{ "SPDXID" : "SPDXRef-DOCUMENT", "spdxVersion" : "SPDX-2.2", "creationInfo" : { "created" : "2026-04-17T11:24:07Z", "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ], "licenseListVersion" : "3.20" }, "name" : "java-sdk-v2026.0.7", "dataLicense" : "CC0-1.0", "hasExtractedLicensingInfos" : [ { "licenseId" : "LicenseRef-Cumulocity-License", "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.", "name" : "Cumulocity GmbH License" }, { "licenseId" : "LicenseRef-Public-Domain", "extractedText" : "This product is released into the Public Domain and therefore has no license.", "name" : "Public Domain" } ], "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-java-sdk-v2026.0.7-72b4d647-d118-4a2e-b089-4d9bb7fbc663", "packages" : [ { "SPDXID" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH", "downloadLocation" : "https://www.cumulocity.com", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:generic/cumulocity/java-sdk@2026.0.7", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.cumulocity.com", "licenseConcluded" : "LicenseRef-Cumulocity-License", "licenseDeclared" : "LicenseRef-Cumulocity-License", "licenseInfoFromFiles" : [ ], "name" : "java-sdk", "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)", "versionInfo" : "2026.0.7" }, { "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "generic/com.nsn.cumulocity.dependencies/svenson", "versionInfo" : "1.5.8" }, { "SPDXID" : "SPDXRef-pkg-maven-aopalliance-aopalliance-1.0", "copyrightText" : "NONE", "downloadLocation" : "https://repo1.maven.org/maven2/aopalliance/aopalliance/1.0/aopalliance-1.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F6MCK-TnKz73xDCDWZqRyDOPCp8o_nrAiuoyDfg957U/aopalliance-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/aopalliance/aopalliance@1.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://aopalliance.sourceforge.net", "licenseConcluded" : "LicenseRef-Public-Domain", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/aopalliance/aopalliance", "versionInfo" : "1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-backport-util-concurrent-backport-util-concurrent-3.1", "copyrightText" : "NONE", "downloadLocation" : "https://repo1.maven.org/maven2/backport-util-concurrent/backport-util-concurrent/3.1/backport-util-concurrent-3.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_fmEC9gWC-Et6kqJ1Nta0cMHFFOJHMb6wdDIwihxBmM/backport-util-concurrent-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/backport-util-concurrent/backport-util-concurrent@3.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://backport-jsr166.sourceforge.net/", "licenseConcluded" : "(CC-PDDC AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/backport-util-concurrent/backport-util-concurrent", "versionInfo" : "3.1" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32", "copyrightText" : "Copyright (c) 1999-2026, QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.32/logback-classic-1.5.32.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q9PRMpYiFT8L84aaMa6lJCbsoer7EdxBtlZqWdSvOSI/logback-classic-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.logback/logback-classic", "versionInfo" : "1.5.32" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32", "copyrightText" : "Copyright (c) 1999-2026, QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.32/logback-core-1.5.32.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.32", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z7IQFM_OqVJCP-jfbDKSFaAb3MZqRAXKaQvdeOQSHoA/logback-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND LGPL-2.1-or-later AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.logback/logback-core", "versionInfo" : "1.5.32" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.reload4j-reload4j-1.2.22", "copyrightText" : "Copyright 2015-2022 QOS.CH Sarl\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2007 The Apache Software Foundation\ncopyrighted by the Regents of the University of California", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/reload4j/reload4j/1.2.22/reload4j-1.2.22.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.22", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bUDCajNGIgrJeP6T6vmDALpz2hBjoJ11OOdQ2LYjtWs/reload4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://reload4j.qos.ch", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.reload4j/reload4j", "versionInfo" : "1.2.22" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21", "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FAYPPEKJfln70WdH6d5kYlr1jWNe0fksQHhTBb25MYQ/jackson-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-annotations", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-annotations", "versionInfo" : "2.21" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.2", "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.21.2/jackson-core-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qsJnXQSuWwxnv3nEFoDksTuMivM0sGsPPbISHIKRxH4/jackson-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-core", "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-core", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.2", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.21.2/jackson-databind-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xvLQKlcPwbLX1q4rkbutbYuojalAwNt9Jr7WeE82dAQ/jackson-databind-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-databind", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.21.2", "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.21.2/jackson-datatype-jdk8-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VMHJvQWlmPO2AS8_EQmfKAs-ekFNuHyvNytF1Z9ALc0/jackson-datatype-jdk8-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-java8", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.21.2", "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.21.2/jackson-datatype-joda-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G2WqMFmduR9GNa_bo5yiJ6XeFhxv6W7xM88L15HxqHU/jackson-datatype-joda-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-datatype-joda", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.2", "copyrightText" : "Copyright 