nrequired to license some or all of the other code in that distribution under\nthe GPLv2 as well, and since the GPLv2 is incompatible with the license terms\nof some items included in the distribution by Oracle, removing the Classpath\nException could therefore effectively compromise your ability to further\ndistribute the package.\n\nFailing to distribute notices associated with some files may also create\nunexpected legal consequences.\n\nProceed with caution and we recommend that you obtain the advice of a lawyer\nskilled in open source matters before removing the Classpath Exception or\nmaking modifications to this package which may subsequently be redistributed\nand/or involve the use of third party software.",
    "name" : "GPL 2.0 with oracle classpath exception"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-scancode-khronos",
    "extractedText" : "Permission is hereby granted, free of charge, to any person obtaining a\ncopy of this software and/or associated documentation files (the\n\"Materials\"), to deal in the Materials without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Materials, and to\npermit persons to whom the Materials are furnished to do so, subject\nto the following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Materials.\n\nTHE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\nIN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\nCLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\nTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\nMATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.",
    "name" : "LicenseRef-scancode-khronos"
  }, {
    "licenseId" : "LicenseRef-scancode-unicode",
    "extractedText" : "UNICODE, INC. LICENSE AGREEMENT - DATA FILES AND SOFTWARE\n\nUnicode Data Files include all data files under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/ . Unicode Software includes any source\ncode published in the Unicode Standard or under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/.\n\nNOTICE TO USER: Carefully read the following legal agreement. BY\nDOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING UNICODE INC.'S DATA\nFILES (\"DATA FILES\"), AND/OR SOFTWARE (\"SOFTWARE\"), YOU UNEQUIVOCALLY\nACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE TERMS AND CONDITIONS OF THIS\nAGREEMENT. IF YOU DO NOT AGREE, DO NOT DOWNLOAD, INSTALL, COPY, DISTRIBUTE\nOR USE THE DATA FILES OR SOFTWARE.\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright ©  Unicode, Inc. All rights reserved. Distributed under\nthe Terms of Use in http://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of the Unicode data files and any associated documentation (the\n\"Data Files\") or Unicode software and any associated documentation (the\n\"Software\") to deal in the Data Files or Software without restriction,\nincluding without limitation the rights to use, copy, modify, merge,\npublish, distribute, and/or sell copies of the Data Files or Software,\nand to permit persons to whom the Data Files or Software are furnished\nto do so, provided that\n\n(a) the above copyright notice(s) and this permission notice appear with\nall copies of the Data Files or Software,\n\n(b) both the above copyright notice(s) and this permission notice appear\nin associated documentation, and\n\n(c) there is clear notice in each modified Data File or in the Software\nas well as in the documentation associated with the Data File(s) or\nSoftware that the data or software has been modified.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR HOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR\nANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder shall\nnot be used in advertising or otherwise to promote the sale, use or\nother dealings in these Data Files or Software without prior written\nauthorization of the copyright holder.\n\nUnicode and the Unicode logo are trademarks of Unicode, Inc., and may be\nregistered in some jurisdictions. All other trademarks and registered\ntrademarks mentioned herein are the property of their respective owners.",
    "name" : "LicenseRef-scancode-unicode"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-dtm-v1025.15.1-4ae2b440-c329-45b5-9ce9-47eee9ff8238",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/dtm@1025.15.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "dtm",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "1025.15.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-acl-libs-2.3.2-r1-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright (c) 2007 Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 2000, 2002 Andreas Gruenbacher <agruen@suse.de>\nCopyright (c) 1999, 2000 Andreas Gruenbacher <andreas.gruenbacher@gmail.com>\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2019 Debian French l10n team <debian-l10n-french@lists.debian.org> Sylvain Archenault <sylvain.archenault@laposte.net> , 2005. Jean-Philippe MENGUAL <jpmengual@debian.org> , 2019\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2000 Free Software Foundation, Inc. Andreas Grunbacher <a.gruenbacher@computer.org> , 2000\nCopyright (c) 2007 Free Software Foundation, Inc. Antonio Trueba <atrueba@users.sourceforge.net> , 2007\nCopyright (c) 2006 Free Software Foundation, Inc. Daniel Nylander <po@danielnylander.se> , 2006\nCopyright (c) 2004 Free Software Foundation, Inc. Jakub Bogusz <qboosh@pld-linux.org> , 2004-2022\nCopyright (c) 2001-2002 Silicon Graphics, Inc.\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1999 by Andreas Gruenbacher <a.gruenbacher@computer.org>\n(c) 1999 Andreas Gruenbacher, <a.gruenbacher@computer.org>\n(c) 2000 Andreas Gruenbacher, <andreas.gruenbacher@gmail.com>\ncopyrighted by the Free Software Foundation\n\nAuthors: Alexandre Oliva <oliva@dcc.unicamp.br>; An Andreas Gruenbacher Aq andreas.gruenbacher@gmail.com; An Robert N; Andreas Gruenbacher; Bootstrap Authors; Brandon Philips <brandon@ifup.org>; Bruno Haible; Bruno Haible <bruno@clisp.org>; Charles Bertsch <CBertsch@microtest.com>; Debian French l10n team Sylvain Archenault , Jean-Philippe MENGUAL; Fran,cois Pinard; Free Software Foundation, Inc.; Free Software Foundation, Inc. Andreas Grunbacher; Free Software Foundation, Inc. Antonio Trueba; Free Software Foundation, Inc. Daniel Nylander; Free Software Foundation, Inc. Jakub Bogusz; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Peter Rosin <peda@lysator.liu.se>; Scott James Remnant; Silicon Graphics, Inc.; Tom Tromey <tromey@cygnus.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; X Consortium; the Free Software Foundation",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/acl-libs/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OaIprLo2w0kLAhRS2Mmr6-UcryCfGtwBc4G4iqjLlAw/acl-~-1.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/acl-libs@2.3.2-r1?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://savannah.nongnu.org/projects/acl",
    "licenseConcluded" : "(LGPL-2.1-or-later AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/acl-libs",
    "versionInfo" : "2.3.2-r1"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-data-3.7.2-r1-arch-x86-64-distro-3.24.3",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-baselayout-data/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3GFYw105nFvs6_xw4ra-sSDX_o6bnoZ1RqoQHni3WO4/alpine-baselayout-~-1.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.alpinelinux.org/alpine/aports/-/tree/master/main/alpine-baselayout",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/alpine-baselayout-data",
    "versionInfo" : "3.7.2-r1"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-3.7.2-r1-arch-x86-64-distro-3.24.3",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-baselayout/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3GFYw105nFvs6_xw4ra-sSDX_o6bnoZ1RqoQHni3WO4/alpine-baselayout-~-1.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.alpinelinux.org/alpine/aports/-/tree/master/main/alpine-baselayout",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/alpine-baselayout",
    "versionInfo" : "3.7.2-r1"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-keys-2.6-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-keys/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k62E2_Mh19-2gVupJa9O2CckOkewgMDpp2HRVuI4zmc/alpine-keys-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://alpinelinux.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/alpine-keys",
    "versionInfo" : "2.6-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-release-3.24.3-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-release/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/alpine-release@3.24.3-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XN-ulzwdHpeG203aYgAEb1OpapvlD9FiIclZDv_8zn8/alpine-base-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://alpinelinux.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/alpine-release",
    "versionInfo" : "3.24.3-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-busybox-binsh-1.37.0-r31-arch-x86-64-distro-3.24.3",
    "copyrightText" : "BusyBox (c) 2007 by Yuichi Nakamura <ynakam@hitachisoft.jp>\nCopyright 2002 Andi Kleen, SuSE Labs\nCopyright 2006 Bernhard Reutner-Fischer\nCopyright 2006 Bernhard Reutner-Fischer <rep.nop@aon.at>\nCopyright 1999 Dave Cinege\nCopyright 2010, Denys Vlasenko\nCopyright 1994-1996 Donald Becker\nCopyright 1999-2003 Donald Becker and Scyld Computing Corporation\nCopyright 2005 Frank Sorenson <frank@tuxrocks.com>\nCopyright 1999 George Staikos\nCopyright 2001 Glenn McGrath\nCopyright 2005 H. Peter Anvin\nCopyright Joern Engel <joern@lazybastard.org>\nCopyright 1989 - 1991, Julianne Frances Haugh <jockgrrl@austin.rr.com>\nCopyright 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>\nCopyright 1997, 2000, 2001 Larry Doolittle <LRDoolittle@lbl.gov>\nCopyright 2002 Laurence Anderson\nCopyright 1996, 1997 Linux International\nCopyright 1996, 1997 Linux International. I've\nCopyright 2004 Matt Mackall <mpm@selenic.com>\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com)\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com) Vladimir Oleynik <dzo@simtreas.ru>\nCopyright 1993 MicroWalt Corporation\nCopyright 1991-1997 Miquel van Smoorenburg\nCopyright 2005 Rob Landley <rob@landley.net>\nCopyright 2006, 2007 Stefan Rompf <sux@loplof.de>\nCopyright 2003 Tito Ragusa <farmatito@tiscali.it>\nCopyright 2004 Tony J. White\nCopyright 1998 by Albert Cahalan\nCopyright 2002 by Kai Germaschewski <kai.germaschewski@gmx.de>\nCopyright 1997,.. by Peter Hanecak <hanecak@megaloman.sk>\nCopyright 2006 by Rob Landley <rob@landley.net>\nCopyright (c) 2000\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2002 AYR Networks, Inc.\nCopyright (c) 2001 Aaron Lehmann <aaronl@vitelus.com>\nCopyright (c) 2002 Al Stone\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2004 Alexander Guy <alexander.guy@andern.org>\nCopyright (c) Andre Masella <andre@masella.no-ip.org>\nCopyright (c) Andreas Neuper\nCopyright (c) 1994-1998 Andries E. Brouwer <aeb@cwi.nl>\nCopyright (c) 1999 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 2000 Arcom Control System Ltd\nCopyright (c) Arne Bernin <arne@matrix.loopback.org>\nCopyright (c) 2006 Aurelien Jacobs <aurel@gnuage.org>\nCopyright (c) 2014 Bartosz Golaszewski <bartekgola@gmail.com>\nCopyright (c) 2003 Bastian Blank <waldi@tuxbox.org>\nCopyright (c) 2003 Bernardo Innocenti <bernie@develer.com>\nCopyright (c) 2008 Bernhard Reutner-Fischer\nCopyright (c) 2008 Bernhard Reutner-Fischer Copyrihgt\nCopyright (c) 2006 Bernhard Reutner-Fischer <busybox@busybox.net>\nCopyright (c) 2010 Bradley M. Kuhn <bkuhn@ebb.org>\nCopyright (c) 1992 Branko Lankester\nCopyright (c) 1996 Brian Candler <B.Candler@pobox.com>\nCopyright (c) 1995 Bruce Perens\nCopyright (c) 2008, BusyBox Team\nCopyright (c) 1994-1996 Charles L. Blake\nCopyright (c) 1998, 1999 Charles P. Wright\nCopyright (c) 2002-2009 Craig\nCopyright (c) 2008 Darius Augulis <augulis.darius@gmail.com>\nCopyright (c) 1998 Dave Cinege\nCopyright (c) 1994 David Burren\nCopyright (c) 1999 David Mosberger-Tang <davidm@hpl.hp.com>\nCopyright (c) 2001 David Schleef <ds@schleef.org>\nCopyright (c) 2006 Denys Vlasenko\nCopyright (c) 2010 Denys Vlasenko Split\nCopyright (c) 2017 Denys Vlasenko <vda.linux@gmail.com>\nCopyright (c) 2007 Denys Vlasenko <vda.linux@googlemail.com>\nCopyright (c) 2000 Edward Betts <edward@debian.org>\nCopyright (c) 2004,2005 Enrik Berkhan <Enrik.Berkhan@inka.de>\nCopyright (c) 1998 Enrique Zanardi <ezanardi@ull.es>\nCopyright (c) 2003 Erik Andersen\nCopyright (c) 2001 Erik Andersen <andersen@codepoet.org>\nCopyright (c) 2001, 2002, 2003, 2004, 2005 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991,92,95,96,97,98,99,2000,01 Free Software Foundation, Inc.\nCopyright (c) 86, 1991-1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 86, 89, 91, 1995-2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 91, 1995-2002 Free Software Foundation, Inc.\nCopyright (c) 2006 Freescale Semiconductor, Inc <stuarth@freescale.com>\nCopyright (c) 1997, 1998, 1999, 2000 Frodo Looijaard <frodol@dds.nl>\nCopyright (c) 2006 Gabriel Somlo\nCopyright (c) 2001-2006, Gerrit Pape\nCopyright (c) 2002,2003 Glenn Engel <glenne@engel.org>\nCopyright (c) 2003 Glenn L. McGrath\nCopyright (c) 2002 Glenn McGrath\nCopyright (c) 1996-1999 Guy Maor <maor@debian.org>\nCopyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>\nCopyright (c) 1997-2005 Herbert Xu <herbert@gondor.apana.org.au>\nCopyright (c) 1999 Hewlett-Packard Co\nCopyright (c) 2001, Hewlett-Packard Company\nCopyright (c) 2001 Hewlett-Packard Laboratories\nCopyright (c) 2013 INSIDE Secure Corporation\nCopyright (c) 1999-2005 Igor Pavlov\nCopyright (c) 2014 Isaac Dunham <ibid.ag@gmail.com>\nCopyright (c) 2000, Jan-Derk Bakker (J.D.Bakker@its.tudelft.nl)\nCopyright (c) 2022 Jason A. Donenfeld <Jason@zx2c4.com>\nCopyright (c) 2000 Jean-Pierre Lefebvre <helix@step.polymtl.ca> and Remi Lefebvre <remi@debian.org>\nCopyright (c) 1992-1993 Jean-loup Gailly\nCopyright (c) 2002 Jeff Angielski, The PTR Group <jeff@theptrgroup.com>\nCopyright (c) 1996 Jeff Noxon <jeff@router.patch.net>\nCopyright (c) 2000-2001 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2006 Jesse Dutton <jessedutton@gmail.com>\nCopyright (c) 2017 Jo-Philipp Wich <jo@mein.io>\nCopyright (c) 1996-2006 Julian Seward <jseward@bzip.org>\nCopyright (c) 2016-2018 Kaarle Ritvanen\nCopyright (c) KaiGai Kohei <kaigai@ak.jp.nec.com>\nCopyright (c) 2006 - 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2010 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 2002 Khalid Aziz\nCopyright (c) 2000,2001 Larry Doolittle <larry@doolittle.boa.org>\nCopyright (c) 2001 Larry Doolittle, <ldoolitt@recycle.lbl.gov>\nCopyright (c) 2010 Lauri Kasanen\nCopyright (c) 2000 Lennert Buytenhek\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 2007 Loic Grenie <loic.grenie@gmail.com>\nCopyright (c) 2001 Magnus Damm <damm@opensource.se>\nCopyright (c) 2009 Maksym Kryzhanovskyy <xmaks@email.cz>\nCopyright (c) 2009 Malek Degachi <malek-degachi@laposte.net>\nCopyright (c) 2001 Manuel Novoa III\nCopyright (c) 2001 Manuel Novoa III <mjn3@codepoet.org>\nCopyright (c) Manuel Novoa III <mjn3@codepoet.org> and Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 2011 Marek Becka <yuen@klacno.sk>\nCopyright (c) 2010 Marek Polacek <mmpolacek@gmail.com>\nCopyright (c) 2002 Mario Strasser <mast@gmx.net> , Zuercher Hochschule Winterthur, Netbeat AG\nCopyright (c) 1996 Markus Franz Xaver Johannes Oberhumer\nCopyright (c) 2017 Markus Gothe <nietzsche@lysator.liu.se>\nCopyright (c) 2000,2001 Matt Kraai\nCopyright (c) 2000,2001 Matt Kraai <kraai@alumni.carnegiemellon.edu>\nCopyright (c) 2001 Matt Krai\nCopyright (c) 1999 Matthew Ramsay <matthewr@moreton.com.au> Chris Trew <ctrew@moreton.com.au>\nCopyright (c) 1992-1998 Michael K. Johnson\nCopyright (c) 2006 Michael Opdenacker <michael@free-electrons.com>\nCopyright (c) 2008 Michele Sanges <michele.sanges@gmail.com>\nCopyright (c) Michiel Huisjes\nCopyright (c) 2008 Natanael Copa <natanael.copa@gmail.com>\nCopyright (c) 2004 Nicholas Miell\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2020 Norbert Lange <nolange79@gmail.com>\nCopyright (c) 2008 Nuovation System Designs, LLC\nCopyright (c) 2005 Odd Arild Olsen (oao at fibula dot no)\nCopyright (c) 2008 Pascal Bellard\nCopyright (c) 2003 Paul Mundt <lethal@linux-sh.org>\nCopyright (c) 2003 Paul Sheer\nCopyright (c) PeerSec Networks, 2002-2011\nCopyright (c) 2011 Pere Orga <gotrunks@gmail.com>\nCopyright (c) 2004 Peter Willis <psyphreak@phreaker.net>\nCopyright (c) 1987,1997, Prentice Hall\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 2002 Randy Dunlap\nCopyright (c) 1987, 1988 Regents of the University of California\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1993, 1994 Remy Card <card@masi.ibp.fr> Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 1997-1999 Richard Gooch\nCopyright (c) 1993 Rick Sladkey <jrs@world.std.com>\nCopyright (c) 2006 Rob Landley\nCopyright (c) 2005, 2006 Rob Landley <rob@landley.net>\nCopyright (c) 2002 Robert Griebl <griebl@gmx.de>\nCopyright (c) 2005 Roberto A. Foglietta\nCopyright (c) 2005-6, Roberto A. Foglietta\nCopyright (c) 1992 Roger Binns\nCopyright (c) 2022 Roger Knecht <rknecht@pm.me>\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2002-2003 Romain Lievin <roms@tilp.info>\nCopyright (c) 2002-2005 Roman Zippel <zippel@linux-m68k.org>\nCopyright (c) 2003 Russ Dill <Russ.Dill@asu.edu>\nCopyright (c) 2012 S-G Bergh <sgb@systemasis.org>\nCopyright (c) 2002-2005 Sam Ravnborg <sam@ravnborg.org>\nCopyright (c) 2010 Sergey Naumov <sknaumov@gmail.com>\nCopyright (c) 2000, 2001 Sterling Huxley <sterling@europa.com>\nCopyright (c) 2002 Steven J. Hill <shill@broadcom.com>\nCopyright (c) 2001 Stuart Hughes <seh@zee2.com>\nCopyright (c) 2018 Sven-Goran Bergh <sgb@systemaxion.se>\nCopyright (c) 1980 The Regents of the University of California\nCopyright (c) 1999, 2000 The ht://Dig Group\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 2008 Timo Teras <timo.teras@iki.fi>\nCopyright (c) 2005 Tito Ragusa <farmatito@tiscali.it>\nCopyright (c) 2005 Tobias Klauser <tklauser@access.unizh.ch>\nCopyright (c) 2003 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) University of Delaware 1992-2009\nCopyright (c) 1999 Uwe Ohse <uwe@ohse.de>\nCopyright (c) 2008 Vladimir Dronnikov\nCopyright (c) 2009 Vladimir Dronnikov <dronnikov@gmail.com>\nCopyright (c) Vladimir N. Oleynik <dzo@simtreas.ru>\nCopyright (c) 2005 Vladimir Oleynik\nCopyright (c) 2001,2002 Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 2005 W. Michael Petullo <mike@flyn.org>\nCopyright (c) 1993-2002 Werner Almesberger\nCopyright (c) 2003 Yang Xiaopeng\nCopyright (c) 2015 by Ari Sundholm <ari@tuxera.com>\nCopyright (c) 2015 by Ari Sundholm <ari@tuxera.com> and Tuxera Inc.\nCopyright (c) 2003 by Arthur van Hoff (avh@strangeberry.com)\nCopyright (c) 2002 by Bart Visscher <magick@linux-fan.com>\nCopyright (c) 2014 by Bartosz Golaszewski <bartekgola@gmail.com>\nCopyright (c) 2008 by Bernhard Reutner-Fischer\nCopyright (c) 1995, 1996 by Bruce Perens <bruce@pixar.com>\nCopyright (c) 2009 by Dan Fandrich <dan@coneharvesters.com>\nCopyright (c) 2000 by Daniel Jacobowitz\nCopyright (c) 2004 by David Brownell\nCopyright (c) 1999 by David I. Bell\nCopyright (c) 2008 by Denys Vlasenko <vda.linux@gmail.com>\nCopyright (c) 2007 by Denys Vlasenko <vda.linux@googlemail.com>\nCopyright (c) 2002 by Dmitry Zakharov <dmit@crp.bank.gov.ua>\nCopyright (c) 2004 by Ed Clark\nCopyright (c) 2001 by Emanuele Aina <emanuele.aina@tiscali.it>\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org>\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org> Adjusted\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org> Fix\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org> and Ron Alder <alder@lineo.com>\nCopyright (c) 2014 by Fugro Intersite B.V. <m.stam@fugro.nl>\nCopyright (c) 2000 by Gennady Feldman <gfeldman@gena01.com>\nCopyright (c) 2001 by Gennady Feldman <gfeldman@gena01.com> Changes Made\nCopyright (c) 2000 by Glenn McGrath\nCopyright (c) 2010 by Grigory Batalov <bga@altlinux.org>\nCopyright (c) 2006 by Jan Kiszka <jan.kiszka@web.de>\nCopyright (c) 2006 by Jason Schoon <floydpink@gmail.com>\nCopyright (c) 1999,2000,2001 by John Beppu <beppu@codepoet.org>\nCopyright (c) 2007 by KaiGai Kohei <kaigai@kaigai.gr.jp>\nCopyright (c) 2000 by Karl M. Hegbloom <karlheg@debian.org>\nCopyright (c) 2001 by Laurence Anderson\nCopyright (c) 1999,2000,2001 by Lineo, inc.\nCopyright (c) 1999 by Lineo, inc. and John Beppu\nCopyright (c) 1999,2000,2001 by Lineo, inc. and Mark Whitley\nCopyright (c) 2023 by LoveSy <lovesykun@gmail.com>\nCopyright (c) 2005 by Marc Leeman <marc.leeman@barco.com>\nCopyright (c) 1999,2000,2001 by Mark Whitley <markw@codepoet.org>\nCopyright (c) 2010 by Matheus Izvekov <mizvekov@gmail.com>\nCopyright (c) 2000 by Matt Kraai <kraai@alumni.carnegiemellon.edu>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it> Hacked\nCopyright (c) 2001 by Michael Habermann <mhabermann@gmx.de> Copyrigjt (c)\nCopyright (c) 2005 by Mike Frysinger <vapier@gentoo.org>\nCopyright (c) 2008 by Patricia Muscalu <patricia.muscalu@axis.com>\nCopyright (c) 1999 by Randolph Chung <tausq@debian.org>\nCopyright (c) 2003,2004 by Rob Landley <rob@landley.net>\nCopyright (c) 2003 by Rob Landley <rob@landley.net> , Joey Hess\nCopyright (c) 2006 by Rob Sullivan\nCopyright (c) 2005 by Rob Sullivan <cogito.ergo.cogito@gmail.com>\nCopyright (c) 2005 by Robert Sullivan <cogito.ergo.cogito@gmail.com>\nCopyright (c) 2006 by Robert Sullivan <cogito.ergo.cogito@hotmail.com>\nCopyright (c) 2007 by Stephane Billiart <stephane.billiart@gmail.com>\nCopyright (c) 2012 by Sven Oliver SvOlli Moll <svolli@svolli.de>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 2008 by Timo Teras <timo.teras@iki.fi>\nCopyright (c) 2003 by Tito Ragusa <farmatito@tiscali.it>\nCopyright (c) 2005 by Tito Ragusa <tito-wolit@tiscali.it>\nCopyright (c) 1994-2000 by Tomi Ollila\nCopyright (c) 2008 by Vladimir Dronnikov <dronnikov@gmail.com>\nCopyright (c) 2002 by Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 2021 by YU Jincheng <shana@zju.edu.cn>\nCopyright (c) 2006 by Yoshinori Sato <ysato@users.sourceforge.jp>\nCopyright (c) 2017 by <assafgordon@gmail.com>\nCopyright (c) 2000 by spoon <spoon@ix.netcom.com>\nCopyright (c) 2008 by <u173034@informatik.uni-oldenburg.de>\nCopyright (c) (c) 2003 Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 1986-2003 may safely be consumed\nCopyright (c) 2006-2015 wolfSSL Inc.\nDenys Vlasenko (c) 2008\nMark Lord (c) 1994-2002\nPaul Mundt <lethal@linux-sh.org> (c) 2004\nPortions copyright (c) 1990-1996 Free Software Foundation, Inc.\nTito Ragusa (c) 2004\nVladimir Oleynik <dzo@simtreas.ru> 2001\nVladimir Oleynik <dzo@simtreas.ru> (c) 2001-2005\n(c) 2002\n(c) Copyright 2000, Axis Communications AB\n(c) Eero Tamminen\n(c) 1995 Erik Andersen <andersen@codepoet.org>\n(c) 2007 Gabriel Somlo\n(c) 2018 Gavin D. Howard and contributors\n(c) 2002 Glenn McGrath\n(c) 2007 Hiroshi Shinji <shiroshi@my.email.ne.jp>\n(c) 2006 Jac Goudsmit\n(c) Lauri Kasanen\n(c) 1991 Linus Torvalds\n(c) 2005 Martin Cracauer cracauer @ cons.org http://www.cons.org/cracauer/ http://www.cons.org/cracauer\n(c) 2002 Robert Griebl\n(c) 2009 Stefan Seyfried <seife@sphairon.com>\n(c) 2008 Timo Teras <timo.teras@iki.fi>\n(c) Vladimir Oleynik <dzo@simtreas.ru>\n(c) 2007 Yuichi Nakamura <ynakam@hitachisoft.jp>\n(c) 1997 by Andi Kleen\n(c) 1995-1999 by Geert Uytterhoeven (Geert.Uytterhoeven@cs.kuleuven.ac.be)\n(c) 2007 by Tito Ragusa <farmatito@tiscali.it>\n(c) 2002,2003 by Vladimir Oleynik <dzo@simtreas.ru>\n(c) 2007 by Yuichi Nakamura <ynakam@hitachisoft.jp>\n(c) by a whole\n(c) 2003 - correct\n(c) 2001-2005 <dzo@simtreas.ru>\n(c) $?i (c) Y\ncopyright (c) 2018 Gavin D. Howard and contributors\ncopyright (c) 1995 Ian Jackson <ian@chiark.greenend.org.uk>\ncopyright (c) 1996-2006 Julian R Seward\ncopyright (c) 2002 Romain Lievin <roms@lpg.ticalc.org>\ncopyright (c) 1997 by Vernon Hoxie\ncopyright (c) 2001 by glenn\ncopyrighted by many authors\ncopyrighted by the Free Software Foundation\n(c) 2009 <vonsch@gmail.com>\n\nAuthors: $?i Y; <assafgordon@gmail.com>; <dzo@simtreas.ru>; <solar@gentoo.org>; <u173034@informatik.uni-oldenburg.de>; <vonsch@gmail.com>; A. V. Le Blanc; AT&T; AYR Networks, Inc.; Aaron Lehmann; Adam Tkac; Adam Tkac <vonsch@gmail.com>; Al Stone; Albert Cahalan; Alessandro Rubini; Alexander Guy; Alexander Shishkin; Alexander Shishkin <virtuoso@slind.org>; Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>; Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>; Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> Patrick McHardy <kaber@trash.net>; Andi Kleen; Andi Kleen, SuSE Labs; Andre Masella; Andreas Neuper; Andreas Schwab; Andries E. Brouwer; Anthony Towns; Arcom Control System Ltd; Ari Sundholm; Ari Sundholm and Tuxera Inc.; Arkadiusz Mickiewicz <misiek@misiek.eu.org>; Arnd Bergmann <arnd@bergmann-dalldorf.de>; Arne Bernin; Arnold Robbins; Arthur van Hoff; Aurelien Jacobs; Axis Communications AB; Bart Visscher; Bart Visscher <magick@linux-fan.com>; Bartosz Golaszewski; Baruch Siach <baruch@tkos.co.il> , Orex Computed Radiography; Bastian Blank; Ben Zeckel <bzeckel@hmc.edu>; Bernardo Innocenti; Bernhard Reutner-Fischer; Bernhard Reutner-Fischer Copyrihgt; Bjorn Ekwall <bj0rn@blox.se>; Bradley M. Kuhn; Branko Lankester; Breno Leitao <leitao@debian.org>; Brian Candler; Bruce Perens; Bryan Rittmeyer <bryan@ixiacom.com>; BusyBox Team; BusyBox by Yuichi Nakamura; Charles L. Blake; Charles P. Wright; Charles P. Wright <cpw@unix.asb.com>; Chip Rosenthal Covad Communications <chip@laserlink.net>; Christopher Hoover <ch@hpl.hp.com>; Clifford Wolf (god@clifford.at); Craig; Dan Fandrich; Daniel Jacobowitz; Daniel Jacobowitz <dan@debian.org>; Darius Augulis; Dave Cinege; David Brownell; David Burren; David Burren <davidb@werj.com.au>; David I. Bell; David Keppel <pardo@cs.washington.edu>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie, djm@gnu.ai.mit.edu; David Mosberger-Tang; David Schleef; David Schleef <ds@schleef.org>; Denys Vlasenko; Denys Vlasenko <vda.linux@googlemail.com>; Denys Vlasenko Split; Dmitry Zakharov; Donald Becker; Donald Becker <becker@cesdis.gsfc.nasa.gov>; Donald Becker and Scyld Computing Corporation; Donald Becker, http://www.scyld.com/ http://www.scyld.com/wakeonlan.html; Ed Clark; Edward Betts; Eero Tamminen; Emanuele Aina; Emanuele Caratti <wiz@iol.it>; Enrik Berkhan; Enrique Zanardi; Eric Gisin; Eric Rasmussen <ear@usfirst.org>; Erik Andersen; Erik Andersen <andersee@debian.org>; Erik Andersen <andersen@codepoet.org>; Erik Andersen <andersen@debian.org>; Erik Andersen <andersen@uclibc.org>; Erik Andersen Adjusted; Erik Andersen Fix; Erik Andersen and Kent Robotti <robotti@metconnect.com>; Erik Andersen and Ron Alder; Erik Baalbergen; Fernando Silveira <swrh@gmx.net>; Frank Sorenson; Fred N. van Kempen; Fred N. van Kempen, <waltje@uwalt.nl.mugnet.org> and others; Free Software Foundation; Free Software Foundation, Inc.; Freescale Semiconductor, Inc; Frodo Looijaard; Fugro Intersite B.V.; G. Somlo <somlo@cmu.edu>; Gabriel Somlo; Gavin D. Howard and contributors; Geert Uytterhoeven; Gennady Feldman; Gennady Feldman Changes Made; George Staikos; Gerrit Pape; Gerrit Pape <pape@smarden.org>; Glenn Engel; Glenn L. McGrath; Glenn McGrath; Grigory Batalov; Guy Maor; H. Peter Anvin; H. Peter Anvin I've; Henning Brauer; Herbert Xu; Hewlett-Packard Co; Hewlett-Packard Company; Hewlett-Packard Laboratories; Hiroshi Shinji; INSIDE Secure Corporation; Ian Jackson; Ignacio Garcia Perez (iggarpe at gmail dot com); Igor Pavlov; Isaac Dunham; J.T. Conklin; Jac Goudsmit; Jan Kiszka; Jan-Derk Bakker; Jason A. Donenfeld; Jason Schoon; Jean-Pierre Lefebvre and Remi Lefebvre; Jean-loup Gailly; Jeff Angielski, The PTR Group; Jeff Noxon; Jeff Tranter; Jesse Dutton; Jim McQuillan <jam@ltsp.org>; Jim Meyering. Busyboxed; Jo-Philipp Wich; Jody Bruchon (jody@jodybruchon.com); Joern Engel; John Beppu; Juan Quintela <quintela@mandrakesoft.com>; Julian R Seward; Julian R Seward (jseward@acm.org); Julian Seward; Julian Seward <jseward@bzip.org>; Julianne Frances Haugh; Kaarle Ritvanen; Kai Germaschewski; KaiGai Kohei; Karl M. Hegbloom; Kay Sievers; Kayvan Aghaiepour and David MacKenzie; Kevin Cernekee; Khalid Aziz; Larry Doolittle; Larry Doolittle <LRDoolittle@lbl.gov>; Lasse Collin <lasse.collin@tukaani.org>; Lasse Collin <lasse.collin@tukaani.org> Igor Pavlov <http://7-zip.org/>; Laurence Anderson; Lauri Kasanen; Lennert Buytenhek; Leonid Lisovskiy <lly@sf.net>; Lineo, inc.; Lineo, inc. and John Beppu; Lineo, inc. and Mark Whitley; Linus Torvalds; Linux International; Linux International. I've; Loic Grenie; LoveSy; Magnus Damm; Maintainer Gennady Feldman <gfeldman@gena01.com>; Maksym Kryzhanovskyy; Malek Degachi; Manuel Novoa III; Manuel Novoa III (mjn3@codepoet.org); Manuel Novoa III and Vladimir Oleynik; Marc Leeman; Marek Becka; Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>; Marek Polacek; Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG; Mark Adler <madler@alumni.caltech.edu>; Mark Lord; Mark Whitley; Mark Whitley <markw@codepoet.org>; Markus Franz Xaver Johannes Oberhumer; Markus Gothe; Martin Cracauer cracauer @ cons.org; Martin Habets <errandir_news@mph.eclipse.co.uk>; Matheus Izvekov; Matt Kraai; Matt Krai; Matt Mackall; Matt Mackall <mpm@selenic.com>; Matteo Croce; Matteo Croce Hacked; Matthew Dillon; Matthew Dillon Vladimir Oleynik; Matthew Ramsay Chris Trew; Maxime Coste <mawww@kakoune.org>; Michael Habermann Copyrigjt; Michael K. Johnson; Michael Meskes; Michael Opdenacker; Michele Sanges; Michiel Huisjes; MicroWalt Corporation; Mike Frysinger; Miquel van Smoorenburg; Mrs. Brisby <mrs.brisby@nimh.org>; Natanael Copa; Nicholas Miell; Nico Erfurth <masta@perlgolf.de>; Nokia Corporation; Norbert Lange; Nuovation System Designs, LLC; Odd Arild Olsen (oao at fibula dot no); Pascal Bellard; Pascal Bellard <pascal.bellard@ads-lu.com>; Patricia Muscalu; Paul Fox <pgf@foxharp.boston.ma.us>; Paul Mackerras; Paul Mundt; Paul Sheer; Pedro Roque <roque@di.fc.ul.pt>; PeerSec Networks; Pere Orga; Pere Orga <gotrunks@gmail.com>; Peter Hanecak; Peter Orbaek <poe@daimi.aau.dk>; Peter Willis; Prentice Hall; Quy Tonthat <quy@signal3.com>; RSA Data Security, Inc.; Ralf Baechle <ralf@gnu.ai.mit.edu>; Randolph Chung; Randy Dunlap; Regents of the University of California; Remy Card Laboratoire MASI - Institut Blaise Pascal; Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris; Rewritten by Vladimir Oleynik; Richard Gooch; Richard Henderson <rth@tamu.edu>; Richard Stallman; Rick Sladkey; Rob Landley; Rob Landley (rob@landley.net); Rob Landley , Joey Hess; Rob Sullivan; Robert Griebl; Robert Griebl <griebl@gmx.de>; Robert Sullivan; Roberto A. Foglietta; Roger Binns; Roger Knecht; Rolf Fokkens; Romain Lievin; Roman Zippel; Russ Dill; Russ Dill <Russ.Dill@asu.edu>; S-G Bergh; Sam Ravnborg; Savio Lam (lam836@cs.cuhk.hk); Sergey Naumov; Spencer Thomas, Joe Orost, James Woods, Jim McKie, Steve Davies, Ken Turkowski, Dave Mack and Peter Jannesen; Spencer W. Thomas; Stefan Rompf; Stefan Seyfried; Stephane Billiart; Sterling Huxley; Sterling Huxley <sterling@europa.com>; Steve Reid <steve@edmweb.com>; Steven J. Hill; Stuart Herbert (S.Herbert@shef.ac.uk); Stuart Hughes; Sven Oliver SvOlli Moll; Sven Rudolph <sr1@inf.tu-dresden.de>; Sven-Goran Bergh; The Regents of the University of California; The ht://Dig Group; Theodore Ts'o; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Thomas Lundquist <thomasez@zelow.no>; Tim Riker <Tim@Rikers.org>; Timo Teras; Tito Ragusa; Tito Ragusa <farmatito@tiscali.it>; Tobias Klauser; Todd C. Miller; Tomi Ollila; Tomi Ollila <too@iki.fi>; Tony J. White; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Ulrich Drepper <drepper@redhat.com>; University of Delaware; Uwe Ohse; Vernon Hoxie; Vladimir Dronnikov; Vladimir Dronnikov <dronnikov@gmail.com>; Vladimir N. Oleynik; Vladimir N. Oleynik <dzo@simtreas.ru>; Vladimir Oleynik; Vladimir Oleynik <dzo@simtreas.ru>; W. Michael Petullo; Werner Almesberger; William Roadcap (roadcap@cfw.com); William Roadcap (roadcapw@cfw.com); YU Jincheng; Yang Xiaopeng; Yoichi Hariguchi <yoichi@fore.com>; Yoshinori Sato; Yuichi Nakamura; Yuichi Nakamura <ynakam@hitachisoft.jp>; content Ken A; correct; dhankins@isc.org; glenn; hobbit@avian.org; hush. Also; many authors; may safely be consumed; spoon; the Free Software Foundation; the University of California, Berkeley and its contributors; the University of California, Lawrence Berkeley Laboratory and its contributors; whole; wolfSSL Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/busybox-binsh/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ko8xE5DZM1kDUAjpM4G3i5fCh5lMLq8mJUKuDakit9k/busybox-~-31.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://busybox.net/",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/busybox-binsh",
    "versionInfo" : "1.37.0-r31"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-busybox-1.37.0-r31-arch-x86-64-distro-3.24.3",
    "copyrightText" : "BusyBox (c) 2007 by Yuichi Nakamura <ynakam@hitachisoft.jp>\nCopyright 2002 Andi Kleen, SuSE Labs\nCopyright 2006 Bernhard Reutner-Fischer\nCopyright 2006 Bernhard Reutner-Fischer <rep.nop@aon.at>\nCopyright 1999 Dave Cinege\nCopyright 2010, Denys Vlasenko\nCopyright 1994-1996 Donald Becker\nCopyright 1999-2003 Donald Becker and Scyld Computing Corporation\nCopyright 2005 Frank Sorenson <frank@tuxrocks.com>\nCopyright 1999 George Staikos\nCopyright 2001 Glenn McGrath\nCopyright 2005 H. Peter Anvin\nCopyright Joern Engel <joern@lazybastard.org>\nCopyright 1989 - 1991, Julianne Frances Haugh <jockgrrl@austin.rr.com>\nCopyright 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>\nCopyright 1997, 2000, 2001 Larry Doolittle <LRDoolittle@lbl.gov>\nCopyright 2002 Laurence Anderson\nCopyright 1996, 1997 Linux International\nCopyright 1996, 1997 Linux International. I've\nCopyright 2004 Matt Mackall <mpm@selenic.com>\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com)\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com) Vladimir Oleynik <dzo@simtreas.ru>\nCopyright 1993 MicroWalt Corporation\nCopyright 1991-1997 Miquel van Smoorenburg\nCopyright 2005 Rob Landley <rob@landley.net>\nCopyright 2006, 2007 Stefan Rompf <sux@loplof.de>\nCopyright 2003 Tito Ragusa <farmatito@tiscali.it>\nCopyright 2004 Tony J. White\nCopyright 1998 by Albert Cahalan\nCopyright 2002 by Kai Germaschewski <kai.germaschewski@gmx.de>\nCopyright 1997,.. by Peter Hanecak <hanecak@megaloman.sk>\nCopyright 2006 by Rob Landley <rob@landley.net>\nCopyright (c) 2000\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2002 AYR Networks, Inc.\nCopyright (c) 2001 Aaron Lehmann <aaronl@vitelus.com>\nCopyright (c) 2002 Al Stone\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2004 Alexander Guy <alexander.guy@andern.org>\nCopyright (c) Andre Masella <andre@masella.no-ip.org>\nCopyright (c) Andreas Neuper\nCopyright (c) 1994-1998 Andries E. Brouwer <aeb@cwi.nl>\nCopyright (c) 1999 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 2000 Arcom Control System Ltd\nCopyright (c) Arne Bernin <arne@matrix.loopback.org>\nCopyright (c) 2006 Aurelien Jacobs <aurel@gnuage.org>\nCopyright (c) 2014 Bartosz Golaszewski <bartekgola@gmail.com>\nCopyright (c) 2003 Bastian Blank <waldi@tuxbox.org>\nCopyright (c) 2003 Bernardo Innocenti <bernie@develer.com>\nCopyright (c) 2008 Bernhard Reutner-Fischer\nCopyright (c) 2008 Bernhard Reutner-Fischer Copyrihgt\nCopyright (c) 2006 Bernhard Reutner-Fischer <busybox@busybox.net>\nCopyright (c) 2010 Bradley M. Kuhn <bkuhn@ebb.org>\nCopyright (c) 1992 Branko Lankester\nCopyright (c) 1996 Brian Candler <B.Candler@pobox.com>\nCopyright (c) 1995 Bruce Perens\nCopyright (c) 2008, BusyBox Team\nCopyright (c) 1994-1996 Charles L. Blake\nCopyright (c) 1998, 1999 Charles P. Wright\nCopyright (c) 2002-2009 Craig\nCopyright (c) 2008 Darius Augulis <augulis.darius@gmail.com>\nCopyright (c) 1998 Dave Cinege\nCopyright (c) 1994 David Burren\nCopyright (c) 1999 David Mosberger-Tang <davidm@hpl.hp.com>\nCopyright (c) 2001 David Schleef <ds@schleef.org>\nCopyright (c) 2006 Denys Vlasenko\nCopyright (c) 2010 Denys Vlasenko Split\nCopyright (c) 2017 Denys Vlasenko <vda.linux@gmail.com>\nCopyright (c) 2007 Denys Vlasenko <vda.linux@googlemail.com>\nCopyright (c) 2000 Edward Betts <edward@debian.org>\nCopyright (c) 2004,2005 Enrik Berkhan <Enrik.Berkhan@inka.de>\nCopyright (c) 1998 Enrique Zanardi <ezanardi@ull.es>\nCopyright (c) 2003 Erik Andersen\nCopyright (c) 2001 Erik Andersen <andersen@codepoet.org>\nCopyright (c) 2001, 2002, 2003, 2004, 2005 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991,92,95,96,97,98,99,2000,01 Free Software Foundation, Inc.\nCopyright (c) 86, 1991-1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 86, 89, 91, 1995-2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 91, 1995-2002 Free Software Foundation, Inc.\nCopyright (c) 2006 Freescale Semiconductor, Inc <stuarth@freescale.com>\nCopyright (c) 1997, 1998, 1999, 2000 Frodo Looijaard <frodol@dds.nl>\nCopyright (c) 2006 Gabriel Somlo\nCopyright (c) 2001-2006, Gerrit Pape\nCopyright (c) 2002,2003 Glenn Engel <glenne@engel.org>\nCopyright (c) 2003 Glenn L. McGrath\nCopyright (c) 2002 Glenn McGrath\nCopyright (c) 1996-1999 Guy Maor <maor@debian.org>\nCopyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>\nCopyright (c) 1997-2005 Herbert Xu <herbert@gondor.apana.org.au>\nCopyright (c) 1999 Hewlett-Packard Co\nCopyright (c) 2001, Hewlett-Packard Company\nCopyright (c) 2001 Hewlett-Packard Laboratories\nCopyright (c) 2013 INSIDE Secure Corporation\nCopyright (c) 1999-2005 Igor Pavlov\nCopyright (c) 2014 Isaac Dunham <ibid.ag@gmail.com>\nCopyright (c) 2000, Jan-Derk Bakker (J.D.Bakker@its.tudelft.nl)\nCopyright (c) 2022 Jason A. Donenfeld <Jason@zx2c4.com>\nCopyright (c) 2000 Jean-Pierre Lefebvre <helix@step.polymtl.ca> and Remi Lefebvre <remi@debian.org>\nCopyright (c) 1992-1993 Jean-loup Gailly\nCopyright (c) 2002 Jeff Angielski, The PTR Group <jeff@theptrgroup.com>\nCopyright (c) 1996 Jeff Noxon <jeff@router.patch.net>\nCopyright (c) 2000-2001 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2006 Jesse Dutton <jessedutton@gmail.com>\nCopyright (c) 2017 Jo-Philipp Wich <jo@mein.io>\nCopyright (c) 1996-2006 Julian Seward <jseward@bzip.org>\nCopyright (c) 2016-2018 Kaarle Ritvanen\nCopyright (c) KaiGai Kohei <kaigai@ak.jp.nec.com>\nCopyright (c) 2006 - 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2010 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 2002 Khalid Aziz\nCopyright (c) 2000,2001 Larry Doolittle <larry@doolittle.boa.org>\nCopyright (c) 2001 Larry Doolittle, <ldoolitt@recycle.lbl.gov>\nCopyright (c) 2010 Lauri Kasanen\nCopyright (c) 2000 Lennert Buytenhek\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 2007 Loic Grenie <loic.grenie@gmail.com>\nCopyright (c) 2001 Magnus Damm <damm@opensource.se>\nCopyright (c) 2009 Maksym Kryzhanovskyy <xmaks@email.cz>\nCopyright (c) 2009 Malek Degachi <malek-degachi@laposte.net>\nCopyright (c) 2001 Manuel Novoa III\nCopyright (c) 2001 Manuel Novoa III <mjn3@codepoet.org>\nCopyright (c) Manuel Novoa III <mjn3@codepoet.org> and Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 2011 Marek Becka <yuen@klacno.sk>\nCopyright (c) 2010 Marek Polacek <mmpolacek@gmail.com>\nCopyright (c) 2002 Mario Strasser <mast@gmx.net> , Zuercher Hochschule Winterthur, Netbeat AG\nCopyright (c) 1996 Markus Franz Xaver Johannes Oberhumer\nCopyright (c) 2017 Markus Gothe <nietzsche@lysator.liu.se>\nCopyright (c) 2000,2001 Matt Kraai\nCopyright (c) 2000,2001 Matt Kraai <kraai@alumni.carnegiemellon.edu>\nCopyright (c) 2001 Matt Krai\nCopyright (c) 1999 Matthew Ramsay <matthewr@moreton.com.au> Chris Trew <ctrew@moreton.com.au>\nCopyright (c) 1992-1998 Michael K. Johnson\nCopyright (c) 2006 Michael Opdenacker <michael@free-electrons.com>\nCopyright (c) 2008 Michele Sanges <michele.sanges@gmail.com>\nCopyright (c) Michiel Huisjes\nCopyright (c) 2008 Natanael Copa <natanael.copa@gmail.com>\nCopyright (c) 2004 Nicholas Miell\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2020 Norbert Lange <nolange79@gmail.com>\nCopyright (c) 2008 Nuovation System Designs, LLC\nCopyright (c) 2005 Odd Arild Olsen (oao at fibula dot no)\nCopyright (c) 2008 Pascal Bellard\nCopyright (c) 2003 Paul Mundt <lethal@linux-sh.org>\nCopyright (c) 2003 Paul Sheer\nCopyright (c) PeerSec Networks, 2002-2011\nCopyright (c) 2011 Pere Orga <gotrunks@gmail.com>\nCopyright (c) 2004 Peter Willis <psyphreak@phreaker.net>\nCopyright (c) 1987,1997, Prentice Hall\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 2002 Randy Dunlap\nCopyright (c) 1987, 1988 Regents of the University of California\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1993, 1994 Remy Card <card@masi.ibp.fr> Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 1997-1999 Richard Gooch\nCopyright (c) 1993 Rick Sladkey <jrs@world.std.com>\nCopyright (c) 2006 Rob Landley\nCopyright (c) 2005, 2006 Rob Landley <rob@landley.net>\nCopyright (c) 2002 Robert Griebl <griebl@gmx.de>\nCopyright (c) 2005 Roberto A. Foglietta\nCopyright (c) 2005-6, Roberto A. Foglietta\nCopyright (c) 1992 Roger Binns\nCopyright (c) 2022 Roger Knecht <rknecht@pm.me>\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2002-2003 Romain Lievin <roms@tilp.info>\nCopyright (c) 2002-2005 Roman Zippel <zippel@linux-m68k.org>\nCopyright (c) 2003 Russ Dill <Russ.Dill@asu.edu>\nCopyright (c) 2012 S-G Bergh <sgb@systemasis.org>\nCopyright (c) 2002-2005 Sam Ravnborg <sam@ravnborg.org>\nCopyright (c) 2010 Sergey Naumov <sknaumov@gmail.com>\nCopyright (c) 2000, 2001 Sterling Huxley <sterling@europa.com>\nCopyright (c) 2002 Steven J. Hill <shill@broadcom.com>\nCopyright (c) 2001 Stuart Hughes <seh@zee2.com>\nCopyright (c) 2018 Sven-Goran Bergh <sgb@systemaxion.se>\nCopyright (c) 1980 The Regents of the University of California\nCopyright (c) 1999, 2000 The ht://Dig Group\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 2008 Timo Teras <timo.teras@iki.fi>\nCopyright (c) 2005 Tito Ragusa <farmatito@tiscali.it>\nCopyright (c) 2005 Tobias Klauser <tklauser@access.unizh.ch>\nCopyright (c) 2003 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) University of Delaware 1992-2009\nCopyright (c) 1999 Uwe Ohse <uwe@ohse.de>\nCopyright (c) 2008 Vladimir Dronnikov\nCopyright (c) 2009 Vladimir Dronnikov <dronnikov@gmail.com>\nCopyright (c) Vladimir N. Oleynik <dzo@simtreas.ru>\nCopyright (c) 2005 Vladimir Oleynik\nCopyright (c) 2001,2002 Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 2005 W. Michael Petullo <mike@flyn.org>\nCopyright (c) 1993-2002 Werner Almesberger\nCopyright (c) 2003 Yang Xiaopeng\nCopyright (c) 2015 by Ari Sundholm <ari@tuxera.com>\nCopyright (c) 2015 by Ari Sundholm <ari@tuxera.com> and Tuxera Inc.\nCopyright (c) 2003 by Arthur van Hoff (avh@strangeberry.com)\nCopyright (c) 2002 by Bart Visscher <magick@linux-fan.com>\nCopyright (c) 2014 by Bartosz Golaszewski <bartekgola@gmail.com>\nCopyright (c) 2008 by Bernhard Reutner-Fischer\nCopyright (c) 1995, 1996 by Bruce Perens <bruce@pixar.com>\nCopyright (c) 2009 by Dan Fandrich <dan@coneharvesters.com>\nCopyright (c) 2000 by Daniel Jacobowitz\nCopyright (c) 2004 by David Brownell\nCopyright (c) 1999 by David I. Bell\nCopyright (c) 2008 by Denys Vlasenko <vda.linux@gmail.com>\nCopyright (c) 2007 by Denys Vlasenko <vda.linux@googlemail.com>\nCopyright (c) 2002 by Dmitry Zakharov <dmit@crp.bank.gov.ua>\nCopyright (c) 2004 by Ed Clark\nCopyright (c) 2001 by Emanuele Aina <emanuele.aina@tiscali.it>\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org>\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org> Adjusted\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org> Fix\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org> and Ron Alder <alder@lineo.com>\nCopyright (c) 2014 by Fugro Intersite B.V. <m.stam@fugro.nl>\nCopyright (c) 2000 by Gennady Feldman <gfeldman@gena01.com>\nCopyright (c) 2001 by Gennady Feldman <gfeldman@gena01.com> Changes Made\nCopyright (c) 2000 by Glenn McGrath\nCopyright (c) 2010 by Grigory Batalov <bga@altlinux.org>\nCopyright (c) 2006 by Jan Kiszka <jan.kiszka@web.de>\nCopyright (c) 2006 by Jason Schoon <floydpink@gmail.com>\nCopyright (c) 1999,2000,2001 by John Beppu <beppu@codepoet.org>\nCopyright (c) 2007 by KaiGai Kohei <kaigai@kaigai.gr.jp>\nCopyright (c) 2000 by Karl M. Hegbloom <karlheg@debian.org>\nCopyright (c) 2001 by Laurence Anderson\nCopyright (c) 1999,2000,2001 by Lineo, inc.\nCopyright (c) 1999 by Lineo, inc. and John Beppu\nCopyright (c) 1999,2000,2001 by Lineo, inc. and Mark Whitley\nCopyright (c) 2023 by LoveSy <lovesykun@gmail.com>\nCopyright (c) 2005 by Marc Leeman <marc.leeman@barco.com>\nCopyright (c) 1999,2000,2001 by Mark Whitley <markw@codepoet.org>\nCopyright (c) 2010 by Matheus Izvekov <mizvekov@gmail.com>\nCopyright (c) 2000 by Matt Kraai <kraai@alumni.carnegiemellon.edu>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it> Hacked\nCopyright (c) 2001 by Michael Habermann <mhabermann@gmx.de> Copyrigjt (c)\nCopyright (c) 2005 by Mike Frysinger <vapier@gentoo.org>\nCopyright (c) 2008 by Patricia Muscalu <patricia.muscalu@axis.com>\nCopyright (c) 1999 by Randolph Chung <tausq@debian.org>\nCopyright (c) 2003,2004 by Rob Landley <rob@landley.net>\nCopyright (c) 2003 by Rob Landley <rob@landley.net> , Joey Hess\nCopyright (c) 2006 by Rob Sullivan\nCopyright (c) 2005 by Rob Sullivan <cogito.ergo.cogito@gmail.com>\nCopyright (c) 2005 by Robert Sullivan <cogito.ergo.cogito@gmail.com>\nCopyright (c) 2006 by Robert Sullivan <cogito.ergo.cogito@hotmail.com>\nCopyright (c) 2007 by Stephane Billiart <stephane.billiart@gmail.com>\nCopyright (c) 2012 by Sven Oliver SvOlli Moll <svolli@svolli.de>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 2008 by Timo Teras <timo.teras@iki.fi>\nCopyright (c) 2003 by Tito Ragusa <farmatito@tiscali.it>\nCopyright (c) 2005 by Tito Ragusa <tito-wolit@tiscali.it>\nCopyright (c) 1994-2000 by Tomi Ollila\nCopyright (c) 2008 by Vladimir Dronnikov <dronnikov@gmail.com>\nCopyright (c) 2002 by Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 2021 by YU Jincheng <shana@zju.edu.cn>\nCopyright (c) 2006 by Yoshinori Sato <ysato@users.sourceforge.jp>\nCopyright (c) 2017 by <assafgordon@gmail.com>\nCopyright (c) 2000 by spoon <spoon@ix.netcom.com>\nCopyright (c) 2008 by <u173034@informatik.uni-oldenburg.de>\nCopyright (c) (c) 2003 Vladimir Oleynik <dzo@simtreas.ru>\nCopyright (c) 1986-2003 may safely be consumed\nCopyright (c) 2006-2015 wolfSSL Inc.\nDenys Vlasenko (c) 2008\nMark Lord (c) 1994-2002\nPaul Mundt <lethal@linux-sh.org> (c) 2004\nPortions copyright (c) 1990-1996 Free Software Foundation, Inc.\nTito Ragusa (c) 2004\nVladimir Oleynik <dzo@simtreas.ru> 2001\nVladimir Oleynik <dzo@simtreas.ru> (c) 2001-2005\n(c) 2002\n(c) Copyright 2000, Axis Communications AB\n(c) Eero Tamminen\n(c) 1995 Erik Andersen <andersen@codepoet.org>\n(c) 2007 Gabriel Somlo\n(c) 2018 Gavin D. Howard and contributors\n(c) 2002 Glenn McGrath\n(c) 2007 Hiroshi Shinji <shiroshi@my.email.ne.jp>\n(c) 2006 Jac Goudsmit\n(c) Lauri Kasanen\n(c) 1991 Linus Torvalds\n(c) 2005 Martin Cracauer cracauer @ cons.org http://www.cons.org/cracauer/ http://www.cons.org/cracauer\n(c) 2002 Robert Griebl\n(c) 2009 Stefan Seyfried <seife@sphairon.com>\n(c) 2008 Timo Teras <timo.teras@iki.fi>\n(c) Vladimir Oleynik <dzo@simtreas.ru>\n(c) 2007 Yuichi Nakamura <ynakam@hitachisoft.jp>\n(c) 1997 by Andi Kleen\n(c) 1995-1999 by Geert Uytterhoeven (Geert.Uytterhoeven@cs.kuleuven.ac.be)\n(c) 2007 by Tito Ragusa <farmatito@tiscali.it>\n(c) 2002,2003 by Vladimir Oleynik <dzo@simtreas.ru>\n(c) 2007 by Yuichi Nakamura <ynakam@hitachisoft.jp>\n(c) by a whole\n(c) 2003 - correct\n(c) 2001-2005 <dzo@simtreas.ru>\n(c) $?i (c) Y\ncopyright (c) 2018 Gavin D. Howard and contributors\ncopyright (c) 1995 Ian Jackson <ian@chiark.greenend.org.uk>\ncopyright (c) 1996-2006 Julian R Seward\ncopyright (c) 2002 Romain Lievin <roms@lpg.ticalc.org>\ncopyright (c) 1997 by Vernon Hoxie\ncopyright (c) 2001 by glenn\ncopyrighted by many authors\ncopyrighted by the Free Software Foundation\n(c) 2009 <vonsch@gmail.com>\n\nAuthors: $?i Y; <assafgordon@gmail.com>; <dzo@simtreas.ru>; <solar@gentoo.org>; <u173034@informatik.uni-oldenburg.de>; <vonsch@gmail.com>; A. V. Le Blanc; AT&T; AYR Networks, Inc.; Aaron Lehmann; Adam Tkac; Adam Tkac <vonsch@gmail.com>; Al Stone; Albert Cahalan; Alessandro Rubini; Alexander Guy; Alexander Shishkin; Alexander Shishkin <virtuoso@slind.org>; Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>; Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>; Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> Patrick McHardy <kaber@trash.net>; Andi Kleen; Andi Kleen, SuSE Labs; Andre Masella; Andreas Neuper; Andreas Schwab; Andries E. Brouwer; Anthony Towns; Arcom Control System Ltd; Ari Sundholm; Ari Sundholm and Tuxera Inc.; Arkadiusz Mickiewicz <misiek@misiek.eu.org>; Arnd Bergmann <arnd@bergmann-dalldorf.de>; Arne Bernin; Arnold Robbins; Arthur van Hoff; Aurelien Jacobs; Axis Communications AB; Bart Visscher; Bart Visscher <magick@linux-fan.com>; Bartosz Golaszewski; Baruch Siach <baruch@tkos.co.il> , Orex Computed Radiography; Bastian Blank; Ben Zeckel <bzeckel@hmc.edu>; Bernardo Innocenti; Bernhard Reutner-Fischer; Bernhard Reutner-Fischer Copyrihgt; Bjorn Ekwall <bj0rn@blox.se>; Bradley M. Kuhn; Branko Lankester; Breno Leitao <leitao@debian.org>; Brian Candler; Bruce Perens; Bryan Rittmeyer <bryan@ixiacom.com>; BusyBox Team; BusyBox by Yuichi Nakamura; Charles L. Blake; Charles P. Wright; Charles P. Wright <cpw@unix.asb.com>; Chip Rosenthal Covad Communications <chip@laserlink.net>; Christopher Hoover <ch@hpl.hp.com>; Clifford Wolf (god@clifford.at); Craig; Dan Fandrich; Daniel Jacobowitz; Daniel Jacobowitz <dan@debian.org>; Darius Augulis; Dave Cinege; David Brownell; David Burren; David Burren <davidb@werj.com.au>; David I. Bell; David Keppel <pardo@cs.washington.edu>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie, djm@gnu.ai.mit.edu; David Mosberger-Tang; David Schleef; David Schleef <ds@schleef.org>; Denys Vlasenko; Denys Vlasenko <vda.linux@googlemail.com>; Denys Vlasenko Split; Dmitry Zakharov; Donald Becker; Donald Becker <becker@cesdis.gsfc.nasa.gov>; Donald Becker and Scyld Computing Corporation; Donald Becker, http://www.scyld.com/ http://www.scyld.com/wakeonlan.html; Ed Clark; Edward Betts; Eero Tamminen; Emanuele Aina; Emanuele Caratti <wiz@iol.it>; Enrik Berkhan; Enrique Zanardi; Eric Gisin; Eric Rasmussen <ear@usfirst.org>; Erik Andersen; Erik Andersen <andersee@debian.org>; Erik Andersen <andersen@codepoet.org>; Erik Andersen <andersen@debian.org>; Erik Andersen <andersen@uclibc.org>; Erik Andersen Adjusted; Erik Andersen Fix; Erik Andersen and Kent Robotti <robotti@metconnect.com>; Erik Andersen and Ron Alder; Erik Baalbergen; Fernando Silveira <swrh@gmx.net>; Frank Sorenson; Fred N. van Kempen; Fred N. van Kempen, <waltje@uwalt.nl.mugnet.org> and others; Free Software Foundation; Free Software Foundation, Inc.; Freescale Semiconductor, Inc; Frodo Looijaard; Fugro Intersite B.V.; G. Somlo <somlo@cmu.edu>; Gabriel Somlo; Gavin D. Howard and contributors; Geert Uytterhoeven; Gennady Feldman; Gennady Feldman Changes Made; George Staikos; Gerrit Pape; Gerrit Pape <pape@smarden.org>; Glenn Engel; Glenn L. McGrath; Glenn McGrath; Grigory Batalov; Guy Maor; H. Peter Anvin; H. Peter Anvin I've; Henning Brauer; Herbert Xu; Hewlett-Packard Co; Hewlett-Packard Company; Hewlett-Packard Laboratories; Hiroshi Shinji; INSIDE Secure Corporation; Ian Jackson; Ignacio Garcia Perez (iggarpe at gmail dot com); Igor Pavlov; Isaac Dunham; J.T. Conklin; Jac Goudsmit; Jan Kiszka; Jan-Derk Bakker; Jason A. Donenfeld; Jason Schoon; Jean-Pierre Lefebvre and Remi Lefebvre; Jean-loup Gailly; Jeff Angielski, The PTR Group; Jeff Noxon; Jeff Tranter; Jesse Dutton; Jim McQuillan <jam@ltsp.org>; Jim Meyering. Busyboxed; Jo-Philipp Wich; Jody Bruchon (jody@jodybruchon.com); Joern Engel; John Beppu; Juan Quintela <quintela@mandrakesoft.com>; Julian R Seward; Julian R Seward (jseward@acm.org); Julian Seward; Julian Seward <jseward@bzip.org>; Julianne Frances Haugh; Kaarle Ritvanen; Kai Germaschewski; KaiGai Kohei; Karl M. Hegbloom; Kay Sievers; Kayvan Aghaiepour and David MacKenzie; Kevin Cernekee; Khalid Aziz; Larry Doolittle; Larry Doolittle <LRDoolittle@lbl.gov>; Lasse Collin <lasse.collin@tukaani.org>; Lasse Collin <lasse.collin@tukaani.org> Igor Pavlov <http://7-zip.org/>; Laurence Anderson; Lauri Kasanen; Lennert Buytenhek; Leonid Lisovskiy <lly@sf.net>; Lineo, inc.; Lineo, inc. and John Beppu; Lineo, inc. and Mark Whitley; Linus Torvalds; Linux International; Linux International. I've; Loic Grenie; LoveSy; Magnus Damm; Maintainer Gennady Feldman <gfeldman@gena01.com>; Maksym Kryzhanovskyy; Malek Degachi; Manuel Novoa III; Manuel Novoa III (mjn3@codepoet.org); Manuel Novoa III and Vladimir Oleynik; Marc Leeman; Marek Becka; Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>; Marek Polacek; Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG; Mark Adler <madler@alumni.caltech.edu>; Mark Lord; Mark Whitley; Mark Whitley <markw@codepoet.org>; Markus Franz Xaver Johannes Oberhumer; Markus Gothe; Martin Cracauer cracauer @ cons.org; Martin Habets <errandir_news@mph.eclipse.co.uk>; Matheus Izvekov; Matt Kraai; Matt Krai; Matt Mackall; Matt Mackall <mpm@selenic.com>; Matteo Croce; Matteo Croce Hacked; Matthew Dillon; Matthew Dillon Vladimir Oleynik; Matthew Ramsay Chris Trew; Maxime Coste <mawww@kakoune.org>; Michael Habermann Copyrigjt; Michael K. Johnson; Michael Meskes; Michael Opdenacker; Michele Sanges; Michiel Huisjes; MicroWalt Corporation; Mike Frysinger; Miquel van Smoorenburg; Mrs. Brisby <mrs.brisby@nimh.org>; Natanael Copa; Nicholas Miell; Nico Erfurth <masta@perlgolf.de>; Nokia Corporation; Norbert Lange; Nuovation System Designs, LLC; Odd Arild Olsen (oao at fibula dot no); Pascal Bellard; Pascal Bellard <pascal.bellard@ads-lu.com>; Patricia Muscalu; Paul Fox <pgf@foxharp.boston.ma.us>; Paul Mackerras; Paul Mundt; Paul Sheer; Pedro Roque <roque@di.fc.ul.pt>; PeerSec Networks; Pere Orga; Pere Orga <gotrunks@gmail.com>; Peter Hanecak; Peter Orbaek <poe@daimi.aau.dk>; Peter Willis; Prentice Hall; Quy Tonthat <quy@signal3.com>; RSA Data Security, Inc.; Ralf Baechle <ralf@gnu.ai.mit.edu>; Randolph Chung; Randy Dunlap; Regents of the University of California; Remy Card Laboratoire MASI - Institut Blaise Pascal; Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris; Rewritten by Vladimir Oleynik; Richard Gooch; Richard Henderson <rth@tamu.edu>; Richard Stallman; Rick Sladkey; Rob Landley; Rob Landley (rob@landley.net); Rob Landley , Joey Hess; Rob Sullivan; Robert Griebl; Robert Griebl <griebl@gmx.de>; Robert Sullivan; Roberto A. Foglietta; Roger Binns; Roger Knecht; Rolf Fokkens; Romain Lievin; Roman Zippel; Russ Dill; Russ Dill <Russ.Dill@asu.edu>; S-G Bergh; Sam Ravnborg; Savio Lam (lam836@cs.cuhk.hk); Sergey Naumov; Spencer Thomas, Joe Orost, James Woods, Jim McKie, Steve Davies, Ken Turkowski, Dave Mack and Peter Jannesen; Spencer W. Thomas; Stefan Rompf; Stefan Seyfried; Stephane Billiart; Sterling Huxley; Sterling Huxley <sterling@europa.com>; Steve Reid <steve@edmweb.com>; Steven J. Hill; Stuart Herbert (S.Herbert@shef.ac.uk); Stuart Hughes; Sven Oliver SvOlli Moll; Sven Rudolph <sr1@inf.tu-dresden.de>; Sven-Goran Bergh; The Regents of the University of California; The ht://Dig Group; Theodore Ts'o; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Thomas Lundquist <thomasez@zelow.no>; Tim Riker <Tim@Rikers.org>; Timo Teras; Tito Ragusa; Tito Ragusa <farmatito@tiscali.it>; Tobias Klauser; Todd C. Miller; Tomi Ollila; Tomi Ollila <too@iki.fi>; Tony J. White; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Ulrich Drepper <drepper@redhat.com>; University of Delaware; Uwe Ohse; Vernon Hoxie; Vladimir Dronnikov; Vladimir Dronnikov <dronnikov@gmail.com>; Vladimir N. Oleynik; Vladimir N. Oleynik <dzo@simtreas.ru>; Vladimir Oleynik; Vladimir Oleynik <dzo@simtreas.ru>; W. Michael Petullo; Werner Almesberger; William Roadcap (roadcap@cfw.com); William Roadcap (roadcapw@cfw.com); YU Jincheng; Yang Xiaopeng; Yoichi Hariguchi <yoichi@fore.com>; Yoshinori Sato; Yuichi Nakamura; Yuichi Nakamura <ynakam@hitachisoft.jp>; content Ken A; correct; dhankins@isc.org; glenn; hobbit@avian.org; hush. Also; many authors; may safely be consumed; spoon; the Free Software Foundation; the University of California, Berkeley and its contributors; the University of California, Lawrence Berkeley Laboratory and its contributors; whole; wolfSSL Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/busybox/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rOkNGdSuVLJtzxj3thwhmRCF8R6m18zH4serD9P1uiA/busybox-~-31.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://busybox.net/",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/busybox",
    "versionInfo" : "1.37.0-r31"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-env-9.11-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025-2026 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright (c) 2001 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2026 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2026 Free Software Foundation, Inc. Francois Pinard <pinard@iro.umontreal.ca> , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2026\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson <iwj10@cus.cam.ac.uk>\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\nRafal Maszkowski <rzm@icm.edu.pl> 1996-2001, 2003-2026\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils-env/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EICIwRB6Qkc71uype89ncT52BVdcTfVlIw4ZRnf0bYA/coreutils-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/coreutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/coreutils-env",
    "versionInfo" : "9.11-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-fmt-9.11-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025-2026 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright (c) 2001 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2026 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2026 Free Software Foundation, Inc. Francois Pinard <pinard@iro.umontreal.ca> , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2026\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson <iwj10@cus.cam.ac.uk>\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc\nCopyright d Free Software Foundation, Inc. GCC Alpine\nRafal Maszkowski <rzm@icm.edu.pl> 1996-2001, 2003-2026\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils-fmt/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CMDOnAjq3F-5fyFLvCznhXhwTyeVPnjkgzs0_kAL6lU/coreutils-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/coreutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/coreutils-fmt",
    "versionInfo" : "9.11-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-sha512sum-9.11-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025-2026 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright (c) 2001 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2026 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2026 Free Software Foundation, Inc. Francois Pinard <pinard@iro.umontreal.ca> , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2026\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson <iwj10@cus.cam.ac.uk>\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc\nCopyright d Free Software Foundation, Inc. 0123456789abcdef GCC Alpine\nRafal Maszkowski <rzm@icm.edu.pl> 1996-2001, 2003-2026\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils-sha512sum/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jxdPgxAd5eouCM4EkTQpJdfpguv9ji4YPIcj7Ftmo34/coreutils-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/coreutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/coreutils-sha512sum",
    "versionInfo" : "9.11-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-9.11-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025-2026 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright (c) 2001 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2026 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2026 Free Software Foundation, Inc. Francois Pinard <pinard@iro.umontreal.ca> , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2026\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson <iwj10@cus.cam.ac.uk>\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\nRafal Maszkowski <rzm@icm.edu.pl> 1996-2001, 2003-2026\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4BEQJoDbfdm3N9y4PCF5mC80fFVRSMkbXVu36hvjI7c/coreutils-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/coreutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/coreutils",
    "versionInfo" : "9.11-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-libattr-2.5.2-r2-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright (c) 2007 Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 2002 Andreas Gruenbacher <agruen@suse.de>\nCopyright (c) 2001-2002 Andreas Gruenbacher <andreas.gruenbacher@gmail.com>\nCopyright (c) 2002, 2003 Andreas Grunbacher <a.gruenbacher@computer.org>\nCopyright (c) 2007 Antonio Trueba <atrueba@users.sourceforge.net>\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2006 Daniel Nylander <po@danielnylander.se>\nCopyright (c) 2015 Dmitry V. Levin <ldv@altlinux.org>\nCopyright (c) 2019 Frans Spiesschaert <Frans.Spiesschaert@yucom.be>\nCopyright (c) 2007 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2004 Free Software Foundation, Inc. Jakub Bogusz <qboosh@pld-linux.org> , 2004-2022\nCopyright (c) 2019, French l10n team <debian-l10n-french@lists.debian.org>\nCopyright (c) 2005 Guilhelm Panaget <guilhelm.panaget@free.fr>\nCopyright (c) 2004 Luk Claes <luk.claes@ugent.be>\nCopyright (c) 2008 Petr Pisar <petr.pisar@atlas.cz>\nCopyright (c) 2000-2002,2004 Silicon Graphics, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\ncopyrighted by the Free Software Foundation\n\nAuthors: Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Gruenbacher; Andreas Grunbacher; Antonio Trueba; Bootstrap Authors; Brandon Philips <brandon@ifup.org>; Daniel Nylander; Dmitry V. Levin; Fran,cois Pinard; Frans Spiesschaert; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. Jakub Bogusz; French l10n team; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guilhelm Panaget; Luk Claes; Peter Rosin <peda@lysator.liu.se>; Petr Pisar; Scott James Remnant; Silicon Graphics, Inc.; Tom Tromey <tromey@cygnus.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; X Consortium; the Free Software Foundation",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libattr/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/libattr@2.5.2-r2?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wcgHlgaje-AYtTR0tCO8dKJYjrGdugVQHbklTgETY-o/attr-~-2.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://savannah.nongnu.org/projects/attr",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/libattr",
    "versionInfo" : "2.5.2-r2"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-libcrypto3-3.5.9-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 2004-2014, Akamai Technologies\nCopyright 2017 BaishanCloud\nCopyright 2014 Cryptography Research, Inc.\nCopyright 2011 Google Inc.\nCopyright IBM Corp. 2018\nCopyright 2013 M. J. Dominus\nCopyright 2006 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright 2002 Niels Provos <provos@citi.umich.edu>\nCopyright 2005 Nokia\nCopyright Patrick Powell 1995\nCopyright 2019 Red Hat, Inc.\nCopyright 2017 Ribose Inc.\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright Siemens AG 2015-2019\nCopyright 1998-2025 The OpenSSL Project Authors\nCopyright 2016 VMS Software, Inc.\nCopyright 1998-$YEAR The OpenSSL Authors\nCopyright (c) 2007\nCopyright (c) 2008 Andy Polyakov <appro@openssl.org>\nCopyright (c) 2023, Christoph Mullner <christoph.muellner@vrull.eu>\nCopyright (c) 2015 CloudFlare, Inc.\nCopyright (c) 2012-2014 Daniel J. Bernstein\nCopyright (c) 2016 David Gwynne <david@gwynne.id.au>\nCopyright (c) 2004, EdelKey Project\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1989 Free Software Foundation, Inc.\nCopyright (c) 2022, Hongren (Zenithal) Zheng <i@zenithal.me>\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2012-2016 Jean-Philippe Aumasson\nCopyright (c) 2023, Jerry Shih <jerry.shih@sifive.com>\nCopyright (c) 2004 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2017 National Security Research Institute\nCopyright (c) 2006, Network Resonance, Inc.\nCopyright (c) 2019, Oracle and/or its affiliates\nCopyright (c) 2023, Phoebe Chen <phoebe.chen@sifive.com>\nCopyright (c) 2011, RTFM, Inc.\nCopyright (c) 2004, Richard Levitte <richard@levitte.org>\nCopyright (c) 1998-2026 The OpenSSL Project Authors\nCopyright (c) 2002 The OpenTSA Project\nCopyright (c) 2013-2014 Timo Teras <timo.teras@gmail.com>\nCopyright (c) 2013 by Mark Jason Dominus <mjd@cpan.org>\nCopyright 20xx-20yy The OpenSSL Project Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: 1995-$YEAR The OpenSSL Project Authors; 1998-$YEAR The OpenSSL Authors; 1998-$YEAR The OpenSSL Project Authors; 1999-$YEAR The OpenSSL Project Authors; 2000-$YEAR The OpenSSL Project Authors; 2020-$YEAR The OpenSSL Project Authors; 20xx-20yy The OpenSSL Project Authors; <appro@openssl.org>; <zhuchen@loongson.cn>; Akamai Technologies; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke <martin@meltin.net> & Alastair D'Silva <alastair@d-silva.org> for the OpenSSL project; Amitay Isaacs <amitay@ozlabs.org> and Martin Schwenke <martin@meltin.net> for the OpenSSL project; Andy Polyakov; Andy Polyakov <appro@openssl.org>; Antoon Bosselaers; BaishanCloud; Ben Avison <bavison@riscosopen.org>; Christoph Mullner; Christophe Renou and Peter Sylvester, for the EdelKey project; CloudFlare, Inc.; Cryptography Research, Inc.; Daniel J. Bernstein; Danny Tsen <dtsen@us.ibm.com>; David Gwynne; David S. Miller and Andy Polyakov; EdelKey Project; Emilia Kasper and Peter Schwabe; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; Eric Rescorla <ekr@rtfm.com>; Fangming Fang <fangming.fang@arm.com>; Free Software Foundation, Inc.; Google Inc.; Hongren (Zenithal) Zheng; IBM Corp.; Intel Corporation; Jean-Philippe Aumasson; Jerry Shih; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); M. J. Dominus; Marc Bevand; Mark Jason Dominus; Mark Jason Dominus, Plover Systems; Michael Schout <mschout@cpan.org>; Mike Hamburg; Min Zhou <zhoumin@loongson.cn>; NTT (Nippon Telegraph and Telephone Corporation); National Security Research Institute; Netscape Communications; Network Resonance, Inc.; Niels Provos; Nokia; Oracle and/or its affiliates; Patrick Powell; Patrick Powell <papowell@astart.com>; Patrick Steuer <patrick.steuer@de.ibm.com>; Paulo Barreto; Phoebe Chen; RTFM, Inc.; Red Hat, Inc.; Ribose Inc.; Richard Levitte; Rohan McLure <rohan.mclure@linux.ibm.com>; Samuel Lee <Samuel.Lee@arm.com>; Samuel Neves; Sergey Kirillov and Andrey Matyukov; Sergey Kirillov and Andrey Matyukov Intel Corporation; Shay Gueron; Siemens AG; The OpenSSL Project Authors; The OpenTSA Project; Timo Teras; VMS Software, Inc.; Vincent Rijmen; Xiaokang Qian <xiaokang.qian@arm.com>; Zhiguo Zhou <zhiguo.zhou@intel.com> and Wangyang Guo <wangyang.guo@intel.com>; the Free Software Foundation",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libcrypto3/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KwhHcejg5hJYPQcYSQ9du3uDrAooDD0w2X0ha1JJ4Mw/openssl-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/libcrypto3",
    "versionInfo" : "3.5.9-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-musl-1.2.6-r3-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 2011-2012 Nicholas J. Kain\nCopyright 2004 Sun Microsystems, Inc.\nCopyright (c) 1999-2019, Arm Limited\nCopyright (c) 2017-2018 Arm Limited\nCopyright (c) 2003-2009 Bruce D. Evans\nCopyright (c) 2009-2011, Bruce D. Evans, Steven G. Kargl, David Schultz\nCopyright (c) 2005 Bruce D. Evans and Steven G. Kargl\nCopyright (c) 1994 David Burren\nCopyright (c) 2003-2011 David Schultz\nCopyright (c) 2005-2008 David Schultz <das@FreeBSD.ORG>\nCopyright (c) 2011 Lynn Ochs\nCopyright (c) 2003 Poul-Henning Kamp\nCopyright (c) 2005-2020 Rich Felker\nCopyright (c) 1998-2014 Solar Designer\nCopyright (c) 2008 Stephen L. Moshier\nCopyright (c) 2008 Stephen L. Moshier <steve@moshier.net>\nCopyright (c) 2003-2009 Steven G. Kargl\nCopyright (c) 2008 Steven G. Kargl, David Schultz, Bruce D. Evans\nCopyright (c) 1993,2004 Sun Microsystems\nCopyright (c) 2008 The Android Open Source Project\nCopyright (c) 1996, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 2001-2008 Ville Laurikari\nCopyright (c) 2001-2009 Ville Laurikari <vl@iki.fi>\nCopyright (c) 2011 by Lynn Ochs\nCopyright (c) 1993 by Sun Microsystems, Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/musl/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/musl@1.2.6-r3?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vVvxszIT-FWfdCiZXE8BeI3xPWB8H3N5ujE7sY6qbhY/musl-~-3.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://musl.libc.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/musl",
    "versionInfo" : "1.2.6-r3"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-openjdk21-21.0.12-p8-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 2008, Google Inc.",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/community/openjdk21/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VQJFl21_Dsr4ZI2mBtkmW6IRTKwJ4oOypwV5DFe40Zo/openjdk21-~_p8-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/openjdk/jdk21u",
    "licenseConcluded" : "GPL-2.0-only WITH Classpath-exception-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/openjdk21",
    "versionInfo" : "21.0.12_p8-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-skalibs-libs-2.15.0.0-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright (c) 2011-2026 Laurent Bercot <ska-skaware@skarnet.org>\nCopyright (c) 2005-2017 Rich Felker, Szabolcs Nagy, Timo Teras, Alexander Monakov\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: Laurent Bercot; Laurent Bercot <ska-skaware@skarnet.org>; Rich Felker, Szabolcs Nagy, Timo Teras, Alexander Monakov; The Linux Foundation and its contributors; maintainer Laurent Bercot <ska-devel@skarnet.org>",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/skalibs-libs/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lChGLaOs449wjWTiAN-olWCxNdTIesjN_QEDYmEbzm4/skalibs-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/skalibs-libs@2.15.0.0-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://skarnet.org/software/skalibs/",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/skalibs-libs",
    "versionInfo" : "2.15.0.0-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-utmps-libs-0.1.3.3-r0-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 2020-2021 Laurent Bercot for Alpine Linux Distributed\nCopyright (c) 2018-2026 Laurent Bercot <ska-skaware@skarnet.org>\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: Laurent Bercot; Laurent Bercot <ska-skaware@skarnet.org>; Laurent Bercot for Alpine Linux Distributed; The Linux Foundation and its contributors; maintainer Laurent Bercot <ska-devel@skarnet.org>",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/utmps-libs/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uThxEUpCcsVSb-hMtSZ6E4JMYycHFaoOPePBhFZiVAY/utmps-~-0.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/utmps-libs@0.1.3.3-r0?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://skarnet.org/software/utmps/",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/utmps-libs",
    "versionInfo" : "0.1.3.3-r0"
  }, {
    "SPDXID" : "SPDXRef-pkg-apk-alpine-zlib-1.3.2-r1-arch-x86-64-distro-3.24.3",
    "copyrightText" : "Copyright 1998-2004 Gilles Vollant - https://www.winimage.com/zLibDll/minizip.html\nCopyright 2008 Google Inc.\nCopyright Jean-loup Gailly Osma Ahvenlampi <Osma.Ahvenlampi@hut.fi>\nCopyright 1995-2026 Jean-loup Gailly and Mark Adler\nCopyright 1995-2026 Mark Adler\nCopyright 1995-2026 Mark Adler GCC Alpine\nCopyright (c) 1997,99 Borland Corp.\nCopyright (c) 1997,99 Borland Corporation\nCopyright (c) 1997 Christian Michelsen Research AS Advanced Computing\nCopyright (c) 2003 Cosmin Truta\nCopyright (c) 2002-2003 Dmitriy Anisimkov\nCopyright (c) 2007-2008 Even Rouault\nCopyright (c) 1998-2026 Gilles Vollant\nCopyright (c) 1998 - 2010 Gilles Vollant, Even Rouault, Mathias Svensson\nCopyright (c) 1998-2026 Gilles Vollant (minizip) https://www.winimage.com/zLibDll/minizip.html\nCopyright (c) Henrik Ravn 2004\nCopyright (c) 1990-2009 Info-ZIP.\nCopyright (c) 1995-2026 Jean-Loup Gailly, Mark Adler\nCopyright (c) 1995-1998 Jean-loup Gailly\nCopyright (c) 1995-2010 Jean-loup Gailly, Brian Raiter and Gilles Vollant\nCopyright (c) 1995-2003 Jean-loup Gailly and Mark Adler\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 1996 L. Peter Deutsch and Jean-Loup Gailly\nCopyright (c) 1995-2003 Mark Adler\nCopyright (c) 2009-2010 Mathias Svensson https://result42.com\nCopyright (c) 1998 by Andreas R. Kleinert\nCopyright (c) 1998 by Bob Dellaca\nCopyright (c) 2003 by Cosmin Truta\nCopyright (c) 1998-2026 - by Gilles Vollant\nCopyright (c) 2004 by Henrik Ravn\nCopyright (c) 1998,1999,2000 by Jacques Nomssi Nzali\nCopyright (c) 1995-2003 by Jean-loup Gailly\n(c) Copyright Henrik Ravn 2004\n(c) 1995-2026 Jean-loup Gailly & Mark Adler\n(c) 1995-2026 Jean-loup Gailly and Mark Adler\n(c) 2014 M.E. O'Neill / www.pcg-random.org",
    "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/zlib/APKBUILD?h=3.24-stable",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5BpSzQe-KlctE9XWdhodoXWS4lrzZ3LfPq7PicH6QdY/zlib-~-1.src.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=3.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://zlib.net/",
    "licenseConcluded" : "Zlib",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "apk/alpine/zlib",
    "versionInfo" : "1.3.2-r1"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-github-openjdk-jdk21u-jdk-21.0.12-ga",
    "attributionTexts" : [ "The notice/license texts shown below apply to certain parts of this component. \n\nSee the /legal/ directory of the JRE/JDK to view the full third party licenses.\n\n==========\n### Additional Freetype Attributions\n```\n\n---------------------------------\nThe below applies to the following file(s):\nlibfreetype/src/psaux/psarrst.c\nlibfreetype/src/psaux/psarrst.h\nlibfreetype/src/psaux/psblues.c\nlibfreetype/src/psaux/psblues.h\nlibfreetype/src/psaux/pserror.c\nlibfreetype/src/psaux/pserror.h\nlibfreetype/src/psaux/psfixed.h\nlibfreetype/src/psaux/psfont.c\nlibfreetype/src/psaux/psfont.h\nlibfreetype/src/psaux/psft.c\nlibfreetype/src/psaux/psft.h\nlibfreetype/src/psaux/psglue.h\nlibfreetype/src/psaux/pshints.c\nlibfreetype/src/psaux/pshints.h\nlibfreetype/src/psaux/psintrp.c\nlibfreetype/src/psaux/psintrp.h\nlibfreetype/src/psaux/psread.c\nlibfreetype/src/psaux/psread.h\nlibfreetype/src/psaux/psstack.c\nlibfreetype/src/psaux/psstack.h\nlibfreetype/src/psaux/pstypes.h\n\nCopyright (C) 2006-2014 Adobe Systems Incorporated.\n\nThis software, and all works of authorship, whether in source or\nobject code form as indicated by the copyright notice(s) included\nherein (collectively, the \"Work\") is made available, and may only be\nused, modified, and distributed under the FreeType Project License,\nLICENSE.TXT.  Additionally, subject to the terms and conditions of the\nFreeType Project License, each contributor to the Work hereby grants\nto any individual or legal entity exercising permissions granted by\nthe FreeType Project License and this section (hereafter, \"You\" or\n\"Your\") a perpetual, worldwide, non-exclusive, no-charge,\nroyalty-free, irrevocable (except as stated in this section) patent\nlicense to make, have made, use, offer to sell, sell, import, and\notherwise transfer the Work, where such license applies only to those\npatent claims licensable by such contributor that are necessarily\ninfringed by their contribution(s) alone or by combination of their\ncontribution(s) with the Work to which such contribution(s) was\nsubmitted.  If You institute patent litigation against any entity\n(including a cross-claim or counterclaim in a lawsuit) alleging that\nthe Work or a contribution incorporated within the Work constitutes\ndirect or contributory patent infringement, then any patent licenses\ngranted to You under this License for that Work shall terminate as of\nthe date such litigation is filed.\n\nBy using, modifying, or distributing the Work you indicate that you\nhave read and understood the terms and conditions of the\nFreeType Project License as well as those provided in this section,\nand you accept them fully.\n\n\n```\n\n###\n\n==========\nPNG Reference Library License version 2\n---------------------------------------\n\nCopyright (C) 1995-2026 The PNG Reference Library Authors.\nCopyright (C) 2018-2026 Cosmin Truta\nCopyright (C) 1998-2018 Glenn Randers-Pehrson\nCopyright (C) 1996-1997 Andreas Dilger\nCopyright (C) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\n\nThe software is supplied \"as is\", without warranty of any kind,\nexpress or implied, including, without limitation, the warranties\nof merchantability, fitness for a particular purpose, title, and\nnon-infringement.  In no event shall the Copyright owners, or\nanyone distributing the software, be liable for any damages or\nother liability, whether in contract, tort or otherwise, arising\nfrom, out of, or in connection with the software, or the use or\nother dealings in the software, even if advised of the possibility\nof such damage.\n\nPermission is hereby granted to use, copy, modify, and distribute\nthis software, or portions hereof, for any purpose, without fee,\nsubject to the following restrictions:\n\n 1. The origin of this software must not be misrepresented; you\n    must not claim that you wrote the original software.  If you\n    use this software in a product, an acknowledgment in the product\n    documentation would be appreciated, but is not required.\n\n 2. Altered source versions must be plainly marked as such, and must\n    not be misrepresented as being the original software.\n\n 3. This Copyright notice may not be removed or altered from any\n    source or altered source distribution.\n\n\nPNG Reference Library License version 1 (for libpng 0.5 through 1.6.35)\n-----------------------------------------------------------------------\n\nlibpng versions 1.0.7, July 1, 2000, through 1.6.35, July 15, 2018 are\nCopyright (c) 2000-2002, 2004, 2006-2018 Glenn Randers-Pehrson, are\nderived from libpng-1.0.6, and are distributed according to the same\ndisclaimer and license as libpng-1.0.6 with the following individuals\nadded to the list of Contributing Authors:\n\n    Simon-Pierre Cadieux\n    Eric S. Raymond\n    Mans Rullgard\n    Cosmin Truta\n    Gilles Vollant\n    James Yu\n    Mandar Sahastrabuddhe\n    Google Inc.\n    Vadim Barkov\n\nand with the following additions to the disclaimer:\n\n    There is no warranty against interference with your enjoyment of\n    the library or against infringement.  There is no warranty that our\n    efforts or the library will fulfill any of your particular purposes\n    or needs.  This library is provided with all faults, and the entire\n    risk of satisfactory quality, performance, accuracy, and effort is\n    with the user.\n\nSome files in the \"contrib\" directory and some configure-generated\nfiles that are distributed with libpng have other copyright owners, and\nare released under other open source licenses.\n\nlibpng versions 0.97, January 1998, through 1.0.6, March 20, 2000, are\nCopyright (c) 1998-2000 Glenn Randers-Pehrson, are derived from\nlibpng-0.96, and are distributed according to the same disclaimer and\nlicense as libpng-0.96, with the following individuals added to the\nlist of Contributing Authors:\n\n    Tom Lane\n    Glenn Randers-Pehrson\n    Willem van Schaik\n\nlibpng versions 0.89, June 1996, through 0.96, May 1997, are\nCopyright (c) 1996-1997 Andreas Dilger, are derived from libpng-0.88,\nand are distributed according to the same disclaimer and license as\nlibpng-0.88, with the following individuals added to the list of\nContributing Authors:\n\n    John Bowler\n    Kevin Bracey\n    Sam Bushell\n    Magnus Holmgren\n    Greg Roelofs\n    Tom Tanner\n\nSome files in the \"scripts\" directory have other copyright owners,\nbut are released under this license.\n\nlibpng versions 0.5, May 1995, through 0.88, January 1996, are\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\n\nFor the purposes of this copyright and license, \"Contributing Authors\"\nis defined as the following set of individuals:\n\n    Andreas Dilger\n    Dave Martindale\n    Guy Eric Schalnat\n    Paul Schmidt\n    Tim Wegner\n\nThe PNG Reference Library is supplied \"AS IS\".  The Contributing\nAuthors and Group 42, Inc. disclaim all warranties, expressed or\nimplied, including, without limitation, the warranties of\nmerchantability and of fitness for any purpose.  The Contributing\nAuthors and Group 42, Inc. assume no liability for direct, indirect,\nincidental, special, exemplary, or consequential damages, which may\nresult from the use of the PNG Reference Library, even if advised of\nthe possibility of such damage.\n\nPermission is hereby granted to use, copy, modify, and distribute this\nsource code, or portions hereof, for any purpose, without fee, subject\nto the following restrictions:\n\n 1. The origin of this source code must not be misrepresented.\n\n 2. Altered versions must be plainly marked as such and must not\n    be misrepresented as being the original source.\n\n 3. This Copyright notice may not be removed or altered from any\n    source or altered source distribution.\n\nThe Contributing Authors and Group 42, Inc. specifically permit,\nwithout fee, and encourage the use of this source code as a component\nto supporting the PNG file format in commercial products.  If you use\nthis source code in a product, acknowledgment is not required but would\nbe appreciated.\n\nTRADEMARK\n=========\n\nThe name \"libpng\" has not been registered by the Copyright owners\nas a trademark in any jurisdiction.  However, because libpng has\nbeen distributed and maintained world-wide, continually since 1995,\nthe Copyright owners claim \"common-law trademark protection\" in any\njurisdiction where common-law trademark is recognized.\n\n</pre>\n\n###\n\n==========\n## Independent JPEG Group: JPEG release 6b\n\n### JPEG License\n\n```\n****************************************************************************\n\nCopyright (C) 1991-1998, Thomas G. Lane.\n\nThis software is the work of Tom Lane, Philip Gladstone, Jim Boucher,\nLee Crocker, Julian Minguillon, Luis Ortiz, George Phillips, Davide Rossi,\nGuido Vollbeding, Ge' Weijers, and other members of the Independent JPEG\nGroup.\n\nIJG is not affiliated with the official ISO JPEG standards committee.\n\nThe authors make NO WARRANTY or representation, either express or implied,\nwith respect to this software, its quality, accuracy, merchantability, or\nfitness for a particular purpose.  This software is provided \"AS IS\",\nand you, its user, assume the entire risk as to its quality and accuracy.\n\nThis software is copyright (C) 1991-1998, Thomas G. Lane.\nAll Rights Reserved except as specified below.\n\nPermission is hereby granted to use, copy, modify, and distribute\nthis software (or portions thereof) for any purpose, without fee,\nsubject to these conditions:\n\n(1) If any part of the source code for this software is distributed,\nthen this README file must be included, with this copyright and no-warranty\nnotice unaltered; and any additions, deletions, or changes to the original\nfiles must be clearly indicated in accompanying documentation.\n\n(2) If only executable code is distributed, then the accompanying documentation\nmust state that \"this software is based in part on the work of the\nIndependent JPEG Group\".\n\n(3) Permission for use of this software is granted only if the user accepts\nfull responsibility for any undesirable consequences; the authors accept\nNO LIABILITY for damages of any kind.\n\nThese conditions apply to any software derived from or based on the IJG code,\nnot just to the unmodified library.  If you use our work, you ought to\nacknowledge us.\n\nPermission is NOT granted for the use of any IJG author's name or company name\nin advertising or publicity relating to this software or products derived\nfrom it.  This software may be referred to only as \"the Independent JPEG\nGroup's software\".\n\nWe specifically permit and encourage the use of this software as the basis\nof commercial products, provided that all warranty or liability claims are\nassumed by the product vendor.\n\nIt appears that the arithmetic coding option of the JPEG spec is covered\nby patents owned by IBM, AT&T, and Mitsubishi.  Hence arithmetic coding\ncannot legally be used without obtaining one or more licenses.  For this\nreason, support for arithmetic coding has been removed from the free\nJPEG software. (Since arithmetic coding provides only a marginal gain\nover the unpatented Huffman mode, it is unlikely that very many\nimplementations will support it.) So far as we are aware, there are\nno patent restrictions on the remaining code.\n\nThe IJG distribution formerly included code to read and write GIF files.\nTo avoid entanglement with the Unisys LZW patent, GIF reading support\nhas been removed altogether, and the GIF writer has been simplified to\nproduce \"uncompressed GIFs\".  This technique does not use the LZW algorithm;\nthe resulting GIF files are larger than usual, but are readable by all\nstandard GIF decoders.\n\nWe are required to state that \"The Graphics Interchange Format(c) is\nthe Copyright property of CompuServe Incorporated.  GIF(sm) is a\nService Mark property of CompuServe Incorporated.\"\n\n****************************************************************************\n```\n\n==========\n## International Components for Unicode (ICU4J) v72.1\n\n### ICU4J License\n```\n\nCOPYRIGHT AND PERMISSION NOTICE (ICU 58 and later)\n\nCopyright © 1991-2022 Unicode, Inc. All rights reserved.\nDistributed under the Terms of Use in https://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of the Unicode data files and any associated documentation\n(the \"Data Files\") or Unicode software and any associated documentation\n(the \"Software\") to deal in the Data Files or Software\nwithout restriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, and/or sell copies of\nthe Data Files or Software, and to permit persons to whom the Data Files\nor Software are furnished to do so, provided that either\n(a) this copyright and permission notice appear with all copies\nof the Data Files or Software, or\n(b) this copyright and permission notice appear in associated\nDocumentation.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS.\nIN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS\nNOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL\nDAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,\nDATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER\nTORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\nPERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale,\nuse or other dealings in these Data Files or Software without prior\nwritten authorization of the copyright holder.\n\n---------------------\n\nThird-Party Software Licenses\n\nThis section contains third-party software notices and/or additional\nterms for licensed third-party software components included within ICU\nlibraries.\n\n1. ICU License - ICU 1.8.1 to ICU 57.1\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright (c) 1995-2016 International Business Machines Corporation and others\nAll rights reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, and/or sell copies of the Software, and to permit persons\nto whom the Software is furnished to do so, provided that the above\ncopyright notice(s) and this permission notice appear in all copies of\nthe Software and that both the above copyright notice(s) and this\npermission notice appear in supporting documentation.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT\nOF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR\nHOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR ANY\nSPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale, use\nor other dealings in this Software without prior written authorization\nof the copyright holder.\n\nAll trademarks and registered trademarks mentioned herein are the\nproperty of their respective owners.\n\n2. Chinese/Japanese Word Break Dictionary Data (cjdict.txt)\n\n #     The Google Chrome software developed by Google is licensed under\n # the BSD license. Other software included in this distribution is\n # provided under other licenses, as set forth below.\n #\n #  The BSD License\n #  http://opensource.org/licenses/bsd-license.php\n #  Copyright (C) 2006-2008, Google Inc.\n #\n #  All rights reserved.\n #\n #  Redistribution and use in source and binary forms, with or without\n # modification, are permitted provided that the following conditions are met:\n #\n #  Redistributions of source code must retain the above copyright notice,\n # this list of conditions and the following disclaimer.\n #  Redistributions in binary form must reproduce the above\n # copyright notice, this list of conditions and the following\n # disclaimer in the documentation and/or other materials provided with\n # the distribution.\n #  Neither the name of  Google Inc. nor the names of its\n # contributors may be used to endorse or promote products derived from\n # this software without specific prior written permission.\n #\n #\n #  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND\n # CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES,\n # INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF\n # MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n # DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE\n # LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR\n # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF\n # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF\n # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING\n # NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n #\n #\n #  The word list in cjdict.txt are generated by combining three word lists\n # listed below with further processing for compound word breaking. The\n # frequency is generated with an iterative training against Google web\n # corpora.\n #\n #  * Libtabe (Chinese)\n #    - https://sourceforge.net/project/?group_id=1519\n #    - Its license terms and conditions are shown below.\n #\n #  * IPADIC (Japanese)\n #    - http://chasen.aist-nara.ac.jp/chasen/distribution.html\n #    - Its license terms and conditions are shown below.\n #\n #  ---------COPYING.libtabe ---- BEGIN--------------------\n #\n #  /*\n #   * Copyright (c) 1999 TaBE Project.\n #   * Copyright (c) 1999 Pai-Hsiang Hsiao.\n #   * All rights reserved.\n #   *\n #   * Redistribution and use in source and binary forms, with or without\n #   * modification, are permitted provided that the following conditions\n #   * are met:\n #   *\n #   * . Redistributions of source code must retain the above copyright\n #   *   notice, this list of conditions and the following disclaimer.\n #   * . Redistributions in binary form must reproduce the above copyright\n #   *   notice, this list of conditions and the following disclaimer in\n #   *   the documentation and/or other materials provided with the\n #   *   distribution.\n #   * . Neither the name of the TaBE Project nor the names of its\n #   *   contributors may be used to endorse or promote products derived\n #   *   from this software without specific prior written permission.\n #   *\n #   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n #   * \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n #   * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS\n #   * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE\n #   * REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,\n #   * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n #   * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\n #   * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\n #   * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,\n #   * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)\n #   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED\n #   * OF THE POSSIBILITY OF SUCH DAMAGE.\n #   */\n #\n #  /*\n #   * Copyright (c) 1999 Computer Systems and Communication Lab,\n #   *                    Institute of Information Science, Academia\n #       *                    Sinica. All rights reserved.\n #   *\n #   * Redistribution and use in source and binary forms, with or without\n #   * modification, are permitted provided that the following conditions\n #   * are met:\n #   *\n #   * . Redistributions of source code must retain the above copyright\n #   *   notice, this list of conditions and the following disclaimer.\n #   * . Redistributions in binary form must reproduce the above copyright\n #   *   notice, this list of conditions and the following disclaimer in\n #   *   the documentation and/or other materials provided with the\n #   *   distribution.\n #   * . Neither the name of the Computer Systems and Communication Lab\n #   *   nor the names of its contributors may be used to endorse or\n #   *   promote products derived from this software without specific\n #   *   prior written permission.\n #   *\n #   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n #   * \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n #   * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS\n #   * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE\n #   * REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,\n #   * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n #   * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\n #   * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\n #   * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,\n #   * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)\n #   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED\n #   * OF THE POSSIBILITY OF SUCH DAMAGE.\n #   */\n #\n #  Copyright 1996 Chih-Hao Tsai @ Beckman Institute,\n #      University of Illinois\n #  c-tsai4@uiuc.edu  http://casper.beckman.uiuc.edu/~c-tsai4\n #\n #  ---------------COPYING.libtabe-----END--------------------------------\n #\n #\n #  ---------------COPYING.ipadic-----BEGIN-------------------------------\n #\n #  Copyright 2000, 2001, 2002, 2003 Nara Institute of Science\n #  and Technology.  All Rights Reserved.\n #\n #  Use, reproduction, and distribution of this software is permitted.\n #  Any copy of this software, whether in its original form or modified,\n #  must include both the above copyright notice and the following\n #  paragraphs.\n #\n #  Nara Institute of Science and Technology (NAIST),\n #  the copyright holders, disclaims all warranties with regard to this\n #  software, including all implied warranties of merchantability and\n #  fitness, in no event shall NAIST be liable for\n #  any special, indirect or consequential damages or any damages\n #  whatsoever resulting from loss of use, data or profits, whether in an\n #  action of contract, negligence or other tortuous action, arising out\n #  of or in connection with the use or performance of this software.\n #\n #  A large portion of the dictionary entries\n #  originate from ICOT Free Software.  The following conditions for ICOT\n #  Free Software applies to the current dictionary as well.\n #\n #  Each User may also freely distribute the Program, whether in its\n #  original form or modified, to any third party or parties, PROVIDED\n #  that the provisions of Section 3 (\"NO WARRANTY\") will ALWAYS appear\n #  on, or be attached to, the Program, which is distributed substantially\n #  in the same form as set out herein and that such intended\n #  distribution, if actually made, will neither violate or otherwise\n #  contravene any of the laws and regulations of the countries having\n #  jurisdiction over the User or the intended distribution itself.\n #\n #  NO WARRANTY\n #\n #  The program was produced on an experimental basis in the course of the\n #  research and development conducted during the project and is provided\n #  to users as so produced on an experimental basis.  Accordingly, the\n #  program is provided without any warranty whatsoever, whether express,\n #  implied, statutory or otherwise.  The term \"warranty\" used herein\n #  includes, but is not limited to, any warranty of the quality,\n #  performance, merchantability and fitness for a particular purpose of\n #  the program and the nonexistence of any infringement or violation of\n #  any right of any third party.\n #\n #  Each user of the program will agree and understand, and be deemed to\n #  have agreed and understood, that there is no warranty whatsoever for\n #  the program and, accordingly, the entire risk arising from or\n #  otherwise connected with the program is assumed by the user.\n #\n #  Therefore, neither ICOT, the copyright holder, or any other\n #  organization that participated in or was otherwise related to the\n #  development of the program and their respective officials, directors,\n #  officers and other employees shall be held liable for any and all\n #  damages, including, without limitation, general, special, incidental\n #  and consequential damages, arising out of or otherwise in connection\n #  with the use or inability to use the program or any product, material\n #  or result produced or otherwise obtained by using the program,\n #  regardless of whether they have been advised of, or otherwise had\n #  knowledge of, the possibility of such damages at any time during the\n #  project or thereafter.  Each user will be deemed to have agreed to the\n #  foregoing by his or her commencement of use of the program.  The term\n #  \"use\" as used herein includes, but is not limited to, the use,\n #  modification, copying and distribution of the program and the\n #  production of secondary products from the program.\n #\n #  In the case where the program, whether in its original form or\n #  modified, was distributed or delivered to or received by a user from\n #  any person, organization or entity other than ICOT, unless it makes or\n #  grants independently of ICOT any specific warranty to the user in\n #  writing, such person, organization or entity, will also be exempted\n #  from and not be held liable to the user for any such damages as noted\n #  above as far as the program is concerned.\n #\n #  ---------------COPYING.ipadic-----END----------------------------------\n\n3. Lao Word Break Dictionary Data (laodict.txt)\n\n # Copyright (C) 2016 and later: Unicode, Inc. and others.\n # License & terms of use: http://www.unicode.org/copyright.html\n # Copyright (c) 2015 International Business Machines Corporation\n # and others. All Rights Reserved.\n #\n # Project: https://github.com/rober42539/lao-dictionary\n # Dictionary: https://github.com/rober42539/lao-dictionary/laodict.txt\n # License: https://github.com/rober42539/lao-dictionary/LICENSE.txt\n #          (copied below)\n #\n #\tThis file is derived from the above dictionary version of Nov 22, 2020\n #  ----------------------------------------------------------------------\n #  Copyright (C) 2013 Brian Eugene Wilson, Robert Martin Campbell.\n #  All rights reserved.\n #\n #  Redistribution and use in source and binary forms, with or without\n #  modification, are permitted provided that the following conditions are met:\n #\n #  Redistributions of source code must retain the above copyright notice, this\n #  list of conditions and the following disclaimer. Redistributions in binary\n #  form must reproduce the above copyright notice, this list of conditions and\n #  the following disclaimer in the documentation and/or ther materials\n #  provided with the distribution.\n #\n # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n # \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS\n # FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE\n # COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,\n # INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n # (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\n # SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\n # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,\n # STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)\n # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED\n # OF THE POSSIBILITY OF SUCH DAMAGE.\n #  --------------------------------------------------------------------------\n\n4. Burmese Word Break Dictionary Data (burmesedict.txt)\n\n #  Copyright (c) 2014 International Business Machines Corporation\n #  and others. All Rights Reserved.\n #\n #  This list is part of a project hosted at:\n #    github.com/kanyawtech/myanmar-karen-word-lists\n #\n #  --------------------------------------------------------------------------\n #  Copyright (c) 2013, LeRoy Benjamin Sharon\n #  All rights reserved.\n #\n #  Redistribution and use in source and binary forms, with or without\n #  modification, are permitted provided that the following conditions\n #  are met: Redistributions of source code must retain the above\n #  copyright notice, this list of conditions and the following\n #  disclaimer.  Redistributions in binary form must reproduce the\n #  above copyright notice, this list of conditions and the following\n #  disclaimer in the documentation and/or other materials provided\n #  with the distribution.\n #\n #    Neither the name Myanmar Karen Word Lists, nor the names of its\n #    contributors may be used to endorse or promote products derived\n #    from this software without specific prior written permission.\n #\n #  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND\n #  CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES,\n #  INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF\n #  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n #  DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS\n #  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,\n #  EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED\n #  TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\n #  DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n #  ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR\n #  TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF\n #  THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF\n #  SUCH DAMAGE.\n #  --------------------------------------------------------------------------\n\n5. Time Zone Database\n\n  ICU uses the public domain data and code derived from Time Zone\nDatabase for its time zone support. The ownership of the TZ database\nis explained in BCP 175: Procedure for Maintaining the Time Zone\nDatabase section 7.\n\n # 7.  Database Ownership\n #\n #    The TZ database itself is not an IETF Contribution or an IETF\n #    document.  Rather it is a pre-existing and regularly updated work\n #    that is in the public domain, and is intended to remain in the\n #    public domain.  Therefore, BCPs 78 [RFC5378] and 79 [RFC3979] do\n #    not apply to the TZ Database or contributions that individuals make\n #    to it.  Should any claims be made and substantiated against the TZ\n #    Database, the organization that is providing the IANA\n #    Considerations defined in this RFC, under the memorandum of\n #    understanding with the IETF, currently ICANN, may act in accordance\n #    with all competent court orders.  No ownership claims will be made\n #    by ICANN or the IETF Trust on the database or the code.  Any person\n #    making a contribution to the database or code waives all rights to\n #    future claims in that contribution or in the TZ Database.\n\n6. Google double-conversion\n\nCopyright 2006-2011, the V8 project authors. All rights reserved.\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n    * Redistributions of source code must retain the above copyright\n      notice, this list of conditions and the following disclaimer.\n    * Redistributions in binary form must reproduce the above\n      copyright notice, this list of conditions and the following\n      disclaimer in the documentation and/or other materials provided\n      with the distribution.\n    * Neither the name of Google Inc. nor the names of its\n      contributors may be used to endorse or promote products derived\n      from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n====================================================\n\nUnicode® Copyright and Terms of Use\nFor the general privacy policy governing access to this site, see the  Unicode Privacy Policy.\n\nUnicode Copyright\nCopyright © 1991-2022 Unicode, Inc. All rights reserved.\nDefinitions\nUnicode Data Files (\"DATA FILES\") include all data files under the directories:\nhttps://www.unicode.org/Public/\nhttps://www.unicode.org/reports/\nhttps://www.unicode.org/ivd/data/\n\nUnicode Data Files do not include PDF online code charts under the directory:\nhttps://www.unicode.org/Public/\n\nUnicode Software (\"SOFTWARE\") includes any source code published in the Unicode Standard\nor any source code or compiled code under the directories:\nhttps://www.unicode.org/Public/PROGRAMS/\nhttps://www.unicode.org/Public/cldr/\nhttp://site.icu-project.org/download/\nTerms of Use\nCertain documents and files on this website contain a legend indicating that \"Modification is permitted.\" Any person is hereby authorized, without fee, to modify such documents and files to create derivative works conforming to the Unicode® Standard, subject to Terms and Conditions herein.\nAny person is hereby authorized, without fee, to view, use, reproduce, and distribute all documents and files, subject to the Terms and Conditions herein.\nFurther specifications of rights and restrictions pertaining to the use of the Unicode DATA FILES and SOFTWARE can be found in the Unicode Data Files and Software License.\nEach version of the Unicode Standard has further specifications of rights and restrictions of use. For the book editions (Unicode 5.0 and earlier), these are found on the back of the title page.\nThe Unicode PDF online code charts carry specific restrictions. Those restrictions are incorporated as the first page of each PDF code chart.\nAll other files, including online documentation of the core specification for Unicode 6.0 and later, are covered under these general Terms of Use.\nNo license is granted to \"mirror\" the Unicode website where a fee is charged for access to the \"mirror\" site.\nModification is not permitted with respect to this document. All copies of this document must be verbatim.\nRestricted Rights Legend\nAny technical data or software which is licensed to the United States of America, its agencies and/or instrumentalities under this Agreement is commercial technical data or commercial computer software developed exclusively at private expense as defined in FAR 2.101, or DFARS 252.227-7014 (June 1995), as applicable. For technical data, use, duplication, or disclosure by the Government is subject to restrictions as set forth in DFARS 202.227-7015 Technical Data, Commercial and Items (Nov 1995) and this Agreement. For Software, in accordance with FAR 12-212 or DFARS 227-7202, as applicable, use, duplication or disclosure by the Government is subject to the restrictions set forth in this Agreement.\nWarranties and Disclaimers\nThis publication and/or website may include technical or typographical errors or other inaccuracies. Changes are periodically added to the information herein; these changes will be incorporated in new editions of the publication and/or website. Unicode, Inc. may make improvements and/or changes in the product(s) and/or program(s) described in this publication and/or website at any time.\nIf this file has been purchased on magnetic or optical media from Unicode, Inc. the sole and exclusive remedy for any claim will be exchange of the defective media within ninety (90) days of original purchase.\nEXCEPT AS PROVIDED IN SECTION E.2, THIS PUBLICATION AND/OR SOFTWARE IS PROVIDED \"AS IS\" WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. UNICODE, INC. AND ITS LICENSORS ASSUME NO RESPONSIBILITY FOR ERRORS OR OMISSIONS IN THIS PUBLICATION AND/OR SOFTWARE OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS PUBLICATION OR THE UNICODE WEBSITE.\nWaiver of Damages\nIn no event shall Unicode, Inc. or its licensors be liable for any special, incidental, indirect or consequential damages of any kind, or any damages whatsoever, whether or not Unicode, Inc. was advised of the possibility of the damage, including, without limitation, those resulting from the following: loss of use, data or profits, in connection with the use, modification or distribution of this information or its derivatives.\nTrademarks & Logos\nThe Unicode Word Mark and the Unicode Logo are trademarks of Unicode, Inc. “The Unicode Consortium” and “Unicode, Inc.” are trade names of Unicode, Inc. Use of the information and materials found on this website indicates your acknowledgement of Unicode, Inc.’s exclusive worldwide rights in the Unicode Word Mark, the Unicode Logo, and the Unicode trade names.\nThe Unicode Consortium Name and Trademark Usage Policy (“Trademark Policy”) are incorporated herein by reference and you agree to abide by the provisions of the Trademark Policy, which may be changed from time to time in the sole discretion of Unicode, Inc.\nAll third party trademarks referenced herein are the property of their respective owners.\nMiscellaneous\nJurisdiction and Venue. This website is operated from a location in the State of California, United States of America. Unicode, Inc. makes no representation that the materials are appropriate for use in other locations. If you access this website from other locations, you are responsible for compliance with local laws. This Agreement, all use of this website and any claims and damages resulting from use of this website are governed solely by the laws of the State of California without regard to any principles which would apply the laws of a different jurisdiction. The user agrees that any disputes regarding this website shall be resolved solely in the courts located in Santa Clara County, California. The user agrees said courts have personal jurisdiction and agree to waive any right to transfer the dispute to any other forum.\nModification by Unicode, Inc. Unicode, Inc. shall have the right to modify this Agreement at any time by posting it to this website. The user may not assign any part of this Agreement without Unicode, Inc.’s prior written consent.\nTaxes. The user agrees to pay any taxes arising from access to this website or use of the information herein, except for those based on Unicode’s net income.\nSeverability.  If any provision of this Agreement is declared invalid or unenforceable, the remaining provisions of this Agreement shall remain in effect.\nEntire Agreement. This Agreement constitutes the entire agreement between the parties.\n\n=======================================================\n\nUNICODE, INC. LICENSE AGREEMENT - DATA FILES AND SOFTWARE\n\nSee Terms of Use\nfor definitions of Unicode Inc.’s Data Files and Software.\n\nNOTICE TO USER: Carefully read the following legal agreement.\nBY DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING UNICODE INC.'S\nDATA FILES (\"DATA FILES\"), AND/OR SOFTWARE (\"SOFTWARE\"),\nYOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE\nTERMS AND CONDITIONS OF THIS AGREEMENT.\nIF YOU DO NOT AGREE, DO NOT DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE\nTHE DATA FILES OR SOFTWARE.\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright © 1991-2022 Unicode, Inc. All rights reserved.\nDistributed under the Terms of Use in https://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of the Unicode data files and any associated documentation\n(the \"Data Files\") or Unicode software and any associated documentation\n(the \"Software\") to deal in the Data Files or Software\nwithout restriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, and/or sell copies of\nthe Data Files or Software, and to permit persons to whom the Data Files\nor Software are furnished to do so, provided that either\n(a) this copyright and permission notice appear with all copies\nof the Data Files or Software, or\n(b) this copyright and permission notice appear in associated\nDocumentation.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS.\nIN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS\nNOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL\nDAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,\nDATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER\nTORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\nPERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale,\nuse or other dealings in these Data Files or Software without prior\nwritten authorization of the copyright holder.\n\n```\n\n==========\n## Harfbuzz v14.2.0\n\n### Harfbuzz License\n\n<pre>\n\nHarfBuzz is licensed under the so-called \"Old MIT\" license.  Details follow.\nFor parts of HarfBuzz that are licensed under different licenses see individual\nfiles names COPYING in subdirectories where applicable.\n\nCopyright © 2010-2024  Google, Inc.\nCopyright © 2018-2020  Ebrahim Byagowi\nCopyright © 2004-2013  Red Hat, Inc.\nCopyright © 2019  Facebook, Inc.\nCopyright (C) 2012 Zilong Tan (eric.zltan@gmail.com)\nCopyright © 2007  Chris Wilson\nCopyright © 2018-2019 Adobe Inc.\nCopyright © 2006-2025 Behdad Esfahbod\nCopyright © 1998-2004  David Turner and Werner Lemberg\nCopyright © 2009  Keith Stribley\nCopyright © 2018  Khaled Hosny\nCopyright © 2016  Elie Roux <elie.roux@telecom-bretagne.eu>\nCopyright © 2016  Igalia S.L.\nCopyright © 2015  Mozilla Foundation.\nCopyright © 1999  David Turner\nCopyright © 2005  Werner Lemberg\nCopyright © 2013-2015  Alexei Podtelezhnikov\nCopyright © 2022 Matthias Clasen\nCopyright © 2011  Codethink Limited\n\nFor full copyright notices consult the individual files in the package.\n\n\nPermission is hereby granted, without written agreement and without\nlicense or royalty fees, to use, copy, modify, and distribute this\nsoftware and its documentation for any purpose, provided that the\nabove copyright notice and the following two paragraphs appear in\nall copies of this software.\n\nIN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE TO ANY PARTY FOR\nDIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES\nARISING OUT OF THE USE OF THIS SOFTWARE AND ITS DOCUMENTATION, EVEN\nIF THE COPYRIGHT HOLDER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH\nDAMAGE.\n\nTHE COPYRIGHT HOLDER SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING,\nBUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED HEREUNDER IS\nON AN \"AS IS\" BASIS, AND THE COPYRIGHT HOLDER HAS NO OBLIGATION TO\nPROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.\n\nAll source code, except for one section, is licensed as above. The one\nexception is licensed with a slightly different MIT variant:\nThe contents of this directory are licensed under the following terms:\n\n---------------------------------\nThe below applies to the following file(s):\nlibharfbuzz/hb-ucd.cc\n\nCopyright (C) 2012 Grigori Goronzy <greg@kinoho.net>\n\nPermission to use, copy, modify, and/or distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\n---------------------------------\nThe below applies to the following file(s):\nlibharfbuzz/hb-unicode-emoji-table.hh\n\n© 2025 Unicode®, Inc.\n\nUnicode and the Unicode Logo are registered trademarks of Unicode, Inc.\nin the U.S. and other countries.\nFor terms of use and license, see https://www.unicode.org/terms_of_use.html\n\n</pre>\n\n### AUTHORS File Information\n```\n\nBehdad Esfahbod\nDavid Corbett\nDavid Turner\nEbrahim Byagowi\nGarret Rieger\nJonathan Kew\nKhaled Hosny\nLars Knoll\nMartin Hosken\nOwen Taylor\nRoderick Sheeter\nRoozbeh Pournader\nSimon Hausmann\nWerner Lemberg\n\n```\n\n==========\n## Mesa 3-D Graphics Library v21.0.3\n\n### Mesa License\n\n```\nCopyright (C) 1999-2007  Brian Paul   All Rights Reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of this software and associated documentation files (the \"Software\"),\nto deal in the Software without restriction, including without limitation\nthe rights to use, copy, modify, merge, publish, distribute, sublicense,\nand/or sell copies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included\nin all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\nOR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL\nTHE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\nAttention, Contributors\n\nWhen contributing to the Mesa project you must agree to the licensing terms\nof the component to which you're contributing.\nThe following section lists the primary components of the Mesa distribution\nand their respective licenses.\nMesa Component Licenses\n\n\n\nComponent         Location               License\n------------------------------------------------------------------\nMain Mesa code    src/mesa/              MIT\nDevice drivers    src/mesa/drivers/*     MIT, generally\n\nGallium code      src/gallium/           MIT\n\nExt headers       GL/glext.h             Khronos\n                  GL/glxext.h            Khronos\n                  GL/wglext.h            Khronos\n                  KHR/khrplatform.h      Khronos\n\n*****************************************************************************\n\n----\ninclude/GL/gl.h :\n\n\n Mesa 3-D graphics library\n\n Copyright (C) 1999-2006  Brian Paul   All Rights Reserved.\n Copyright (C) 2009  VMware, Inc.  All Rights Reserved.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and associated documentation files (the \"Software\"),\n to deal in the Software without restriction, including without limitation\n the rights to use, copy, modify, merge, publish, distribute, sublicense,\n and/or sell copies of the Software, and to permit persons to whom the\n Software is furnished to do so, subject to the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Software.\n\n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\n OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL\n THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR\n OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,\n ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\n OTHER DEALINGS IN THE SOFTWARE.\n\n *****************************************************************************\n\n----\ninclude/GL/glext.h\ninclude/GL/glxext.h\ninclude/GL/wglxext.h :\n\n\n Copyright (c) 2013 - 2018 The Khronos Group Inc.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and/or associated documentation files (the\n \"Materials\"), to deal in the Materials without restriction, including\n without limitation the rights to use, copy, modify, merge, publish,\n distribute, sublicense, and/or sell copies of the Materials, and to\n permit persons to whom the Materials are furnished to do so, subject to\n the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Materials.\n\n THE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\n IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\n CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\n TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.\n\n *****************************************************************************\n\n----\ninclude/KHR/khrplatform.h :\n\n Copyright (c) 2008 - 2018 The Khronos Group Inc.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and/or associated documentation files (the\n \"Materials\"), to deal in the Materials without restriction, including\n without limitation the rights to use, copy, modify, merge, publish,\n distribute, sublicense, and/or sell copies of the Materials, and to\n permit persons to whom the Materials are furnished to do so, subject to\n the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Materials.\n\n THE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\n IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\n CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\n TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.\n\n *****************************************************************************\n\n```\n\n==========\n## PC/SC Lite v1.9.9\n\n### PC/SC Lite Notice\n```\nMUSCLE SmartCard Development ( https://pcsclite.apdu.fr/ )\n\nOnly 3 header files are included in this distribution: winscard.h, wintypes.h, pcsclite.h\n\nCopyright for winscard.h:\n * Copyright (C) 1999-2003\n *  David Corcoran <corcoran@musclecard.com>\n * Copyright (C) 2002-2009\n *  Ludovic Rousseau <ludovic.rousseau@free.fr>\n\nCopyright for wintypes.h:\n * Copyright (C) 1999\n *  David Corcoran <corcoran@musclecard.com>\n * Copyright (C) 2002-2011\n *  Ludovic Rousseau <ludovic.rousseau@free.fr>\n\nCopyright for pcsclite.h:\n * Copyright (C) 1999-2004\n *  David Corcoran <corcoran@musclecard.com>\n * Copyright (C) 2002-2011\n *  Ludovic Rousseau <ludovic.rousseau@free.fr>\n * Copyright (C) 2005\n *  Martin Paljak <martin@paljak.pri.ee>\n\n```\n\n### PC/SC Lite License\n```\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions\nare met:\n\n1. Redistributions of source code must retain the above copyright\n   notice, this list of conditions and the following disclaimer.\n2. Redistributions in binary form must reproduce the above copyright\n   notice, this list of conditions and the following disclaimer in the\n   documentation and/or other materials provided with the distribution.\n3. The name of the author may not be used to endorse or promote products\n   derived from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES\nOF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.\nIN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,\nINCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT\nNOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF\nTHIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n```\n\n==========\n## OASIS PKCS #11 Cryptographic Token Interface v3.1\n\n### OASIS PKCS #11 Cryptographic Token Interface License\n<pre>\n\nCopyright © OASIS Open 2023. All Rights Reserved.\n\nAll capitalized terms in the following text have the meanings\nassigned to them in the OASIS Intellectual Property Rights Policy (the\n\"OASIS IPR Policy\"). The full Policy may be found at the OASIS website:\n[https://www.oasis-open.org/policies-guidelines/ipr/].\n\nThis document and translations of it may be copied and furnished to\nothers, and derivative works that comment on or otherwise explain it or\nassist in its implementation may be prepared, copied, published, and\ndistributed, in whole or in part, without restriction of any kind,\nprovided that the above copyright notice and this section are included\non all such copies and derivative works. However, this document itself\nmay not be modified in any way, including by removing the copyright\nnotice or references to OASIS, except as needed for the purpose of\ndeveloping any document or deliverable produced by an OASIS Technical\nCommittee (in which case the rules applicable to copyrights, as set\nforth in the OASIS IPR Policy, must be followed) or as required to\ntranslate it into languages other than English.\n\nThe limited permissions granted above are perpetual and will not be\nrevoked by OASIS or its successors or assigns.\n\nThis document and the information contained herein is provided on an\n\"AS IS\" basis and OASIS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED,\nINCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE\nINFORMATION HEREIN WILL NOT INFRINGE ANY OWNERSHIP RIGHTS OR ANY IMPLIED\nWARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. OASIS\nAND ITS MEMBERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR\nCONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THIS DOCUMENT OR ANY\nPART THEREOF.\n\nAs stated in the OASIS IPR Policy, the following three paragraphs in\nbrackets apply to OASIS Standards Final Deliverable documents (Committee\nSpecifications, OASIS Standards, or Approved Errata).\n\n[OASIS requests that any OASIS Party or any other party that\nbelieves it has patent claims that would necessarily be infringed by\nimplementations of this OASIS Standards Final Deliverable, to notify\nOASIS TC Administrator and provide an indication of its willingness to\ngrant patent licenses to such patent claims in a manner consistent with\nthe IPR Mode of the OASIS Technical Committee that produced this\ndeliverable.]\n\n[OASIS invites any party to contact the OASIS TC Administrator if it\nis aware of a claim of ownership of any patent claims that would\nnecessarily be infringed by implementations of this OASIS Standards\nFinal Deliverable by a patent holder that is not willing to provide a\nlicense to such patent claims in a manner consistent with the IPR Mode\nof the OASIS Technical Committee that produced this OASIS Standards\nFinal Deliverable. OASIS may include such claims on its website, but\ndisclaims any obligation to do so.]\n\n[OASIS takes no position regarding the validity or scope of any\nintellectual property or other rights that might be claimed to pertain\nto the implementation or use of the technology described in this OASIS\nStandards Final Deliverable or the extent to which any license under\nsuch rights might or might not be available; neither does it represent\nthat it has made any effort to identify any such rights. Information on\nOASIS' procedures with respect to rights in any document or deliverable\nproduced by an OASIS Technical Committee can be found on the OASIS\nwebsite. Copies of claims of rights made available for publication and\nany assurances of licenses to be made available, or the result of an\nattempt made to obtain a general license or permission for the use of\nsuch proprietary rights by implementers or users of this OASIS Standards\nFinal Deliverable, can be obtained from the OASIS TC Administrator.\nOASIS makes no representation that any information or list of\nintellectual property rights will at any time be complete, or that any\nclaims in such list are, in fact, Essential Claims.]\n\n</pre>\n\n==========\n## Eastman Kodak Company: Portions of color management and imaging software\n\n### Eastman Kodak Notice\n<pre>\nPortions Copyright Eastman Kodak Company 1991-2003\n</pre>" ],
    "copyrightText" : "Copyright 2012-2020, Bert Belder <bertbelder@gmail.com>\nCopyright 1994 Hewlett-Packard Co.\nCopyright 2012-2024 JP Aumasson\nCopyright OpenJS Foundation and other contributors, https://openjsf.org\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 1996, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 1996-2003 by Elliot Joel Berk and C. Scott Ananian\nCopyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter\nCopyright (c) 2006-2014 Adobe Systems Incorporated\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2009-2013, Attila Szegedi\nCopyright (c) 2021 Collabora Ltd.\nCopyright (c) 2000 Computing Research Labs, New Mexico State University\nCopyright (c) 2018-2026 Cosmin Truta\nCopyright (c) Eric S. Raymond <esr@thyrsus.com>\nCopyright (c) 2000-2011 France Telecom\nCopyright (c) 2001-2015 Francesco Zappa Nardelli\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 1989 Gershon Elber\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2002 Graz University of Technology\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1995-2026 Jean-loup Gailly and Mark Adler\nCopyright (c) 1998-2026 Marti Maria Saguer\nCopyright (c) 1998 National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government\nCopyright (c) 2007, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2004-2015 Paul R. Holser, Jr\nCopyright (c) 2023 PipeWire authors\nCopyright (c) 2021 Red Hat, Inc.\nCopyright (c) 1995-2026 The\nCopyright (c) 1995-2005 The Cryptix Foundation Limited\nCopyright (c) 2009 The Go Authors\nCopyright (c) 1991 The Regents of the University of California\nCopyright (c) 1982 The Royal Institute, Thai Royal Government\nCopyright (c) 1991-2022 Unicode, Inc.\nCopyright (c) 2018-2023 Wim Taymans\nCopyright (c) 2004 World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) YEARS Oracle and/or its affiliates\nCopyright (c) 2025-2026 by Behdad Esfahbod\nCopyright (c) 2007-2026 by David Turner\nCopyright (c) 2018-2026 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2026 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams\nCopyright (c) 1996-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams. The FreeType Project\nCopyright (c) 2022-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2007-2026 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2026 by Derek Clegg and Michael Toftdal\nCopyright (c) 2013-2026 by Google, Inc.\nCopyright (c) 1996-2026 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2026 by Masatake YAMATO, Red Hat K.K.\nCopyright (c) 2004-2026 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2019-2026 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2026 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2026 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2001, softSurfer (www.softsurfer.com)\nCopyright (c) 2002-2023, the original author or authors\nCopyright property of CompuServe Incorporated\nat iClick, Inc., software copyright (c) 1999\n(c) 1995-2026 Jean-loup Gailly and Mark Adler\n(c) 2009 by Remo Dentato (rdentato@gmail.com)\ncopyright by M.I.T.\ncopyright by the Free Software Foundation\ncopyright (c) 1999, IBM Corporation., http://www.ibm.com\ncopyright (c) 2001, Institute\ncopyright (c) 1999-2002, Lotus Development Corporation., http://www.lotus.com\ncopyright (c) 1999, Sun Microsystems., http://www.sun.com\ncopyright (c) The FreeType Project (https://freetype.org)\ncopyright (c) 1991-1998, Thomas G. Lane\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\ncopyright holder, Aladdin Enterprises of Menlo Park\n\nAuthors: A.M. Kuchling <amk@amk.ca>; Adobe Systems Incorporated; Aladdin Enterprises of Menlo Park; Andreas Dilger; Attila Szegedi; Behdad Esfahbod; Bert Belder; Collabora Ltd.; CompuServe Incorporated; Computing Research Labs, New Mexico State University; Cosmin Truta; David Turner; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg, George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams. The FreeType Project; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Elliot Joel Berk and C. Scott Ananian; Eric S. Raymond; France Telecom; Francesco Zappa Nardelli; Free Software Foundation, Inc.; Gershon Elber; Gilles Vollant <info@winimage.com>; Glenn Randers-Pehrson; Google, Inc.; Graz University of Technology; Guy Eric Schalnat, Group 42, Inc.; Hewlett-Packard Co.; IBM Corporation; Institute; JP Aumasson; Jean-Philippe Aumasson; Jean-loup Gailly and Mark Adler; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; L. Peter Deutsch; Lotus Development Corporation; M.I.T.; Marti Maria Saguer; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K.; National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; OpenJS Foundation and other contributors; Oracle and/or its affiliates; Oran Agra and Mickey Gabel; Otto Moerbeek; Ovidiu Predescu (ovidiu@cup.hp.com); Paul Marquess <pmqs@cpan.org>; Paul R. Holser, Jr; PipeWire authors; Rahul Bhalerao; Red Hat, Inc.; Remo Dentato; Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter; Sun Microsystems; The Apache Software Foundation; The Apache Software Foundation (http://www.apache.org/); The Cryptix Foundation Limited; The FreeType Project; The Go Authors; The Open Group; The Regents of the University of California; The Royal Institute, Thai Royal Government; Thomas G. Lane; Unicode, Inc.; Wim Taymans; World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University); YEARS Oracle and/or its affiliates; contributors. The jdk21u (https://github.com/openjdk/jdk21u); iClick, Inc., software; softSurfer; the Free Software Foundation; the PVRG group at Stanford; the original author or authors",
    "downloadLocation" : "https://github.com/openjdk/jdk21u/archive/refs/tags/jdk-21.0.12-ga.tar.gz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/exTmm31Tch5iLn3OQlhXN2EsuI4zQ27OZNcOq8M0bis/jdk21u-git-source.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:github/openjdk/jdk21u@jdk-21.0.12-ga",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/openjdk/jdk21u",
    "licenseConcluded" : "(Zlib AND Libpng AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND LGPL-2.1-only AND W3C AND IJG AND LGPL-2.0-or-later AND UPL-1.0 AND LGPL-3.0-only AND Apache-1.1 AND Apache-2.0 AND GPL-3.0-only WITH GCC-exception-3.1 AND SMLNJ AND GPL-2.0-or-later WITH GNU-compiler-exception AND BSD-3-Clause AND BSD-2-Clause AND W3C-19980720 AND Unicode-TOU AND softSurfer AND MIT-open-group AND LicenseRef-scancode-unicode AND MPL-2.0 AND CC0-1.0 AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "github/openjdk/jdk21u",
    "versionInfo" : "jdk-21.0.12-ga"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.34",
    "copyrightText" : "Copyright (c) 1999-2026, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.34/logback-classic-1.5.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.34",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mYpMv9nipqptJkwJiJZd-nqGvGkD3DNOOF0XI1MR0NE/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.5.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.34",
    "copyrightText" : "Copyright (c) 1999-2026, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.34/logback-core-1.5.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.34",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHKe-k3XE0VjLhXnudvmwvKsiJAtmmruVab5yEpCwas/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND LGPL-2.1-or-later AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.5.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.ethlo.time-itu-1.14.0",
    "copyrightText" : "Copyright (c) 2017 Morten Haraldsen",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/ethlo/time/itu/1.14.0/itu-1.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.ethlo.time/itu@1.14.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BohnSbYmOkkuC4fmU4AGJHnQcnES5jsTVDFkkhCZfXE/itu-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ethlo/itu",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.ethlo.time/itu",
    "versionInfo" : "1.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FAYPPEKJfln70WdH6d5kYlr1jWNe0fksQHhTBb25MYQ/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.4",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) Daniel Lemire\nCopyright (c) 2022 Daniel Lemire. Boost Software\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.21.4/jackson-core-2.21.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HXmqOAV_UxjH3mmuTDzTE56IXvjPvfOdPOjv_ha41D8/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSL-1.0 AND BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.21.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.4",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RFp9JJS5eBLtukiBE8UYvFDIxE0DwvQWe7nckln9ECE/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.21.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.21.4",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.21.4/jackson-dataformat-yaml-2.21.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4UALmzXmBChh-GayMfKpIEmskspr1uZrKujt-rh3BuU/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "2.21.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.4",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.21.4/jackson-datatype-jsr310-2.21.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HcuWLAoVVIgv3tHrPVJ_ordHrKwhr5MNsjzRQ9e7XlI/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.21.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFfKHTGsG5wpfJo2-AKZfGBthRsboCCOy9rGo9Vo134/classmate-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/java-classmate",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml/classmate",
    "versionInfo" : "1.7.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.therapi-therapi-runtime-javadoc-scribe-0.15.0",
    "copyrightText" : "Copyright 2015 David Nault and contributors\nCopyright 2015 Square, Inc.\n\nAuthors: David Nault and contributors; Square, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/therapi/therapi-runtime-javadoc-scribe/0.15.0/therapi-runtime-javadoc-scribe-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/26QL9PUlzcEIhjgg8oKd4aNW-ngV_UEMTEkYJeQePwo/therapi-runtime-javadoc-scribe-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.therapi/therapi-runtime-javadoc-scribe@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/square/javapoet/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.therapi/therapi-runtime-javadoc-scribe",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.therapi-therapi-runtime-javadoc-0.15.0",
    "copyrightText" : "Copyright 2015 David Nault and contributors\nCopyright (c) 2013, 2014 EclipseSource\n\nAuthors: David Nault and contributors; EclipseSource",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/therapi/therapi-runtime-javadoc/0.15.0/therapi-runtime-javadoc-0.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aZ6JlV-kPB-xvXKY6ZR4bQ5ACnjx_riMj-nCsyCyLAY/therapi-runtime-javadoc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.therapi/therapi-runtime-javadoc@0.15.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ralfstx/minimal-json",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.therapi/therapi-runtime-javadoc",
    "versionInfo" : "0.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.36.0/error_prone_annotations-2.36.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9bWGnK58Q_0GOKefs5N_WRrO3saRKkdOB8y5ybh6oOg/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.36.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3",
    "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.4.8-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.networknt-json-schema-validator-3.0.8",
    "copyrightText" : "Copyright (c) 2016 Network New Technologies Inc.\nCopyright (c) 2023 the original author or authors\n(c) 2022 Unicode(r), Inc.\n\nAuthors: Amazon Registry Services, Inc. auto // auto Uniregistry, Corp. autos // autos DERAutos, LLC; Network New Technologies Inc.; Unicode(r), Inc.; the Internet Assigned; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/networknt/json-schema-validator/3.0.8/json-schema-validator-3.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ageuoxShajLIDh77iQw0Vt7UCDn-mGRyl2wU8UK89rg/json-schema-validator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.networknt/json-schema-validator@3.0.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/networknt/json-schema-validator",
    "licenseConcluded" : "(LicenseRef-scancode-unicode AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.networknt/json-schema-validator",
    "versionInfo" : "3.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.9",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.9/nimbus-jose-jwt-10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XKmk-3xczDc1_IIuU9KE3bBywervN1xuQmQDURGXW3k/nimbus-jose-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/nimbus-jose-jwt",
    "versionInfo" : "10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.19.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.19.0/commons-codec-1.19.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HlGEgdvrSUrpaHE5d0cWUXhOgpLjWmkgHaBG-zHW4aY/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.19.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.19.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.21.0/commons-io-2.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AU79RM8_xf3CmPeGvp4-4u-2NlgOAhhLIM159CBDq_M/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.16.6",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.16.6/micrometer-commons-1.16.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.16.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4RJrBjVOi9siGVTcYo_bEv8e7KDnvp8Vpyk5O0Fh4ck/micrometer-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-commons",
    "versionInfo" : "1.16.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.16.6",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Seungyong Hong; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.16.6/micrometer-core-1.16.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.16.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Jdxt2xqhTfF2AQgNCLjJgOQ4fZbOBfFAEgom0P_Ad9k/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.16.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.16.6",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.16.6/micrometer-jakarta9-1.16.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.16.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zCWRZQOYa4XMjMpmTlTFPfRQwuYIslAFhfJZoUNLaqY/micrometer-jakarta9-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-jakarta9",
    "versionInfo" : "1.16.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.16.6",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Maksim Petelin; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; Seungyong Hong; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.16.6/micrometer-observation-1.16.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.16.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E2sxPcDk7qM-rX9nrUIBe3IrYAKu07HybBrRHr2yjI4/micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-observation",
    "versionInfo" : "1.16.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.16.6",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.16.6/micrometer-registry-prometheus-1.16.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6yfFhRuQa1BbC8p7wIcO57W3h2TpYXkq41nqX5ssN2Y/micrometer-registry-prometheus-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-registry-prometheus",
    "versionInfo" : "1.16.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.4.3",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.4.3/prometheus-metrics-config-1.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3Qu26lVU14fpH5PUGHq71UQVEmYlhn6eUtSvLhsFpxM/prometheus-metrics-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-config",
    "versionInfo" : "1.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.4.3",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.4.3/prometheus-metrics-core-1.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EQ3mvzvy51fUUzc93bBFDDNpAZqey2LSw4WEQ8wDDhY/prometheus-metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.4.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-core",
    "versionInfo" : "1.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.4.3",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.4.3/prometheus-metrics-exposition-formats-1.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H0XGmRN2QAkvTbnxl4i4_lzKpd5Dq-0NLWE1EEYnflA/prometheus-metrics-exposition-formats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.4.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats",
    "versionInfo" : "1.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.4.3",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.4.3/prometheus-metrics-exposition-textformats-1.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ML4kQ9s23xkMvOYBwPW9iy_ztTPli7SaNyUo2Ysa62I/prometheus-metrics-exposition-textformats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.4.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats",
    "versionInfo" : "1.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.4.3",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.4.3/prometheus-metrics-model-1.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QcBumeZUDPfYwGR5053OPuLtWnX5LUmcBfxFUrBNb1M/prometheus-metrics-model-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-model",
    "versionInfo" : "1.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.4.3",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.4.3/prometheus-metrics-tracer-common-1.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.4.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rJwyT_-wXgmaHL11mpuT2-Ebd4bsH_IY5ddNSfS77Vw/prometheus-metrics-tracer-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-tracer-common",
    "versionInfo" : "1.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-jakarta-2.2.55",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-annotations-jakarta/2.2.55/swagger-annotations-jakarta-2.2.55.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.55",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Zse6G6B6Pm8oj0MbiQDiGSVT03jyliVKZrE8MnEKbck/swagger-annotations-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-annotations-jakarta",
    "versionInfo" : "2.2.55"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-core-jakarta-2.2.55",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-core-jakarta/2.2.55/swagger-core-jakarta-2.2.55.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.55",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QebaM4741bd4BC-CofboFnPmeujT6JHe9FfmsFsHXfE/swagger-core-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-core-jakarta",
    "versionInfo" : "2.2.55"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-models-jakarta-2.2.55",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-models-jakarta/2.2.55/swagger-models-jakarta-2.2.55.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.55",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e3xXKe5BlUcikdczN9sHQIccCTs3K6hZ8lubGFA7MjA/swagger-models-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-models-jakarta",
    "versionInfo" : "2.2.55"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4",
    "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PRU62PFiEM2QmMRN3dinnHVhUbmo6H2GxaRvzrObX5g/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jakartaee/jaf-api",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "2.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-3.0.0",
    "copyrightText" : "Copyright (c) 2019, 2024 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2012, 2024 Oracle and/or its affiliates\nCopyright (c) 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9LbW2xi2Mlsy4TiUXJBeg8ve-F42UfWxvwaOJ_wwJBc/jakarta.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "(EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1",
    "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.inject/jakarta.inject-api",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.1.1",
    "copyrightText" : "Copyright (c) 2019,2023 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.1.1/jakarta.validation-api-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/te-JjwrkyqKM8GF21Gn005EPHFJZm3KENosunSh1ypQ/jakarta.validation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0",
    "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.5",
    "copyrightText" : "Copyright (c) 2025 Contributors to the Eclipse Foundation\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2023 Oracle and/or its affiliates\nCopyright (c) 2018, 2024 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation\n\nAuthors: Contributors to the Eclipse Foundation; Eclipse Foundation; Joe Fialli; Joseph Fialli; Kohsuke Kawaguchi; Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com) Joseph Fialli; Kohsuke Kawaguchi, Joe Fialli; Kohsuke Kawaguchi, Martin Grebac; Kohsuke Kawaguchi, Sun Microsystems, Inc.; Kohsuke Kawaguchi, Sun Microsystems, Inc. Ryan Shoemaker, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems, Inc.; Kohsuke Kawaguchi, Sun Microsystems, Inc. Sekhar Vajjhala, Sun Microsystems, Inc.; Kohsuke Kawaguchi, Sun Microsystems,Inc. Sekhar Vajjhala, Sun Microsystems, Inc.; Marc Hadley; Miroslav.Kos@oracle.com; Oracle and/or its affiliates; Roman Grigoriadi; Ryan Shoemaker, Sun Microsystems, Inc.; Ryan Shoemaker, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems, Inc.; Ryan Shoemaker, Sun Microsystems, Inc. Kohsuke Kawaguchi, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems, Inc.; Sekhar Vajjhala, Sun Microsystems Inc. Kohsuke Kawaguchi, Sun Microsystems Inc.; Sekhar Vajjhala, Sun Microsystems, Inc.; Sekhar Vajjhala, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems Inc.; Sekhar Vajjhala, Sun Microsystems, Inc. Joe Fialli, Sun Microsystems Inc. Kohsuke Kawaguchi, Sun Microsystems, Inc. Ryan Shoemaker,Sun Microsystems Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/4.0.5/jakarta.xml.bind-api-4.0.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ABKpAQDzerWKAS0stj7Sr16I-r2LDw0Ypw7JgeTy_-g/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "4.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.14.1",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.14.1/joda-time-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xXnFMyPOpZ6R0hnoMU0tVmTd4tkdqXRsur-xSe-2kiE/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.14.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.6.0",
    "copyrightText" : "Copyright 2001-2026 The Apache Software Foundation\nCopyright (c) 2008-2020, Hazelcast, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.6.0/commons-collections4-4.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.6.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qod0ozw6sjmoyvRVbwz2n0lc5hKddc3HUxMYaJos_GI/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.20.0",
    "copyrightText" : "Copyright 2001-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_xj6nZIp7Yz47D0KPlGH_pyBbOKkj9Y6S8Th4EHbAv0/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.20.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.15.0",
    "copyrightText" : "Copyright 2014-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.15.0/commons-text-1.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-text@1.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ValKLCOMiDNzKw8qxPFfJrmOpyiImF16sKQvTYbIdhs/commons-text-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-text",
    "versionInfo" : "1.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.25.4",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.25.4/log4j-api-2.25.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nSQK2SL1Y1KGv_gLDsv-YH9q-JitEZZ0TxVP3jRauPM/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://logging.apache.org/log4j/2.x/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.25.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.25.4",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.25.4/log4j-to-slf4j-2.25.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wudzhzZKawGBR0t5J9uBcgwuPn2QNEJDuumfZOki0hE/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://logging.apache.org/log4j/2.x/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.25.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-11.0.22",
    "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2026 The Apache Software Foundation\nCopyright (c) 1999-2026, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2026, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/11.0.22/tomcat-embed-core-11.0.22.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7BdKDi2dLSys66qxXOO3y-s9YMv4mnvG1SwdQGPJtzc/tomcat-embed-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.22",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core",
    "versionInfo" : "11.0.22"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-11.0.22",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/11.0.22/tomcat-embed-el-11.0.22.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jK8FBFwrIk4hvMUsU_naAa6LhutlebOxHYjl3BhDXoU/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@11.0.22",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "11.0.22"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-11.0.22",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/11.0.22/tomcat-embed-websocket-11.0.22.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3uGJA_61-89VuJ2hrm1cyrOi3Q0eZA5Wy76jRPHq4zQ/tomcat-embed-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.22",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket",
    "versionInfo" : "11.0.22"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.85",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2026 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\n(c) a href https://drive.google.com/file/d/1jEECOq-pD1mdgu-9MPFkucCaeK11C4Bz/view?usp\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.85/bcpkix-jdk18on-1.85.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KfPmm901uU6eg2-goIw3Tn79rokYNuz04uuUOGsIUU8/r1rv85.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.85"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.85",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2026 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\n(c) a href https://drive.google.com/file/d/1jEECOq-pD1mdgu-9MPFkucCaeK11C4Bz/view?usp",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.85/bcprov-jdk18on-1.85.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DSFiuOmvvJbAQXWF63qZ5_2OrSGHLIdl1CZKouFTMKU/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.85"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.85",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2026 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\n(c) a href https://drive.google.com/file/d/1jEECOq-pD1mdgu-9MPFkucCaeK11C4Bz/view?usp\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.85/bcutil-jdk18on-1.85.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KfPmm901uU6eg2-goIw3Tn79rokYNuz04uuUOGsIUU8/r1rv85.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.85"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-api-client-9.0.1",
    "copyrightText" : "Copyright (c) 2008 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-api-client/9.0.1/cometd-java-api-client-9.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-api-client@9.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Smgq-kwNS4rb8Rmp5Iyn5Ax-fynW7risSah5iJ28XHE/cometd-java-api-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-api-client",
    "versionInfo" : "9.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-api-common-9.0.1",
    "copyrightText" : "Copyright (c) 2008 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-api-common/9.0.1/cometd-java-api-common-9.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-api-common@9.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eUMWPYV1mPrWnepG60rbibGmjNsTg3y-nmJQ7dboOmE/cometd-java-api-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-api-common",
    "versionInfo" : "9.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-common-9.0.1",
    "copyrightText" : "Copyright (c) 2008 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client-common/9.0.1/cometd-java-client-common-9.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hdjagfkPUkweTkFNkCdSmQkcKn6eyhbd2571tfE37QM/cometd-java-client-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client-common@9.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client-common",
    "versionInfo" : "9.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-9.0.1",
    "copyrightText" : "Copyright (c) 2008 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/9.0.1/cometd-java-common-9.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F6NvWkbTCSyeiIkhi4IQzpGAGwj65zR-wy_Q-DJN1Bw/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@9.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "9.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.commonmark-commonmark-0.31.0",
    "copyrightText" : "Copyright (c) 2015, Atlassian Pty Ltd",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/commonmark/commonmark/0.31.0/commonmark-0.31.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CjcfaRO2ceu06u4LRPMaGoYj4KyH9nPyM5dowRBNFnk/commonmark-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.commonmark/commonmark@0.31.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.commonmark/commonmark",
    "versionInfo" : "0.31.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-12.1.10",
    "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-http/12.1.10/jetty-http-12.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/B7v15SM3GP2djaTMqiQ0cHJKN1Zo6X0ZWcXByIC2BxM/jetty-http-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-http@12.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-http",
    "versionInfo" : "12.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-12.1.10",
    "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-io/12.1.10/jetty-io-12.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yWm13ER3scMgYwlE9Y5uMm4Qlnx3i_gk5kgk8853Gnw/jetty-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-io@12.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-io",
    "versionInfo" : "12.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.1.10",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.1.10/jetty-util-12.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/acCiRrF7Y1Z5gHbcSOwMYReiyg7Z0fhU6aeNnGnirCM/jetty-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "12.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6",
    "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.12",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2026 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.12/jersey-apache-connector-3.1.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ox_UUcob0PuPdoqPqjUxQcQnQssAcbhTof3aAHUqWi4/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "3.1.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.12",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2026 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.12/jersey-client-3.1.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gmXMN3lbH3pT6AQkLcD01D_0zUvjgnY641FP7rcp47g/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "3.1.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.12",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2026 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.12/jersey-common-3.1.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OZ3O8U5h8RWZakmSGoRTMqhC3Vhug3G-UlFYepsJ6Rk/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "3.1.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.12",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2026 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.12/jersey-hk2-3.1.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rdFALcFMIVCdsBNJQzFeMg_7ES8-m7Zy8VhNPfjWkuU/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "3.1.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.12",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2026 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.12/jersey-media-multipart-3.1.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FN0QvFVMhVxu_AZH_kb5QsGayQQVVU4hd5l63u37O-s/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "3.1.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-9.0.1.Final",
    "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\nCopyright Red Hat Inc. and Hibernate\n(c) 2011 SERLI",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/9.0.1.Final/hibernate-validator-9.0.1.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DroMm06ypGy7aHb2RdfyxiQF7r4k-5gy-rTptPwLhvY/hibernate-validator-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@9.0.1.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://hibernate.org/validator",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hibernate.validator/hibernate-validator",
    "versionInfo" : "9.0.1.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0",
    "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TooTallNate/Java-WebSocket",
    "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.java-websocket/Java-WebSocket",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.30.2-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final",
    "copyrightText" : "Copyright 2023 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.3.Final/jboss-logging-3.6.3.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uvI3EFUkHy5LdLFSEGRYKeGb49613nbl5zJk5Fw1lJw/jboss-logging-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.jboss.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jboss.logging/jboss-logging",
    "versionInfo" : "3.6.3.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.json-json-20260814",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/json/json/20260814/json-20260814.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.json/json@20260814",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tHoBDlTna49fG33qhjdEQuGiFkucNEbK_St0DQ9p-KY/json-20260814-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/douglascrockford/JSON-java",
    "licenseConcluded" : "(Unlicense AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.json/json",
    "versionInfo" : "20260814"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.23.2",
    "copyrightText" : "Copyright (c) 2009-2026 Jonathan Hedley <https://jsoup.org/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jsoup/jsoup/1.23.2/jsoup-1.23.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jsoup/jsoup@1.23.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kpsI047d-52xhHVYWYEw-O1jdtcCePWFnCItfYfyVEc/jsoup-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jsoup.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jsoup/jsoup",
    "versionInfo" : "1.23.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0",
    "copyrightText" : "Copyright 2018-2020 The JSpecify",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jspecify.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jspecify/jspecify",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.18",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.18/jcl-over-slf4j-2.0.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OiQOEpJvJcD35sOe1ED13BTr_tJBTs9U6bsCSK5MfiM/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "2.0.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.18",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.18/jul-to-slf4j-2.0.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AnCwHAWE-1SMOjalbwTlCznlg_vwLgdJNhRTBlHh5gk/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "2.0.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.18",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.18/slf4j-api-2.0.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s85BbcWNoH6oo-niviA4WyQ1-SFasxsbI18Mv-QWHi0/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-3.0.1",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2018, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/snakeyaml/snakeyaml-engine/3.0.1/snakeyaml-engine-3.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lqhLpUVCCTiV28pAY8iJVkgYrEILp_KFTkke38jCUHA/snakeyaml-engine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.snakeyaml/snakeyaml-engine@3.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml-engine",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.snakeyaml/snakeyaml-engine",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-common-3.1.1",
    "copyrightText" : "Copyright 2019-2026 the original author or authors\n\nAuthors: Anton Tkachenko tkachenkoas@gmail.com; Claudio Nave; Gibah Joseph; Huijin Hong; Jeffrey Blayney; the original author or authors; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/OAuth2AuthorizationServerMetadata.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/http/converter/OAuth2TokenIntrospectionHttpMessageConverter.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/OidcClientRegistration.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/OidcProviderConfiguration.java; yuta.saito https://github.com/spring-projects/spring-security/blob/main/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/DefaultOAuth2AccessTokenResponseMapConverter.java",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-common/3.1.1/springdoc-openapi-starter-common-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oeUR19-XKhxOoXlAwfvhiyXREH5N3nFQXS_xqmBKFok/springdoc-openapi-starter-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-common@3.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-common",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-api-3.1.1",
    "copyrightText" : "Copyright 2019-2026 the original author or authors\n\nAuthors: bnasslahsen, Azige; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-webmvc-api/3.1.1/springdoc-openapi-starter-webmvc-api-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-webmvc-api@3.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NqQMmpmhoyxsckSAyPD1Fgn0ggMY-W4ZRHSmXx6gCRI/springdoc-openapi-starter-webmvc-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-webmvc-api",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-ui-3.1.1",
    "copyrightText" : "Copyright 2019-2026 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-webmvc-ui/3.1.1/springdoc-openapi-starter-webmvc-ui-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-webmvc-ui@3.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Et-Gyx_ZnGesb67iLhNRjxzAsxbrbgrP3EjX5lJ3aiQ/springdoc-openapi-starter-webmvc-ui-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-webmvc-ui",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Dave Syer; Greg Turnquist; Jonatan Ivanov; Madhura Bhave; Meang Akira Tanaka; Moritz Halbritter; Scott Frederick; Stephane Nicoll; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/4.0.7/spring-boot-actuator-autoconfigure-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EmzzSm-ZzDrLjcNjy0aQBp0RkxktvUWqByPSqWOc6dk/spring-boot-actuator-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; Emily Tsanova; HaiTao Zhang; Johannes Edmeier; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Lee JiWon; Madhura Bhave; Meang Akira Tanaka; Moritz Halbritter; Nicolas Lejeune; Olivier Bourgain; Raja Kolli; Rohan Goyal; Scott Frederick; Stephane Nicoll; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Wallace Wadge; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/4.0.7/spring-boot-actuator-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4vdLtQMUsRsKD3vSTuHepsH_5n2Ii4ofYj78vwsJRgc/spring-boot-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Artsiom Yudovin; Brian Clozel; Camille Vienot; Christian Dupuis; Dave Syer; Dmytro Nosan; Eddu Melendez; Eneias Silva; Filip Hrisafov; Gaurav Pareek; Greg Turnquist; Jakub Kubrynski; Josh Long; Kedar Joshi; Maciej Walkowiak; Madhura Bhave; Marc Becker; Marcel Overdijk; Michael Stummvoll; Misagh Moayyed; Moritz Halbritter; Oliver Gierke; Pedro Xavier Leite Cavadas; Scott Frederick; Sebastien Deleuze; Stephane Nicoll; Taeik Lim; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/4.0.7/spring-boot-autoconfigure-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DC2iAVOQpgOmoHC-nE5yGs9dyOP_Z0l0zD4gWMSQOhg/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-devtools-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Clement; Andy Wilkinson; Francis Lavoie; HaiTao Zhang; Madhura Bhave; Rob Winch; Stephane Nicoll; VMware, Inc.; Vladimir Tsanev; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-devtools/4.0.7/spring-boot-devtools-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-devtools@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/v0nRAhxb3p9IAl4v_RSaVO7Mjtxyr1pMfX9tcvPnLDg/spring-boot-devtools-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-devtools",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-health-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Brian Clozel; Christian Dupuis; Dave Syer; Eddu Melendez; Jonatan Ivanov; Leo Li; Madhura Bhave; Mattias Severson; Michael Pratt; Moritz Halbritter; Nikolay Rybak; Scott Frederick; Stephane Nicoll; VMware, Inc.; Young Jae; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-health/4.0.7/spring-boot-health-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-health@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D85qbU_Xp_XYSO4frZxpbgcx6Wm7Dq6XRUUeAUP-qRc/spring-boot-health-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-health",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-http-converter-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Brian Clozel; Christian Dupuis; Dave Syer; David Liu; Dmitry Sulman; Eddu Melendez; Oliver Gierke; Piotr Maj; Sebastien Deleuze; Stephane Nicoll; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-http-converter/4.0.7/spring-boot-http-converter-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-http-converter@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/P9WSeRNL7S_3aDzMJW0onv2snlZzMWr9vRThZNOsgTM/spring-boot-http-converter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-http-converter",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-jackson-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Eddu Melendez; Grzegorz Poznachowski; Johannes Edmeier; Marcel Overdijk; Oliver Gierke; Paul Aly; Ralf Ueberfuhr; Sebastien Deleuze; Stephane Nicoll; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-jackson/4.0.7/spring-boot-jackson-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RoR7s77GmNEnI5UEGu9Ap4Ibm7sH8hc5te7nMI1TQE0/spring-boot-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-jackson@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-jackson",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-micrometer-metrics-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Alexander Abramov; Andy Wilkinson; Artsiom Yudovin; Chris Bono; David J. M. Karlsen; Dmytro Nosan; Dominique Villard; Eddu Melendez; Georg Pirklbauer; Johannes Graf; Johnny Lim; Jon Schneider; Jonatan Ivanov; Michael Berry; Moritz Halbritter; Neil Powell; Nikolay Rybak; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-micrometer-metrics/4.0.7/spring-boot-micrometer-metrics-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d5sSZe120b9m5-rqRUpqPdlM6fv-pSgabxLOuXfHfaY/spring-boot-micrometer-metrics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-micrometer-metrics@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-micrometer-metrics",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-micrometer-observation-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Brian Clozel; Dominique Villard; Jonatan Ivanov; Moritz Halbritter; VMware, Inc.; Vedran Pavic; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-micrometer-observation/4.0.7/spring-boot-micrometer-observation-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zFvEw91lv629W_goTonxeKIYTxJa2d4YdSawS6Aqk7Q/spring-boot-micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-micrometer-observation@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-micrometer-observation",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-security-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Brian Clozel; Chris Bono; Dave Syer; Hatef Palizgar; Lasse Wulff; Madhura Bhave; Rob Winch; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-security/4.0.7/spring-boot-security-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-security@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FXztiYKXawSu5ujHEtORD3i5C5OywyVEVYoWkRoOBuE/spring-boot-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-security",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-servlet-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Brian Clozel; Dave Syer; Eddu Melendez; Greg Turnquist; Joao Pedro Evangelista; Josh Long; Madhura Bhave; Moritz Halbritter; Stephane Nicoll; Toshiaki Maki; VMware, Inc.; Venil Noronha; Wallace Wadge; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-servlet/4.0.7/spring-boot-servlet-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-servlet@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PRF9VzyFUniSelknciFpAhTc-YL3Kv7sDd2ynlyYBlo/spring-boot-servlet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-servlet",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/4.0.7/spring-boot-starter-actuator-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lQjjtXWc6Phk3zS15kVKCe8OxXdNbRardlGJzfYU7bE/spring-boot-starter-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-actuator",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jackson-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-jackson/4.0.7/spring-boot-starter-jackson-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-jackson@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2OnvBb6Kh5FLp3fVpbQ-CKqtfH0sw6-c4LHppJ4_Rp4/spring-boot-starter-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-jackson",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/4.0.7/spring-boot-starter-logging-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ti1V-ujVh4z2tyrmX0DqnslhnHH4BHYMM3oLBVfpOjM/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-micrometer-metrics-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-micrometer-metrics/4.0.7/spring-boot-starter-micrometer-metrics-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-micrometer-metrics@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RCLsV0w9Jetdqk52RaY-82h5QcXNUhgpyk9KtTnGLIo/spring-boot-starter-micrometer-metrics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-micrometer-metrics",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/4.0.7/spring-boot-starter-security-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xU16UIvVDhemOvmEfhGBWCVeAXDWxmVfnV69Sxoajps/spring-boot-starter-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-security",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-runtime-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat-runtime/4.0.7/spring-boot-starter-tomcat-runtime-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/smQS_vJshR5mZbOqs45ZzxuX97eGOx0O4XWLG0-bbaU/spring-boot-starter-tomcat-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat-runtime@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat-runtime",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/4.0.7/spring-boot-starter-tomcat-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QOx5E6f89VCJJCxP8iZ0pmGLx54i1IOnNdNHwEjBl64/spring-boot-starter-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-validation/4.0.7/spring-boot-starter-validation-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jmIO7gxoRIQKibAGp7HdJEejGw0SSSt0pcJaKsN64is/spring-boot-starter-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-validation",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/4.0.7/spring-boot-starter-web-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1QPJXWiJbQOe0mudv-kEkVNqw1hhzMJwsIkK9tGaCcc/spring-boot-starter-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-web",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/4.0.7/spring-boot-starter-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IJ8UMp7zJZV_ai2gbNzNDXS_9ZCwjBowuAnsf-hHNN0/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-tomcat-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andrew McGhie; Andy Clement; Andy Wilkinson; Artsiom Yudovin; Aurelien Leboulanger; Brian Clozel; Brock Mills; Chris Bono; Christoffer Sawicki; Cyril Dangerville; Dave Syer; Dawid Antecki; Dirk Deyne; Eddu Melendez; Florian Storz; HaiTao Zhang; Ivan Sopov; Kristine Jetzke; Lasse Wulff; Marcos Barbero; Michael Weidmann; Moritz Halbritter; Olivier Lamy; Parviz Rozikov; Pascal Zwick; Quinten De Swaef; Rafiullah Hamedy; Scott Frederick; Stephane Nicoll; VMware, Inc.; Venil Noronha; Victor Mandujano; Yulin Qin; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-tomcat/4.0.7/spring-boot-tomcat-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-tomcat@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DxmoHeh3U488--w8gaUme3SwLEjDsmT6dJgylS3xMpA/spring-boot-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-tomcat",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-validation-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Dang Zhicairang; Madhura Bhave; Matej Nedic; Stephane Nicoll; VMware, Inc.; Yanming Zhou; Zisis Pavloudis; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-validation/4.0.7/spring-boot-validation-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-validation@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/34tHnJuQvNWzw_YkvAn0DIrXSky-Qk788qRX5wPtpgI/spring-boot-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-validation",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-web-server-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Andrew McGhie; Andy Wilkinson; Artsiom Yudovin; Aurelien Leboulanger; Brian Clozel; Chris Bono; Dave Syer; David Liu; Dirk Deyne; Eddu Melendez; Florian Storz; HaiTao Zhang; Ivan Sopov; Lasse Wulff; Madhura Bhave; Marcos Barbero; Michael Weidmann; Olivier Lamy; Parviz Rozikov; Quinten De Swaef; Rafiullah Hamedy; Scott Frederick; Stephane Nicoll; VMware, Inc.; Venil Noronha; Victor Mandujano; Vladimir Tsanev; Yunkun Huang; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-web-server/4.0.7/spring-boot-web-server-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-web-server@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bn8sVewkLUiuu8C2NaFyf6ZibTm5er5CCtEQfalXLvA/spring-boot-web-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-web-server",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-webmvc-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Andy Wilkinson; Artsiom Yudovin; Brian Clozel; Bruce Brouwer; Dave Syer; Dmytro Nosan; Eddu Melendez; Jon Schneider; Kristine Jetzke; Madhura Bhave; Michael Stummvoll; Moritz Halbritter; Scott Frederick; Sebastien Deleuze; Stephane Nicoll; VMware, Inc.; Vedran Pavic; Xiong Tang; Yanming Zhou; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-webmvc/4.0.7/spring-boot-webmvc-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-webmvc@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dn9lskemUkH78llY358rA_jWkauQ5u9XgSQc3S9ulA0/spring-boot-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-webmvc",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-4.0.7",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Litvitski; Andy Wilkinson; Anton Telechev; Artsiom Yudovin; Ben Hale; Brian Clozel; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoph Strobl; Craig Burke; Daeho Kwon; Daniel Fullarton; Dave Syer; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Jakub Kubrynski; Jared Bates; Jay Choi; Jean de Klerk; Jeremy Rickard; Jonatan Ivanov; Krzysztof Krason; Lasse Wulff; Madhura Bhave; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Moritz Halbritter; Nan Chiu; Nguyen Bao Sach; Nguyen Sach; Oliver Gierke; Pavel Anisimov; Piotr P. Karwasz; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/4.0.7/spring-boot-4.0.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@4.0.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J1DmdjO5Ki-RsjCdi2rDdNaWGdeLHFLdIoGGsnY5bEw/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "4.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-7.0.6",
    "copyrightText" : "Copyright 2004-present the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Arfat Chaus; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ding Hao; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Gaurav Tiwari; Gerardo Roza; Ivan Pavlov; Jerome Wacongne <ch4mp@c4-soft.com>; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Ovidiu Popa; Parikshit Dutta; Pat McCusker; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Sebastien Deleuze; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/7.0.6/spring-security-config-7.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@7.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dNs7qFKB14iD3QPzCbUvKn5Of3gS2zCxsP32Mr54a_s/spring-security-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-config",
    "versionInfo" : "7.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-7.0.6",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2002-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Andrei Stefan; Andrey Litvitski; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Heejong Yoon; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; Junhyeok Lee; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Mike Heath; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Scott Battaglia; Sebastien Deleuze; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yanming Zhou; Yannick Lombardi; Yoobin Yoon; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/7.0.6/spring-security-core-7.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1OVf-M2OHMzrQSMVuDjedGUnuucWVoAG1Rk8g0KtH1Q/spring-security-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@7.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-core",
    "versionInfo" : "7.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-7.0.6",
    "copyrightText" : "Copyright (c) 2006 Damien Miller <djm@mindrot.org>\nCopyright 2004-present the original author or authors\n\nAuthors: Alan Stewart; Andrey Litvitski; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Mehrdad Bozorgmehr; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/7.0.6/spring-security-crypto-7.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-fuIcrzw-4h1khy08YWJ9xhfYuefGiPOx7o0E3Nbf1U/spring-security-crypto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@7.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "(Apache-2.0 AND ISC)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-crypto",
    "versionInfo" : "7.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-7.0.6",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Claudenir Freitas; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Daeho Kwon; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Michal Okosy; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Nikita Konev; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sangyoon Jeong; Sebastien Deleuze; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Yoobin Yoon; Zeeshan Adnan; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/7.0.6/spring-security-web-7.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8lU3XmhzpssdZ6vCCUZ_F175FIU8DoTfM9UNBvz7ibA/spring-security-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@7.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-web",
    "versionInfo" : "7.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/7.0.8/spring-aop-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oenv7YBcOpHVXiw7XHwqkaKuasrSM5HwCWHuLVXZ_ig/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@7.0.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/7.0.8/spring-beans-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@7.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NXX8nGyfO5x1CM2qgZuzg_qhA1FIrTwpBm3iy9_r0Ck/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Daeho Kwon; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; Hyunsang Han; INRIA, France Telecom; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/7.0.8/spring-context-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@7.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/giJkBVDacuBJ1xwfKRx4zRxSSfMv-sL52dIf9EE1_do/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Florian Hof; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Janne Valkealahti https://www.graalvm.org/jdk23/reference-manual/native-image/metadata; Jason Zaugg; Jens Schauder; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Mahmoud Ben Hassine; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/7.0.8/spring-core-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@7.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3LuuZUdbku8IscG0RIpiywKZuPul4ZwnoPpBOqpVsrs/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/7.0.8/spring-expression-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@7.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UUcGLE1Tf1JWDzCtngL52uzoYmNY3dy-03I4KZZlBns/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Dung Dang Minh; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kamil Doroszkiewicz; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; Mengqi Xu; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sebstien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Tommy Ludwig; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/7.0.8/spring-web-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@7.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JMCdg7kZshBs1MXeTWuA6UKGtZXBZtQ8Y0DljgqaaSg/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-7.0.8",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Taeik Lim; Thomas Risberg; Vedran Pavic; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/7.0.8/spring-webmvc-7.0.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vcSVfi1K_2GZV5KrGE8kt_faEEZvGOcPuUnmUKB59Ms/spring-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@7.0.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-webmvc",
    "versionInfo" : "7.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.webjars-swagger-ui-5.32.14",
    "copyrightText" : "Copyright 2020-2021 SmartBear Software Inc.\nCopyright (c) Facebook, Inc. and its affiliates\nCopyright (c) 2018 Jed Watson\nCopyright (c) 2014-2015, Jon Schlinkert\nCopyright (c) Meta Platforms, Inc. and affiliates\nCopyright (c) 2013-2018 Viacheslav Lotsmanov\n(c) Cure53 and other contributors\n(c) 2014-2025 Denis Pushkarev\n(c) 2017-2021 Joachim Wester\n(c) 2017-2022 Joachim Wester\n\nAuthors: Cure53 and other contributors; Denis Pushkarev; Facebook, Inc. and its affiliates; Feross Aboukhadijeh <https://feross.org>; Jed Watson; Joachim Wester; Jon Schlinkert; Meta Platforms, Inc. and affiliates; SmartBear Software Inc.; Viacheslav Lotsmanov; Viacheslav Lotsmanov <lotsmanov89@gmail.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/webjars/swagger-ui/5.32.14/swagger-ui-5.32.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qyeQ4048WR7r5sbwBCLCyFXTIIS3CNYTf1ksTHupwYc/v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.webjars/swagger-ui@5.32.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.webjars.org",
    "licenseConcluded" : "(BlueOak-1.0.0 AND WTFPL AND CC-BY-4.0 AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND MPL-2.0 AND Apache-2.0 AND ISC AND CC0-1.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.webjars/swagger-ui",
    "versionInfo" : "5.32.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.webjars-webjars-locator-lite-1.1.3",
    "copyrightText" : "Copyright (c) 2013 James Ward",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/webjars/webjars-locator-lite/1.1.3/webjars-locator-lite-1.1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1p-P7JhYazV4D5b6TR45farOK0Q1A7VM_vd4W7gguPE/webjars-locator-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.webjars/webjars-locator-lite@1.1.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://webjars.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.webjars/webjars-locator-lite",
    "versionInfo" : "1.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.5",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.5/snakeyaml-2.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZISufQ7AuJJkBn0SJLVxgmCX3s3xvCN3Nv6CQKpI-r8/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-tools.jackson.core-jackson-core-3.1.4",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) Daniel Lemire\nCopyright (c) 2022 Daniel Lemire. Boost Software\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/tools/jackson/core/jackson-core/3.1.4/jackson-core-3.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9-HMsOonzAJoQlCNSFMRdLBjkOahakS56wS4eXOusbw/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/tools.jackson.core/jackson-core@3.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSL-1.0 AND BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/tools.jackson.core/jackson-core",
    "versionInfo" : "3.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-tools.jackson.core-jackson-databind-3.1.4",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/tools/jackson/core/jackson-databind/3.1.4/jackson-databind-3.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ko4_6aH_rF4OMaEJxPBQq3kh1KcMBtDXWqwC0fJXnDk/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/tools.jackson.core/jackson-databind@3.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/tools.jackson.core/jackson-databind",
    "versionInfo" : "3.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-tools.jackson.dataformat-jackson-dataformat-yaml-3.1.4",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/tools/jackson/dataformat/jackson-dataformat-yaml/3.1.4/jackson-dataformat-yaml-3.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/tools.jackson.dataformat/jackson-dataformat-yaml@3.1.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H9XohbHisLwFtTCrfCZzz-i2IRAO-hRBec4j9JtMJUs/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/tools.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "3.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-animations-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/animations/-/animations-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/animations@21.2.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_TyUDYDHMN-QaYkTtr8-jPorvtEkQjun8D2RIyr6ZJ8/angular-animations-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/animations",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-cdk-21.2.14",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2026 Google LLC.",
    "downloadLocation" : "https://registry.npmjs.org/@angular/cdk/-/cdk-21.2.14.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/cdk@21.2.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JJ1Pg6u1vcYNSMtf1E7zLwa1goSfgRYXZ0uybLfkqSw/angular-cdk-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/components#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/cdk",
    "versionInfo" : "21.2.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-common-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/common/-/common-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/common@21.2.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nJRYjK3tFJsfCAbmRRWlehrOMeuHq8sPrFvUq3aI1Es/angular-common-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/common",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-compiler-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/compiler/-/compiler-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/compiler@21.2.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cnU5FHvrWW7jst8JiG-D0DMF_PxXj5qasaY5u2-krio/angular-compiler-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/compiler",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-core-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/core/-/core-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WnOy7izMqrS7MIrn4wOWdAaIR6wbistxFErTdux1EYM/angular-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/core@21.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/core",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-forms-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/forms/-/forms-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XkWluXsFWYsqTzO85kU0CbZnjAfP9Kqf4BdAVEKW7rA/angular-forms-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/forms@21.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/forms",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-platform-browser-dynamic-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qq_XnE9oN3bD-7DE9OTph-V0wmKa6Ly4ZeF5rFpoNn8/angular-platform-browser-dynamic-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/platform-browser-dynamic@21.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/platform-browser-dynamic",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-platform-browser-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/v6vOPc52VhxnZmhhUvy2_Bqrr20xi64GBBJmdKg3ioM/angular-platform-browser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/platform-browser@21.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/platform-browser",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-router-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/router/-/router-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kdKkzOphiy8rKHvfkKg3KCBfG8Sq5LtvrybiZUOTUjQ/angular-router-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/router@21.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular/tree/main/packages/router",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/router",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-upgrade-21.2.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/upgrade/-/upgrade-21.2.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J7uY9m_SS-CfMZRXTwR9PWliGctC0aHs-Oz_c1_ubkA/angular-upgrade-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/upgrade@21.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/upgrade",
    "versionInfo" : "21.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fontsource-public-sans-5.3.0",
    "copyrightText" : "Copyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans)\nCopyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans) OFL-1.1 (https://openfontlicense.org)\nCopyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans) PublicSans-Italic\n\nAuthors: Google Inc , license' OFL-1.1 homepage' https://fontsource.org/fonts/public-sans; The Public Sans Project Authors; The Public Sans Project Authors OFL-1.1; The Public Sans Project Authors PublicSans-Italic",
    "downloadLocation" : "https://registry.npmjs.org/@fontsource/public-sans/-/public-sans-5.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40fontsource/public-sans@5.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EWG-Us328vSoVY8J0D6WAWx1p23ww4pBeDq-xoJRhvE/fontsource-public-sans-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://fontsource.org/fonts/public-sans",
    "licenseConcluded" : "OFL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@fontsource/public-sans",
    "versionInfo" : "5.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ng-select-ng-select-21.8.2",
    "copyrightText" : "Copyright (c) Andzej Maciusovic",
    "downloadLocation" : "https://registry.npmjs.org/@ng-select/ng-select/-/ng-select-21.8.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ng-select/ng-select@21.8.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NlKYZY-Z3p_DP_tGRaUd5uZF3JIT5pZWIV_5dFusj6U/ng-select-ng-select-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ng-select/ng-select#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ng-select/ng-select",
    "versionInfo" : "21.8.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-formly-core-6.1.3",
    "copyrightText" : "(c) Zeno Rocha\nCopyright (c) 2016 FormlyJS\nCopyright 2021 Formly\nCopyright Google LLC",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-formly/core/-/core-6.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-formly/core@6.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1K0C-6gCcy-8Zgrr632HBIx1JJYEqb9RMdXWbC5s3fg/ngx-formly-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-formly/ngx-formly#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-formly/core",
    "versionInfo" : "6.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-translate-core-17.0.0",
    "copyrightText" : "Copyright (c) 2024 Andreas Low / CodeAndWeb GmbH\nCopyright (c) 2018 Olivier Combe",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-translate/core/-/core-17.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-translate/core@17.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ravQZBc9oH3aBtP6-CR-q5VCYoanECa1EiKKtBBv0Fg/ngx-translate-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-translate/core#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-translate/core",
    "versionInfo" : "17.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-standard-schema-spec-1.1.0",
    "copyrightText" : "Copyright (c) 2024 Colin McDonnell",
    "downloadLocation" : "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qcdgh79t3AvINTNPldr5rOH_BiIU5ih_ZO2nSNApWN0/standard-schema-spec-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40standard-schema/spec@1.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://standardschema.dev",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@standard-schema/spec",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-cometd-4.0.8",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/@types/cometd/-/cometd-4.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jQ8uwmzCbSW9kj5DJ73srKG6XYQ24-6KfNpebDopTz4/types-cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/cometd@4.0.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cometd",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/cometd",
    "versionInfo" : "4.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-node-20.19.43",
    "copyrightText" : "Copyright Node.js contributors\nCopyright (c) Microsoft Corporation\n\nAuthors: (https://github.com/NodeJS), Linus Unneback (https://github.com/LinusU); Microsoft Corporation; Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias); Node.js contributors",
    "downloadLocation" : "https://registry.npmjs.org/@types/node/-/node-20.19.43.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hFU8ZKR-YH7SOAS7dPtp6DEhoujMOpifozEcBsLLfxo/types-node-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/node@20.19.43",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/node",
    "versionInfo" : "20.19.43"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-trusted-types-2.0.7",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FDb83qTqoHAh2GLZD6F-MtzBBOk3pkywgCpcSSiieNI/types-trusted-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/trusted-types@2.0.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/trusted-types",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/trusted-types",
    "versionInfo" : "2.0.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zip.js-zip.js-2.7.71",
    "copyrightText" : "Copyright (c) 2023, Gildas Lormeau\n(c) Emily Stark, Mike Hamburg, Dan Boneh, Stanford University 2008-2010",
    "downloadLocation" : "https://registry.npmjs.org/@zip.js/zip.js/-/zip.js-2.7.71.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LFfHtwBBUtRxt7xa14YLGv9bfIBRxWtmo78zk-MqWcE/zip.js-zip.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40zip.js/zip.js@2.7.71",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gildas-lormeau.github.io/zip.js",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@zip.js/zip.js",
    "versionInfo" : "2.7.71"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-errors-3.0.0",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv-errors/-/ajv-errors-3.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DCt5q6ZWp_q1WN9HRR2b649BwDTCP23TFNBNM_DIqIE/ajv-errors-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv-errors@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/ajv-errors#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv-errors",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-formats-3.0.1",
    "copyrightText" : "Copyright (c) 2020 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DA7YDThbNVa2NueC5SlUxf2wZxEqzgCFJkYmxcQV9ho/ajv-formats-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv-formats@3.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ajv-validator/ajv-formats#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv-formats",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-keywords-5.1.0",
    "copyrightText" : "Copyright (c) 2016 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-5.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv-keywords@5.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/z9pYytql-Yj287B43D0FvgNJ0K7P9j2AV_ZtSmIIKjw/ajv-keywords-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/ajv-keywords#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv-keywords",
    "versionInfo" : "5.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-8.20.0",
    "copyrightText" : "Copyright (c) 2015-2021 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv@8.20.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DCsSWdqddQGrTf-3fsOWKPDIJNFi-MMX1b1xlVRDmsw/ajv-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://ajv.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv",
    "versionInfo" : "8.20.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angularx-qrcode-21.0.5",
    "copyrightText" : "Copyright (c) 2018 - present Andreas Jacob\nCopyright (c) 2018 - present Andreas Jacob (Cordobo.com) (http://cordobo.com/)",
    "downloadLocation" : "https://registry.npmjs.org/angularx-qrcode/-/angularx-qrcode-21.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/angularx-qrcode@21.0.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t8qfublMLHHm8bP4uyCyqZD7X7Gimer2ymhL6bGWPMM/angularx-qrcode-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cordobo.github.io/angularx-qrcode/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/angularx-qrcode",
    "versionInfo" : "21.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ansi-regex-5.0.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ansi-regex@5.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pryCB1Os7QkXhh2Ow-Gcz_C2n0kWpF-wb_6j31zTc3Q/ansi-regex-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/ansi-regex#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ansi-regex",
    "versionInfo" : "5.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ansi-styles-4.3.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KsPzv9KezZT9s8gmvV44kKHdUD4ru2WLwdc0edbm8Gg/ansi-styles-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ansi-styles@4.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/ansi-styles#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ansi-styles",
    "versionInfo" : "4.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-async-function-1.0.0",
    "copyrightText" : "Copyright (c) 2016 EduardoRFS",
    "downloadLocation" : "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2RldFwgmpj14JQDwki0_EY1ZY4cP9_Bksu0FCARear4/async-function-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/async-function@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/async-function#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/async-function",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-async-generator-function-1.0.0",
    "copyrightText" : "Copyright (c) 2016 EduardoRFS",
    "downloadLocation" : "https://registry.npmjs.org/async-generator-function/-/async-generator-function-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3GPFPixcerxG4F_bzTVfxWm6-3JmMQo5jlP2Iznny4I/async-generator-function-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/async-generator-function@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/async-generator-function#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/async-generator-function",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-asynckit-0.4.0",
    "copyrightText" : "Copyright (c) 2016 Alex Indigo",
    "downloadLocation" : "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/S-GhWAct26Jqh6jXnKET6TV6iZkmZfM_Ay35-0Y2XrA/asynckit-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/asynckit@0.4.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/alexindigo/asynckit#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/asynckit",
    "versionInfo" : "0.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-autoprefixer-10.6.2",
    "copyrightText" : "Copyright 2013 Andrey Sitnik <andrey@sitnik.es>",
    "downloadLocation" : "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.6.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pot_Stln6LL5dCPBmei00SGn6lXxyoYIp1t6bJBfdqc/autoprefixer-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/autoprefixer@10.6.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/postcss/autoprefixer#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/autoprefixer",
    "versionInfo" : "10.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-b2a-1.1.2",
    "copyrightText" : "Copyright (c) 2013 kaelzhang <i@kael.me> , contributors http://kael.me\n\nAuthors: kaelzhang , contributors",
    "downloadLocation" : "https://registry.npmjs.org/b2a/-/b2a-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6qECBYfF22Wx8lhj3VtD3EPPeqZJmddgsEnENsdRh7Y/b2a-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/b2a@1.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/kaelzhang/b2a#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/b2a",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-baseline-browser-mapping-2.11.34",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.34.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/B4nttgL_ymP6N-PvmMUY63JF0v5UECS9uNhC7ldXhdM/baseline-browser-mapping-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/baseline-browser-mapping@2.11.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/web-platform-dx/baseline-browser-mapping#readme",
    "licenseConcluded" : "(BlueOak-1.0.0 AND Zlib AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND ISC AND CC0-1.0 AND MIT AND Python-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/baseline-browser-mapping",
    "versionInfo" : "2.11.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-browserslist-4.29.5",
    "copyrightText" : "Copyright 2014 Andrey Sitnik <andrey@sitnik.es> and other contributors\n\nAuthors: Andrey Sitnik <andrey@sitnik.es>; Andrey Sitnik and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/browserslist/-/browserslist-4.29.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/browserslist@4.29.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M4nijiSj8DVAreZKxVQm0URlGebGOzQVb-mUyTLHDF0/browserslist-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/browserslist/browserslist#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/browserslist",
    "versionInfo" : "4.29.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-call-bind-apply-helpers-1.0.2",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/call-bind-apply-helpers@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RfyP9Rvdq1I1dVEo5pEORTIOoG1WWWHu7sDBgPQCq-I/call-bind-apply-helpers-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/call-bind-apply-helpers#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/call-bind-apply-helpers",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-camelcase-5.3.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/camelcase@5.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BJ845nXQzKTSGf7-MlouHsZxnC7ZUo5rUaI5g8GkHEY/camelcase-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/camelcase#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/camelcase",
    "versionInfo" : "5.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-caniuse-lite-1.0.30001820",
    "copyrightText" : "NONE\n\nAuthors: Ben Briggs",
    "downloadLocation" : "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001820.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/caniuse-lite@1.0.30001820",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BL70u8b05yxzWz2l5mvHaaT2YUQkQON7PhWlbwLI5Rg/caniuse-lite-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/browserslist/caniuse-lite#readme",
    "licenseConcluded" : "CC-BY-4.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/caniuse-lite",
    "versionInfo" : "1.0.30001820"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-chroma-js-3.1.2",
    "copyrightText" : "Copyright (c) 2002 Cynthia Brewer, Mark Harrower, and The Pennsylvania State University\nCopyright (c) 2011-2024, Gregor Aisch",
    "downloadLocation" : "https://registry.npmjs.org/chroma-js/-/chroma-js-3.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lcN95vTjxsUhZnt_SJUbkplgDoVRCMdwY2rJwbaOMiw/chroma-js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/chroma-js@3.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/gka/chroma.js",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/chroma-js",
    "versionInfo" : "3.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cliui-6.0.0",
    "copyrightText" : "Copyright (c) 2015, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lcKmc1rYLHdt_-RVZTP7ma5e-Vfwk_yOROxv9yJ2oUA/cliui-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cliui@6.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/cliui#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cliui",
    "versionInfo" : "6.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-color-convert-2.0.1",
    "copyrightText" : "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\nCopyright (c) 2011-2016, Heather Arthur and Josh Junon",
    "downloadLocation" : "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/REHQuu8ZG_MV0PNqyGYtSM-JzA9Rx0PCvu791qee-UQ/color-convert-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/color-convert@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Qix-/color-convert#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/color-convert",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-color-name-1.1.4",
    "copyrightText" : "Copyright (c) 2015 Dmitry Ivanov",
    "downloadLocation" : "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vqFwittjJcGQSn5lTjNKvvmt9SvKLdXRlcYtHEvmr_U/color-name-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/color-name@1.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/colorjs/color-name",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/color-name",
    "versionInfo" : "1.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-combined-stream-1.0.8",
    "copyrightText" : "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>",
    "downloadLocation" : "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sb98i_QpOB4KjfYDZeF2HN-Qz8pViO9Dt9-3xpzJWE8/combined-stream-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/combined-stream@1.0.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/felixge/node-combined-stream",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/combined-stream",
    "versionInfo" : "1.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cometd-nodejs-client-1.0.2",
    "copyrightText" : "Copyright (c) 2020 the original author or authors.\nCopyright (c) 2017 the original author or authors.",
    "downloadLocation" : "https://registry.npmjs.org/cometd-nodejs-client/-/cometd-nodejs-client-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KXPwysygtyexHGYee7YJHoCBTXL2tBOIpyex10XR1zM/cometd-nodejs-client-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cometd-nodejs-client@1.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cometd.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cometd-nodejs-client",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cometd-4.0.8",
    "copyrightText" : "Copyright (c) 2008-2020 the original author or authors",
    "downloadLocation" : "https://registry.npmjs.org/cometd/-/cometd-4.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w_UUc94DVWCl3lQXfg6tnRL9AnHdCtrK_N0MQS7ZKq4/cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cometd@4.0.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cometd.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cometd",
    "versionInfo" : "4.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cross-fetch-4.1.0",
    "copyrightText" : "Copyright (c) 2017 Leonardo Quixada\nCopyright (c) 2010 Thomas Fuchs (http://script.aculo.us/thomas)\n(c) Leonardo Quixada (https://twitter.com/lquixada/)",
    "downloadLocation" : "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cross-fetch@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cSgzTunjfUQTmxzZ6v8wYpPDq-Cm1UM4O08V9xm4kTk/cross-fetch-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lquixada/cross-fetch",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cross-fetch",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-decamelize-1.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/decamelize@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7hPNmksJGGUVNjqK4-xmM2ycsJ34XR6gA32AWLlWy0o/decamelize-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/decamelize#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/decamelize",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-delayed-stream-1.0.0",
    "copyrightText" : "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>",
    "downloadLocation" : "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/delayed-stream@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i91dPg39ZMhRC3k2m_QtfJoyGRRDbuXC2-tGtQVOdeQ/delayed-stream-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/felixge/node-delayed-stream",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/delayed-stream",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dijkstrajs-1.0.3",
    "copyrightText" : "Copyright (c) 2008 Wyatt Baldwin <self@wyattbaldwin.com>",
    "downloadLocation" : "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dijkstrajs@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mzVd8sQORR6Yo202Tar_VRn42ox_CoryGR1_WKr5Sqs/dijkstrajs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/tcort/dijkstrajs",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dijkstrajs",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dompurify-3.4.17",
    "copyrightText" : "Copyright (c) 2014-present, Facebook, Inc.\n(c) Cure53 and other contributors\n\nAuthors: Cure53 and other contributors; Dr.-Ing. Mario Heiderich, Cure53 <mario@cure53.de> (https://cure53.de/); Facebook, Inc.",
    "downloadLocation" : "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dompurify@3.4.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YIn1rsGqRm-ItJcrynungIG_CcnAFv1pa2FTKqbMUOo/dompurify-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/cure53/DOMPurify",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dompurify",
    "versionInfo" : "3.4.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dunder-proto-1.0.1",
    "copyrightText" : "Copyright (c) 2024 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dunder-proto@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1QNTY6EwzDIuCxOBW7dMBbOBcmGN3TAY5erMzjq4EkY/dunder-proto-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/dunder-proto#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dunder-proto",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-echarts-6.1.0",
    "copyrightText" : "Copyright 2010-2016 Mike Bostock\nCopyright 2017-2026 The Apache Software Foundation",
    "downloadLocation" : "https://registry.npmjs.org/echarts/-/echarts-6.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/echarts@6.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aWKGKF2k88bV-wBkeCF0VDQTPpGWwE21IK7HbTybK80/echarts-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://echarts.apache.org",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/echarts",
    "versionInfo" : "6.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-electron-to-chromium-1.5.467",
    "copyrightText" : "Copyright 2018 Kilian Valkhof",
    "downloadLocation" : "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.467.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/electron-to-chromium@1.5.467",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GllfAk1DGx4SmqCwNqOkdugDQRnIfTUa5Qfs8GgxOCg/electron-to-chromium-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Kilian/electron-to-chromium#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/electron-to-chromium",
    "versionInfo" : "1.5.467"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-emoji-regex-8.0.0",
    "copyrightText" : "Copyright Mathias Bynens <https://mathiasbynens.be/>",
    "downloadLocation" : "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/emoji-regex@8.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HrkmCoNKzCLs5PUK4Hy3ZAm6kBWIRObcx4ObE5b7k2s/emoji-regex-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mths.be/emoji-regex",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/emoji-regex",
    "versionInfo" : "8.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-entities-8.1.0",
    "copyrightText" : "Copyright (c) Felix Bohm",
    "downloadLocation" : "https://registry.npmjs.org/entities/-/entities-8.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1I6LptoH3PPCnxDsEF8DhJyF0I0PDS-nmNy5uWSiVMQ/entities-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/entities@8.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fb55/entities#readme",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/entities",
    "versionInfo" : "8.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-define-property-1.0.1",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PFZe90PGr0WHQK30ILi-715OUn2ecHkxbM33to9pY4g/es-define-property-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-define-property@1.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-define-property#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-define-property",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-errors-1.3.0",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-errors@1.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cz3mtFM70O79cu1F-3AFge82G5tlmelH5WzY0yijCf0/es-errors-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-errors#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-errors",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-object-atoms-1.1.2",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-object-atoms@1.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1oXbU8Ybs6rHC49s62H0GruBXQ8rXu_dakmAThAdbH8/es-object-atoms-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-object-atoms#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-object-atoms",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-set-tostringtag-2.1.0",
    "copyrightText" : "Copyright (c) 2022 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-set-tostringtag@2.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yi0UGdnXxdCeOPweR4bIsry9I9ssBUoHqGIB6Rf0iN8/es-set-tostringtag-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/es-set-tostringtag#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-set-tostringtag",
    "versionInfo" : "2.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-escalade-3.2.0",
    "copyrightText" : "Copyright (c) Luke Edwards <luke.edwards05@gmail.com> (lukeed.com)\n(c) Luke Edwards (https://lukeed.com)",
    "downloadLocation" : "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/escalade@3.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WD7ql1g0LBcf9qybMCX8aGsyxL5-9OsHakC_aNDZMyk/escalade-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lukeed/escalade#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/escalade",
    "versionInfo" : "3.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fast-deep-equal-3.1.3",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fast-deep-equal@3.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tBpQ2NyVbSqoaOhBAL5hEAWFi6OWxdq98Rb28UGwQgg/fast-deep-equal-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/fast-deep-equal#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fast-deep-equal",
    "versionInfo" : "3.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fast-uri-3.1.9",
    "copyrightText" : "Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae\nCopyright (c) 2021-present The Fastify team",
    "downloadLocation" : "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fast-uri@3.1.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ion23c1QxyIHXOBxmr4m_sos4Q1WimnAFNMhfioJhao/fast-uri-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fastify/fast-uri",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fast-uri",
    "versionInfo" : "3.1.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-file-saver-2.0.5",
    "copyrightText" : "Copyright (c) 2016 Eli Grey",
    "downloadLocation" : "https://registry.npmjs.org/file-saver/-/file-saver-2.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/file-saver@2.0.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c0wLlWRB4xRJCohCwLA1laadNw86wENbfecPYezKOBA/file-saver-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eligrey/FileSaver.js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/file-saver",
    "versionInfo" : "2.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-find-up-4.1.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/find-up@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5KG9yfYrcV5fBCNkQ_9Tb9cbN3dCpVGQA1mAJr9r5fM/find-up-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/find-up#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/find-up",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-form-data-4.0.6",
    "copyrightText" : "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and contributors\n\nAuthors: Felix Geisendorfer <felix@debuggable.com> (http://debuggable.com/); Felix Geisendorfer and contributors",
    "downloadLocation" : "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/form-data@4.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4eTvrHVMlfeifQ0fpDqalxZF5oydK6lryid0JAgeK7Y/form-data-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/form-data/form-data#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/form-data",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fraction.js-5.3.4",
    "copyrightText" : "Copyright (c) 2025 Robert Eisele\nCopyright (c) 2025, Robert Eisele (https://raw.org/)",
    "downloadLocation" : "https://registry.npmjs.org/fraction.js/-/fraction.js-5.3.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cT2T8H4WOYAXbgDJDsDCrO5Oy7KYAdSlbyoN7uK-0X8/fraction.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fraction.js@5.3.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://raw.org/article/rational-numbers-in-javascript/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fraction.js",
    "versionInfo" : "5.3.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-function-bind-1.1.2",
    "copyrightText" : "Copyright (c) 2013 Raynos",
    "downloadLocation" : "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gw_r-x56GGR_iCQSAKX196LkSvzy_mxTaqZp-tIrTI8/function-bind-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/function-bind@1.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Raynos/function-bind",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/function-bind",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-generator-function-2.0.1",
    "copyrightText" : "Copyright (c) 2015 Tiancheng \"Timothy\" Gu",
    "downloadLocation" : "https://registry.npmjs.org/generator-function/-/generator-function-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/generator-function@2.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R8OgEMnPz63bENmGm1_CFMIujMCNSRxLeBEfZ_cnZaQ/generator-function-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TimothyGu/generator-function#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/generator-function",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-caller-file-2.0.5",
    "copyrightText" : "Copyright 2018 Stefan Penner",
    "downloadLocation" : "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-caller-file@2.0.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F4Rz8imZq-ZwesGtnC4vb-532H3QelMVZGeFvqBmeTg/get-caller-file-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/stefanpenner/get-caller-file#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-caller-file",
    "versionInfo" : "2.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-intrinsic-1.3.1",
    "copyrightText" : "Copyright (c) 2020 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-intrinsic@1.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T6e1dZ1KnqZ3US-T_K3qkOcQqeyKYxiij7IeuZUL70o/get-intrinsic-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/get-intrinsic#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-intrinsic",
    "versionInfo" : "1.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-proto-1.0.1",
    "copyrightText" : "Copyright (c) 2025 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-proto@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/U1iOG9iZsOafGaXrer6Nedo2yhHwsulXp1jflPiiT9U/get-proto-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/get-proto#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-proto",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-gopd-1.2.0",
    "copyrightText" : "Copyright (c) 2022 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/gopd@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AUkGxPD6_kY4CcR-QkLG0c_uQEaC6nBqtvRgGuiwzsM/gopd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/gopd#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/gopd",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-gridstack-12.6.0",
    "copyrightText" : "Copyright (c) 2019-2025 Alain Dumesny\nCopyright (c) 2021-2025 Alain Dumesny\n(c) 2014-2018 Pavel Reznikov, Dylan Weiss",
    "downloadLocation" : "https://registry.npmjs.org/gridstack/-/gridstack-12.6.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/gridstack@12.6.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iAdS--vMp13lUBcwQXOp6dz1ilPN8khU44tNz83MsJ8/gridstack-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gridstackjs.com/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/gridstack",
    "versionInfo" : "12.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-has-symbols-1.1.0",
    "copyrightText" : "Copyright (c) 2016 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/has-symbols@1.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bQLPFOOAkaqfEgly0Tyl_5GNyskFH2_vHfldPyJQ0xE/has-symbols-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/has-symbols#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/has-symbols",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-has-tostringtag-1.0.2",
    "copyrightText" : "Copyright (c) 2021 Inspect JS",
    "downloadLocation" : "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/has-tostringtag@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sjgHGehg5OUbkFAWfkfd_ghyl8lAcmMaSqr90KPrnxw/has-tostringtag-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/inspect-js/has-tostringtag#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/has-tostringtag",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-hasown-2.0.4",
    "copyrightText" : "Copyright (c) Jordan Harband and contributors\n\nAuthors: Jordan Harband <ljharb@gmail.com>; Jordan Harband and contributors",
    "downloadLocation" : "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fDcUh-NBcT6hXSgkbNrDGaddOLBHPEGAasjYUaBIkus/hasown-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/hasown@2.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/inspect-js/hasOwn#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/hasown",
    "versionInfo" : "2.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-is-fullwidth-code-point-3.0.0",
    "copyrightText" : "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kXs44MvKbWXpriYUVCC4C-hV7rATfN85z7h3l3P1jGo/is-fullwidth-code-point-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/is-fullwidth-code-point@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/is-fullwidth-code-point",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-isomorphic-cometd-1.1.0",
    "copyrightText" : "No copyright message found; known authors and contributors are: Jan Hommes",
    "downloadLocation" : "https://registry.npmjs.org/isomorphic-cometd/-/isomorphic-cometd-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zR7Y6JAQbCiJHt2YiGuVDj9BiOQ6259H4fX0YJt9DXw/isomorphic-cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/isomorphic-cometd@1.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/isomorphic-cometd",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-json-schema-traverse-1.0.0",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/json-schema-traverse@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GPH99ihjNbG6hhbEUATG2v76RrAZY1KvppTSpPw5Ou8/json-schema-traverse-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/json-schema-traverse#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/json-schema-traverse",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-leaflet-1.9.4",
    "copyrightText" : "Copyright (c) 2010-2011, CloudMade\nCopyright (c) 2010-2023, Volodymyr Agafonkin\n(c) 2010-2011 CloudMade\n(c) 2012 IEM Nexrad\n(c) OpenStreetMap contributors\n(c) 2010-2023 Vladimir Agafonkin\n(c) https://www.openstreetmap.org/Copyright>\n\nAuthors: CloudMade; IEM Nexrad; OpenStreetMap contributors; Vladimir Agafonkin; Volodymyr Agafonkin; https://www.openstreetmap.org/copyright",
    "downloadLocation" : "https://registry.npmjs.org/leaflet/-/leaflet-1.9.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/leaflet@1.9.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s15PBFA0vg5-voX-xCbr2FV6fXWUIJnT881bvWqtBuA/leaflet-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://leafletjs.com/",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/leaflet",
    "versionInfo" : "1.9.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-libphonenumber-js-1.12.10",
    "copyrightText" : "Copyright (c) 2016 @catamphetamine <purecatamphetamine@gmail.com>",
    "downloadLocation" : "https://registry.npmjs.org/libphonenumber-js/-/libphonenumber-js-1.12.10.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/libphonenumber-js@1.12.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t0v0ElsJQ65tY3VW0Gm-kfJxw7qTBdsEKp1KM6vA9O0/libphonenumber-js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/catamphetamine/libphonenumber-js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/libphonenumber-js",
    "versionInfo" : "1.12.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-locate-path-5.0.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/locate-path@5.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mcBu2daI6skkEbs5FYlH5IrhJvFvTjG-B4e640IwOKk/locate-path-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/locate-path#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/locate-path",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-lodash-es-4.18.1",
    "copyrightText" : "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\nAuthors: Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors; John-David Dalton <john.david.dalton@gmail.com>; OpenJS Foundation and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/lodash-es@4.18.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iT-gURgWw6nYiQIujQlJWz4kTs46-w0FALgfMfdUm9U/lodash-es-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lodash.com/custom-builds",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/lodash-es",
    "versionInfo" : "4.18.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-lodash-4.18.1",
    "copyrightText" : "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\nAuthors: Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors; John-David Dalton <john.david.dalton@gmail.com>; OpenJS Foundation and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/lodash@4.18.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/h-q1MYmOuMXv95GYn84GABjTh_8HrHJiO0DO82ubvzw/lodash-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lodash.com/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/lodash",
    "versionInfo" : "4.18.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-marked-14.0.0",
    "copyrightText" : "Copyright (c) 2011-2022, Christopher Jeffrey\nCopyright (c) 2011-2024, Christopher Jeffrey. (MIT Licensed) https://github.com/markedjs/marked\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2004, John Gruber http://daringfireball.net\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)",
    "downloadLocation" : "https://registry.npmjs.org/marked/-/marked-14.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/marked@14.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yyYRhaQQSil1EyBMpBRv1Hyqs-JYWCPhcGcDANXhON0/marked-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://marked.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/marked",
    "versionInfo" : "14.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-marked-16.3.0",
    "copyrightText" : "Copyright (c) 2011-2022, Christopher Jeffrey\nCopyright (c) 2011-2025, Christopher Jeffrey. (MIT Licensed) https://github.com/markedjs/marked\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2004, John Gruber http://daringfireball.net\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)",
    "downloadLocation" : "https://registry.npmjs.org/marked/-/marked-16.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9dSTAQ9jQlTYu--7TXO4dRdD9E94n6pFTw2S9FdZZHk/marked-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/marked@16.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://marked.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/marked",
    "versionInfo" : "16.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-math-intrinsics-1.1.0",
    "copyrightText" : "Copyright (c) 2024 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Y2VBWKony1SYYg4uJVBUGcNaLjI56LXm5-jSvOa80yA/math-intrinsics-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/math-intrinsics@1.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/math-intrinsics#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/math-intrinsics",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-mime-db-1.52.0",
    "copyrightText" : "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015-2022 Douglas Christopher Wilson\nCopyright (c) 2015-2022 Douglas Christopher Wilson <doug@somethingdoug.com>",
    "downloadLocation" : "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fd5ykVcP7_FHdgw-uLZkE-dFCxVOw3HD-VYb0gtpstQ/mime-db-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/mime-db@1.52.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jshttp/mime-db#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/mime-db",
    "versionInfo" : "1.52.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-mime-types-2.1.35",
    "copyrightText" : "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>",
    "downloadLocation" : "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BoNR1JDeSvAHz0ic9MmzYP4Mqj642ofEydT5y0ohymA/mime-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/mime-types@2.1.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jshttp/mime-types#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/mime-types",
    "versionInfo" : "2.1.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-monaco-editor-0.55.1",
    "copyrightText" : "Copyright Drifty Co. http://drifty.com/\nCopyright Joyent, Inc. and other Node contributors\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2015 David Owens II\nCopyright (c) 2007-2017 Einar Lielmanis, Liam Newman, and contributors\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)\nCopyright (c) Microsoft Corporation\nCopyright (c) 2018 The Khronos Group Inc.\nCopyright (c) 1991-2017 Unicode, Inc.\nCopyright (c) 2015 W3C(r) (MIT, ERCIM, Keio, Beihang)\nCopyright (c) 2018 WHATWG\nCopyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang) Disclaimers\nCopyright (c) 2016 - present Microsoft Corporation\n(c) by W3C\n\nAuthors: Christopher Jeffrey; David Owens II; Drifty Co.; Einar Lielmanis, Liam Newman, and contributors; Joyent, Inc. and other Node contributors; MarkedJS; Microsoft Corporation; The Khronos Group Inc.; Unicode, Inc.; W3C; W3C(r) (MIT, ERCIM, Keio, Beihang); W3C(r) (MIT, ERCIM, Keio, Beihang) Disclaimers; WHATWG; the Project",
    "downloadLocation" : "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.55.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/monaco-editor@0.55.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jUqJjxnr5QW836Kdu-DYJuM05OF1Uwdmo_ckZh1KITI/monaco-editor-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoft/monaco-editor",
    "licenseConcluded" : "(CC-BY-4.0 AND LicenseRef-scancode-unicode AND Apache-2.0 AND MIT AND LicenseRef-scancode-khronos)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/monaco-editor",
    "versionInfo" : "0.55.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-bootstrap-21.0.1",
    "copyrightText" : "Copyright Google Inc.\nCopyright Google LLC\nCopyright (c) 2015-2020 Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) JS Foundation and other contributors\nCopyright (c) 2015-2020 Valor Software\nCopyright (c) Valor Software\ncopyright Angular ng-bootstrap team\ncopyright Federico Zivolo and contributors\ncopyright Valor Software\n\nAuthors: Abdel Said https://github.com/abdelsaid; Adam Brunner https://github.com/adambrunner; Agon Cecelia https://github.com/agoncecelia; Ahmed Elkhatib; Ali Hasan https://github.com/alihasan00; Angular ng-bootstrap team; Caio Ribeiro Pereira https://github.com/caio-ribeiro-pereira; Chris Gedrim https://github.com/a90machado; Chris Gedrim https://github.com/chrisgedrim; Danijel Grmec https://github.com/cobaltsis; Dario Beiro https://github.com/quinobravo; Dmitriy Shekhovtsov; Dmitriy Shekhovtsov <valorkin@gmail.com>; Erhan Gundogan https://github.com/erhangundogan; Espen Hovlandsdal https://github.com/rexxars; Federico Zivolo and contributors; Google Inc.; Google LLC; Irakli Janiashvili https://github.com/irakli-janiashvili; Isaac Cambron https://github.com/icambron; Iskren Ivov Chernev https://github.com/ichernev; JS Foundation and other contributors; Jacob Middag https://github.com/middagj; Javkhlantugs Nyamdorj https://github.com/javkhaanj7; Jeeeyul Lee <jeeeyul@gmail.com>; Jens Alm https://github.com/ulmus; John Fischer https://github.com/jfroffice; Joris Roling https://github.com/jorisroling; Jozef Pazin https://github.com/atiris; Julio Napuri https://github.com/julionc; Korenberg Mark https://github.com/socketpair; Kunal Marwaha https://github.com/marwahaha; Kyungwook, Park https://github.com/kyungw00k; LI Long https://github.com/baryon; Levan Tskipuri https://github.com/tskipa; Lorenzo https://github.com/aliem; Matiss Janis Aboltins https://github.com/matissjanis; Matt Grande https://github.com/mattgrande; Mattia Larentis https://github.com/nostalgiaz; Mayank Singhal https://github.com/mayanksinghal; Menelion Elensule https://github.com/Oire; Meysam Bahadori https://github.com/MeysamBahadori; Mikolaj Dadela https://github.com/mik01aj; Moshe Simantov https://github.com/DevelopmentIL; Nurlan Rakhimzhanov https://github.com/nurlan; Per Hansen https://github.com/perhp; Rafal Hirsz https://github.com/evoL; Romy Kusuma https://github.com/rkusuma; Romy Kusuma https://github.com/rkusuma ! reference https://github.com/moment/moment/blob/develop/locale/id.js; Stanislavas Guk https://github.com/ixoster; Tal Ater https://github.com/TalAter; Tim Wood, Iskren Chernev; Tomer Cohen https://github.com/tomer; Valentin Agachi https://github.com/avaly; Valor Software; Venelin Manchev https://github.com/vmanchev; Viktorminator https://github.com/Viktorminator; Vlad Gurdiga https://github.com/gurdiga; Watcharapol Sanitwong https://github.com/tumit; Xavier Arbat https://github.com/XavisaurusRex; Zeno Zeng https://github.com/zenozeng; bustta https://github.com/bustta; forabi https://github.com/forabi; lluchs https://github.com/lluchs; mihan https://github.com/mihan; petrbela https://github.com/petrbela; suupic https://github.com/suupic; zemlanin https://github.com/zemlanin",
    "downloadLocation" : "https://registry.npmjs.org/ngx-bootstrap/-/ngx-bootstrap-21.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-bootstrap@21.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_howk1MvhRm_HcNRKz-FQvm8z2XTA6jJH3ItraX68Xw/ngx-bootstrap-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/valor-software/ngx-bootstrap#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-bootstrap",
    "versionInfo" : "21.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-bootstrap-21.2.2",
    "copyrightText" : "Copyright Google Inc.\nCopyright Google LLC\nCopyright (c) 2015-2020 Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) JS Foundation and other contributors\nCopyright (c) 2015-2020 Valor Software\nCopyright (c) Valor Software\ncopyright Angular ng-bootstrap team\ncopyright Federico Zivolo and contributors\ncopyright Valor Software\n\nAuthors: Abdel Said https://github.com/abdelsaid; Adam Brunner https://github.com/adambrunner; Agon Cecelia https://github.com/agoncecelia; Ahmed Elkhatib; Ali Hasan https://github.com/alihasan00; Angular ng-bootstrap team; Caio Ribeiro Pereira https://github.com/caio-ribeiro-pereira; Chris Gedrim https://github.com/a90machado; Chris Gedrim https://github.com/chrisgedrim; Danijel Grmec https://github.com/cobaltsis; Dario Beiro https://github.com/quinobravo; Dmitriy Shekhovtsov; Dmitriy Shekhovtsov <valorkin@gmail.com>; Erhan Gundogan https://github.com/erhangundogan; Espen Hovlandsdal https://github.com/rexxars; Federico Zivolo and contributors; Google Inc.; Google LLC; Irakli Janiashvili https://github.com/irakli-janiashvili; Isaac Cambron https://github.com/icambron; Iskren Ivov Chernev https://github.com/ichernev; JS Foundation and other contributors; Jacob Middag https://github.com/middagj; Javkhlantugs Nyamdorj https://github.com/javkhaanj7; Jeeeyul Lee <jeeeyul@gmail.com>; Jens Alm https://github.com/ulmus; John Fischer https://github.com/jfroffice; Joris Roling https://github.com/jorisroling; Jozef Pazin https://github.com/atiris; Julio Napuri https://github.com/julionc; Korenberg Mark https://github.com/socketpair; Kunal Marwaha https://github.com/marwahaha; Kyungwook, Park https://github.com/kyungw00k; LI Long https://github.com/baryon; Levan Tskipuri https://github.com/tskipa; Lorenzo https://github.com/aliem; Matiss Janis Aboltins https://github.com/matissjanis; Matt Grande https://github.com/mattgrande; Mattia Larentis https://github.com/nostalgiaz; Mayank Singhal https://github.com/mayanksinghal; Menelion Elensule https://github.com/Oire; Meysam Bahadori https://github.com/MeysamBahadori; Mikolaj Dadela https://github.com/mik01aj; Moshe Simantov https://github.com/DevelopmentIL; Nurlan Rakhimzhanov https://github.com/nurlan; Per Hansen https://github.com/perhp; Rafal Hirsz https://github.com/evoL; Romy Kusuma https://github.com/rkusuma; Romy Kusuma https://github.com/rkusuma ! reference https://github.com/moment/moment/blob/develop/locale/id.js; Stanislavas Guk https://github.com/ixoster; Tal Ater https://github.com/TalAter; Tim Wood, Iskren Chernev; Tomer Cohen https://github.com/tomer; Valentin Agachi https://github.com/avaly; Valor Software; Venelin Manchev https://github.com/vmanchev; Viktorminator https://github.com/Viktorminator; Vlad Gurdiga https://github.com/gurdiga; Watcharapol Sanitwong https://github.com/tumit; Xavier Arbat https://github.com/XavisaurusRex; Zeno Zeng https://github.com/zenozeng; bustta https://github.com/bustta; forabi https://github.com/forabi; lluchs https://github.com/lluchs; mihan https://github.com/mihan; petrbela https://github.com/petrbela; suupic https://github.com/suupic; zemlanin https://github.com/zemlanin",
    "downloadLocation" : "https://registry.npmjs.org/ngx-bootstrap/-/ngx-bootstrap-21.2.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-bootstrap@21.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JjDPOXCxsAApdBls9PU4szYdxEauBIDKksicol98OPE/ngx-bootstrap-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/valor-software/ngx-bootstrap#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-bootstrap",
    "versionInfo" : "21.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-echarts-21.0.0",
    "copyrightText" : "Copyright (c) 2025 Xie, Ziyu",
    "downloadLocation" : "https://registry.npmjs.org/ngx-echarts/-/ngx-echarts-21.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-echarts@21.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8yeFOaf_936cQWRgo9eyZJKMJmWR08pOXq4E3EfRihU/ngx-echarts-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://xieziyu.github.io/ngx-echarts",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-echarts",
    "versionInfo" : "21.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-node-fetch-2.7.0",
    "copyrightText" : "Copyright (c) 2016 David Frank",
    "downloadLocation" : "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/node-fetch@2.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kzqQGMX5X_0CUqeS2pORNCTeMit5nxqHkwlHDM0Q0vI/node-fetch-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/bitinn/node-fetch",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/node-fetch",
    "versionInfo" : "2.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-node-releases-2.0.61",
    "copyrightText" : "Copyright (c) 2017 Sergey Rubanov (https://github.com/chicoxyzzy)",
    "downloadLocation" : "https://registry.npmjs.org/node-releases/-/node-releases-2.0.61.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/node-releases@2.0.61",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/v8kReDbpmWhkvgvCxx6eD8uvARHCkDV-RlkzCz4kTGE/node-releases-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chicoxyzzy/node-releases#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/node-releases",
    "versionInfo" : "2.0.61"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-limit-2.3.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-limit@2.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wLs3QJGAmPkLvvyEQpgvoLANaa5jEDcIkTHGSrEkkz8/p-limit-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-limit#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-limit",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-locate-4.1.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/syjTyWlfsYCoToyZodbpqdLtosK4O9Cd7qqB3DQCH6w/p-locate-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-locate@4.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-locate#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-locate",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-try-2.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lp63hYL0oKqQ8jSAJOlL9E3pD2-_zQC3SpD3Ed3xY1w/p-try-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-try@2.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-try#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-try",
    "versionInfo" : "2.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-parse5-8.0.1",
    "copyrightText" : "Copyright (c) 2013-2019 Ivan Nikulin (ifaaan@gmail.com, https://github.com/inikulin)",
    "downloadLocation" : "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LY_swi-7MS0Cc8CljPK1x1y-LRvfX4LKV8GW4mzwVNE/parse5-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/parse5@8.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://parse5.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/parse5",
    "versionInfo" : "8.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-path-exists-4.0.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C7r66BXJOEPh19AqRa8fw7nhiiAef3HObD6DvSaqjdA/path-exists-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/path-exists@4.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/path-exists#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/path-exists",
    "versionInfo" : "4.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-picocolors-1.1.1",
    "copyrightText" : "Copyright (c) 2021-2024 Oleksii Raspopov, Kostiantyn Denysov, Anton Verinov",
    "downloadLocation" : "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/picocolors@1.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y3S4PmFZoTFxRUafCN1FCpyIaDOmrGoOcPPh14PSwPw/picocolors-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/alexeyraspopov/picocolors#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/picocolors",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-pngjs-5.0.0",
    "copyrightText" : "(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 2014-2017 Vitaly Puzrin and Andrey Tupitsin\nCopyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c) 2012 Kuba Niegowski\nCopyright (c) 2015 Luke Page & Original Contributors\nCopyright Joyent, Inc. and other Node contributors\n\nAuthors: Feross Aboukhadijeh <feross@feross.org> <http://feross.org>; Feross Aboukhadijeh <https://feross.org>; Jean-loup Gailly and Mark Adler; Joyent, Inc. and other Node contributors; Kuba Niegowski; Luke Page & Original Contributors; Thomas Robinson; Vitaly Puzrin and Andrey Tupitsin",
    "downloadLocation" : "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/pngjs@5.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vEkC7M5nP6XDPyn9IS8TK-U_v12OOzTjqQTVYkwOo34/pngjs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lukeapage/pngjs",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/pngjs",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-postcss-value-parser-4.2.0",
    "copyrightText" : "Copyright (c) Bogdan Chadkin <trysound@yandex.ru>\n(c) Bogdan Chadkin",
    "downloadLocation" : "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/postcss-value-parser@4.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XIUBZObHZ_muJT5nx-WvGS3tusNoNtVhv1NuZUbwGLY/postcss-value-parser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TrySound/postcss-value-parser",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/postcss-value-parser",
    "versionInfo" : "4.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-qrcode-1.5.4",
    "copyrightText" : "Copyright (c) 2009 Kazuhiko Arase\nCopyright (c) 2012 Ryan Day\ncopyright Ryan Day 2012",
    "downloadLocation" : "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/qrcode@1.5.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NpwQp6yRMBvCBd8bZSZnaQfSwMyLpEySe6WM2Ya4vC0/qrcode-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/soldair/node-qrcode",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/qrcode",
    "versionInfo" : "1.5.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-directory-2.1.1",
    "copyrightText" : "Copyright (c) 2011 Troy Goode <troygoode@gmail.com>",
    "downloadLocation" : "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-directory@2.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DAJ4a-DMEyDNrzJULU3q6ySfg3AI1NlA-pDU9Xu90hE/require-directory-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/troygoode/node-require-directory/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-directory",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-from-string-2.0.2",
    "copyrightText" : "Copyright (c) Vsevolod Strukchinsky <floatdrop@gmail.com>\n(c) Vsevolod Strukchinsky (http://github.com/floatdrop)",
    "downloadLocation" : "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cQtf5Zgn9qZfx_92S7ti2FKoNI5lybyu4_QVUFh5Iq0/require-from-string-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-from-string@2.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/floatdrop/require-from-string#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-from-string",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-main-filename-2.0.0",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bgDO-b4BOJ6Z0YUw0jAcEYU4QoH7-pddhAfaMoJnlMU/require-main-filename-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-main-filename@2.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/require-main-filename#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-main-filename",
    "versionInfo" : "2.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-rxjs-7.8.2",
    "copyrightText" : "Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors\nCopyright (c) Microsoft Corporation\n\nAuthors: Ben Lesh <ben@benlesh.com>; Google, Inc., Netflix, Inc., Microsoft Corp. and contributors; Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BEsdYpvPKAEf0JgUwcp8y_sPn-3yC3HKDY6POQPP-90/rxjs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/rxjs@7.8.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rxjs.dev",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/rxjs",
    "versionInfo" : "7.8.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-semver-7.7.4",
    "copyrightText" : "Copyright Isaac Z. Schlueter\nCopyright (c) Isaac Z. Schlueter and Contributors\n\nAuthors: GitHub Inc; Isaac Z. Schlueter; Isaac Z. Schlueter and Contributors",
    "downloadLocation" : "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5T8jUM8fOmbljf5YrnTgFhwTgRxs519ioPTHu1N2MlA/semver-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/semver@7.7.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/npm/node-semver#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/semver",
    "versionInfo" : "7.7.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-set-blocking-2.0.0",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/95osy2eui_wslCftAi-3_B1ROMmuOZdlo14wsmRHV64/set-blocking-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/set-blocking@2.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/set-blocking#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/set-blocking",
    "versionInfo" : "2.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-string-width-4.2.3",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aOe6nFolINz9X6dNdifzm2b26iL8va3DDIvEb2hqloQ/string-width-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/string-width@4.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/string-width#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/string-width",
    "versionInfo" : "4.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-strip-ansi-6.0.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/strip-ansi@6.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E_u39o5xvLJiX-8V-_oxZ4a43ud2_HUJX7w-TxQzt4Y/strip-ansi-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/strip-ansi#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/strip-ansi",
    "versionInfo" : "6.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-three-0.173.0",
    "copyrightText" : "Copyright 2014 David Bau\nCopyright 2010-2025 Three.js Authors\nCopyright @ 2004 by MAGENTA Ltd.\nCopyright (c) 2002, Industrial Light & Magic\nCopyright (c) Magenta ltd\nCopyright (c) 2018, Mapbox\nCopyright (c) SIL International, 2003-2008\nCopyright (c) 2003-2008, SIL International (http://www.sil.org/)\nCopyright (c) 2014 - 2017, Syoyo Fujita\nCopyright (c) 2005-2008, The Android Open Source Project\nCopyright (c) 2008 The Android Open Source Project\nCopyright (c) 2016-2022, by Arseny Kapoulkine (arseny.kapoulkine@gmail.com)\nCopyright (c) 2004 by MAGENTA Ltd.\nCopyright (c) 2010-2025 three.js authors\nMikola Lysenko (c) 2012\n(c) 2017 Axel Kittenberger\n(c) 2005 Elsevier Inc.\n(c) Epistemex 2014-2015 www.epistemex.com By Ken Fyrstenberg\n(c) Frederik De Bleser and other contributors\n(c) 2018 bryc (github.com/bryc)\ncopyright (c) 2006, Google Corporation\n\nAuthors: Arseny Kapoulkine; Axel Kittenberger; David Bau; Elsevier Inc.; Epistemex www.epistemex.com By Ken Fyrstenberg; Frederik De Bleser and other contributors; George Michael Brower; Google Corporation; Industrial Light & Magic; MAGENTA Ltd.; Mapbox; Mikola Lysenko; Nell Waliczek; SIL International; Syoyo Fujita; The Android Open Source Project; bryc (github.com/bryc); three.js authors",
    "downloadLocation" : "https://registry.npmjs.org/three/-/three-0.173.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/three@0.173.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G4udhu_DnpHUg119frSq-D4_wT9Ktf6SqA1nFckUlIQ/three-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://threejs.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/three",
    "versionInfo" : "0.173.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tr46-0.0.3",
    "copyrightText" : "Copyright (c) Sebastian Mayr",
    "downloadLocation" : "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tr46@0.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xF4JHg7USKF9wyhePcPCl8rx7-gbaI9ja3AHVvWjWNE/tr46-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Sebmaster/tr46.js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tr46",
    "versionInfo" : "0.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tslib-2.3.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/tslib/-/tslib-2.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tslib@2.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBBVGTAaGwmsT77KIhX32aCs04VvG_f2HvutSidXTE0/tslib-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.typescriptlang.org/",
    "licenseConcluded" : "0BSD",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tslib",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tslib-2.8.1",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tslib@2.8.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XByM4fNNo8NgMDAw84f7GqemGiog0TGZ_DTpJ8ENT2o/tslib-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.typescriptlang.org/",
    "licenseConcluded" : "0BSD",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tslib",
    "versionInfo" : "2.8.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-undici-types-6.21.0",
    "copyrightText" : "Copyright (c) Matteo Collina and Undici contributors\n\nAuthors: Matteo Collina and Undici contributors",
    "downloadLocation" : "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xQx_ww8uQYEtf0oXaIgPZerbciig0h76NvibTNkYugo/undici-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/undici-types@6.21.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://undici.nodejs.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/undici-types",
    "versionInfo" : "6.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-update-browserslist-db-1.3.4",
    "copyrightText" : "Copyright 2022 Andrey Sitnik <andrey@sitnik.es> and other contributors\n\nAuthors: Andrey Sitnik <andrey@sitnik.es>; Andrey Sitnik and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbvhYaMH0OtEfDQdu7hGCRNf9B398x4xzPpFPbiVdPg/update-browserslist-db-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/update-browserslist-db@1.3.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/browserslist/update-db#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/update-browserslist-db",
    "versionInfo" : "1.3.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-webidl-conversions-3.0.1",
    "copyrightText" : "Copyright (c) 2014, Domenic Denicola",
    "downloadLocation" : "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/91QuK6uggISIHalBOm_Evv8Kz3fkwfUquWy0SCrEpTs/webidl-conversions-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/webidl-conversions@3.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsdom/webidl-conversions#readme",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/webidl-conversions",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-whatwg-url-5.0.0",
    "copyrightText" : "Copyright (c) 2015-2016 Sebastian Mayr",
    "downloadLocation" : "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0uF9VagijOPXB6Fe7UjmtIam9cacVfeVYzBkuaiLOBY/whatwg-url-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/whatwg-url@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsdom/whatwg-url#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/whatwg-url",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-which-module-2.0.1",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Contributors",
    "downloadLocation" : "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dDMT1nCOXogL3FBC8irfivv8B9XwW4OSZu8CIRpt6Nw/which-module-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/which-module@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/nexdrew/which-module#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/which-module",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-wrap-ansi-6.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HnEGWBdLrV9Df4kmXdde4HqfamvAwS3plkZL5nI0UqY/wrap-ansi-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/wrap-ansi@6.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/wrap-ansi#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/wrap-ansi",
    "versionInfo" : "6.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-y18n-4.0.3",
    "copyrightText" : "Copyright (c) 2015, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/y18n@4.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F0_8sGgf4psegyPRoZbAK7BwETiDyzRSR7iopYpMCxo/y18n-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/y18n",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/y18n",
    "versionInfo" : "4.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-yargs-parser-18.1.3",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/yargs-parser@18.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GOKQTIHNCyE7dWqFM8Jrkrii-QbzItcYTaJL5Qdh68U/yargs-parser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/yargs-parser#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/yargs-parser",
    "versionInfo" : "18.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-yargs-15.4.1",
    "copyrightText" : "Copyright 2014 Contributors (ben@npmjs.com)\nCopyright 2010 James Halliday (mail@substack.net)\nCopyright (c) 2011 Andrei Mackenzie\n\nAuthors: Andrei Mackenzie; Contributors; James Halliday",
    "downloadLocation" : "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/yargs@15.4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WtKoC0kqqpbc62yn9HPnb2159NAh1IvI-nloxIFlQpM/yargs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://yargs.js.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/yargs",
    "versionInfo" : "15.4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zone.js-0.16.3",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2026 Google LLC. https://angular.dev/license\n(c) 2010-2026 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/zone.js/-/zone.js-0.16.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/zone.js@0.16.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Rz3TTFeBSEHbtPDvADmFRYpjF2NfsjxuOvL6xAhdqjM/zone.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/zone.js",
    "versionInfo" : "0.16.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zrender-6.1.0",
    "copyrightText" : "Copyright (c) 2017, Baidu Inc.\nCopyright (c) Microsoft Corporation\n(c) 2010-2013 Thomas Fuchs",
    "downloadLocation" : "https://registry.npmjs.org/zrender/-/zrender-6.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jP64waWxuF54z-lxi0zEFYzOXRPggrAMjOeq0M3_-KU/zrender-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/zrender@6.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ecomfe/zrender#readme",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/zrender",
    "versionInfo" : "6.1.0"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-dtm-1025.15.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-has-tostringtag-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-hasown-2.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-gridstack-12.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-has-symbols-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-proto-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-gopd-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.json-json-20260814"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-caller-file-2.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.23.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-intrinsic-1.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-function-bind-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-generator-function-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-9.0.1.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-http-converter-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-marked-16.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-jackson-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-devtools-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-lodash-4.18.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-health-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-marked-14.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-locate-path-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-lodash-es-4.18.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-ui-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-leaflet-1.9.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-libphonenumber-js-1.12.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-common-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-isomorphic-cometd-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-api-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-json-schema-traverse-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-is-fullwidth-code-point-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-electron-to-chromium-1.5.467"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-emoji-regex-8.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dunder-proto-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-echarts-6.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dijkstrajs-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dompurify-3.4.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-decamelize-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-delayed-stream-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-entities-8.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-define-property-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-find-up-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-form-data-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fast-uri-3.1.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-file-saver-2.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-escalade-3.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fast-deep-equal-3.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-object-atoms-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-set-tostringtag-2.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-errors-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fraction.js-5.3.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tslib-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tslib-2.8.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-three-0.173.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tr46-0.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-string-width-4.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-7.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-strip-ansi-6.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-7.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-semver-7.7.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-7.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-set-blocking-2.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-main-filename-2.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-7.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-rxjs-7.8.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-acl-libs-2.3.2-r1-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-common-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zone.js-0.16.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-compiler-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-animations-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-yargs-parser-18.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-cdk-21.2.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-yargs-15.4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-tools.jackson.core-jackson-databind-3.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-wrap-ansi-6.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-tools.jackson.dataformat-jackson-dataformat-yaml-3.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-y18n-4.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-whatwg-url-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-tools.jackson.core-jackson-core-3.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-which-module-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.webjars-swagger-ui-5.32.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-update-browserslist-db-1.3.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.webjars-webjars-locator-lite-1.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-webidl-conversions-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-undici-types-6.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-runtime-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-micrometer-metrics-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-node-releases-2.0.61"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-limit-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-jackson-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-echarts-21.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-node-fetch-2.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-servlet-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-bootstrap-21.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-bootstrap-21.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-micrometer-observation-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-mime-types-2.1.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-security-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-monaco-editor-0.55.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-math-intrinsics-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-micrometer-metrics-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-mime-db-1.52.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-from-string-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-7.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-web-server-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-qrcode-1.5.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-webmvc-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-directory-2.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-tomcat-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-pngjs-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-validation-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-postcss-value-parser-4.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-path-exists-4.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-picocolors-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-try-2.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-4.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-parse5-8.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-locate-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-call-bind-apply-helpers-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-9.11-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-baseline-browser-mapping-2.11.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libattr-2.5.2-r2-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-browserslist-4.29.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-autoprefixer-10.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-sha512sum-9.11-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-b2a-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-openjdk21-21.0.12-p8-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-async-generator-function-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-skalibs-libs-2.15.0.0-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-asynckit-0.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libcrypto3-3.5.9-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ansi-styles-4.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-musl-1.2.6-r3-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-async-function-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-camelcase-5.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-caniuse-lite-1.0.30001820"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-utmps-libs-0.1.3.3-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-zlib-1.3.2-r1-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cometd-4.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.ethlo.time-itu-1.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cross-fetch-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-github-openjdk-jdk21u-jdk-21.0.12-ga"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-combined-stream-1.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cometd-nodejs-client-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-color-convert-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.21.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-color-name-1.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-chroma-js-3.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cliui-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-translate-core-17.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.therapi-therapi-runtime-javadoc-scribe-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ng-select-ng-select-21.8.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-formly-core-6.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-upgrade-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fontsource-public-sans-5.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.therapi-therapi-runtime-javadoc-0.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-platform-browser-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-router-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-forms-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.networknt-json-schema-validator-3.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-platform-browser-dynamic-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zrender-6.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-core-21.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.19.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-8.20.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angularx-qrcode-21.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.16.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-formats-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.16.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-keywords-5.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zip.js-zip.js-2.7.71"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-errors-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.16.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-node-20.19.43"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-trusted-types-2.0.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.16.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-standard-schema-spec-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.16.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-cometd-4.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ansi-regex-5.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-busybox-binsh-1.37.0-r31-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-busybox-1.37.0-r31-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-env-9.11-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-fmt-9.11-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-data-3.7.2-r1-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-3.7.2-r1-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-keys-2.6-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-release-3.24.3-r0-arch-x86-64-distro-3.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-jakarta-2.2.55"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-core-jakarta-2.2.55"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-models-jakarta-2.2.55"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.20.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.25.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-11.0.22"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-11.0.22"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.25.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-11.0.22"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.85"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-api-client-9.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.85"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.85"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-api-common-9.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-common-9.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-9.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-12.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.commonmark-commonmark-0.31.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-12.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-dtm-1025.15.1",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6"
  } ]
}