2013 FasterXML.com", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.21.2/jackson-datatype-jsr310-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BXoAY8BToF9rSyVaFkLSgO8T-bbiy4fs3z-bwpTLef8/jackson-datatype-jsr310-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.21.2", "copyrightText" : "Copyright (c) 2012 2013 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.21.2/jackson-jaxrs-base-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kLBmcyAMh-RSg9nged1Qt7BKxph-uVV8m0hg2XHwe4c/jackson-jaxrs-base-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.21.2", "copyrightText" : "Copyright (c) 2012 2013 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.21.2/jackson-jaxrs-json-provider-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.21.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dNWZMrhwY8rwREPzdLRNWThh3fO4BnV_CpvDT7kJjAU/jackson-jaxrs-json-provider-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.21.2", "copyrightText" : "Copyright (c), Data Geekery GmbH, contact@datageekery.com\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2016 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.21.2/jackson-module-jaxb-annotations-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Gb8vN-jitW7Ul6biAz5dBVbi8F_ho7CJ4-It7xIpK5A/jackson-module-jaxb-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.21.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-base", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.21.2", "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.21.2/jackson-module-parameter-names-2.21.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uiprbO0JS93bhe2YOwOXqwVOmraNqHOwtdrK90jot8o/jackson-module-parameter-names-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.21.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-java8", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names", "versionInfo" : "2.21.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3", "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFfKHTGsG5wpfJo2-AKZfGBthRsboCCOy9rGo9Vo134/classmate-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/java-classmate", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml/classmate", "versionInfo" : "1.7.3" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-api-3.2.13", "copyrightText" : "Copyright 2017 cdancy", "downloadLocation" : "https://repo1.maven.org/maven2/com/github/docker-java/docker-java-api/3.2.13/docker-java-api-3.2.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2hprzKJZGQh-izPZwOfuC26ojJUgGYJlW4YrT6D7ctQ/docker-java-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java-api@3.2.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/docker-java/docker-java", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java-api", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-core-3.2.13", "copyrightText" : "Copyright [2013] [docker-java@googlegroups.com]", "downloadLocation" : "NOASSERTION", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iI0htCQKr32zWKrnKVSN2o0C-rSjDvdctbXzF2oxRp8/docker-java-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java-core@3.2.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java-core", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-jersey-3.2.13", "copyrightText" : "Copyright (c) 2011-2014 Oracle and/or its affiliates\nCopyright (c) 2014 Spotify AB", "downloadLocation" : "https://repo1.maven.org/maven2/com/github/docker-java/docker-java-transport-jersey/3.2.13/docker-java-transport-jersey-3.2.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M3BPhjv_S22rBGOMSLODimzJpVLvQK__ECEMflXsmBw/docker-java-transport-jersey-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java-transport-jersey@3.2.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/docker-java/docker-java", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java-transport-jersey", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-netty-3.2.13", "copyrightText" : "Copyright [2013] [docker-java@googlegroups.com]", "downloadLocation" : "NOASSERTION", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java-transport-netty@3.2.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/40EzZN4I5Dht0PAHbTRq0IRUsF-iY1j8CawKAwSh2iA/docker-java-transport-netty-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java-transport-netty", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-okhttp-3.2.13", "copyrightText" : "Copyright (c) 2011-2014 Oracle and/or its affiliates\nCopyright (c) 2014 SignalFuse, Inc.\nCopyright (c) 2014 Spotify AB.\nCopyright 2017 cdancy\nCopyright 2013 docker-java@googlegroups.com\nCopyright 2012-2020 the original author or authors\n\nAuthors: Carlos Sanchez ; Dmitry Tretyakov; Kanstantsin Shautsou; Kanstantsin Shautsou https://docs.docker.com/engine/reference/api/docker_remote_api_v1.22/ https://docs.docker.com/engine/reference/api/docker_remote_api_v1.22; Konstantin Pelykh (kpelykh@gmail.com); Marcus Linke; Marcus Thiesen; Martin Matula (martin.matula at oracle.com); Oracle and/or its affiliates; Pavel Bucek (pavel.bucek at oracle.com); Ryan Campbell (ryan.campbell@gmail.com); Ryan Campbell ryan.campbell@gmail.com; SignalFuse, Inc.; Spotify AB.; Yuting Liu; cdancy; docker-java@googlegroups.com; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/github/docker-java/docker-java-transport-okhttp/3.2.13/docker-java-transport-okhttp-3.2.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java-transport-okhttp@3.2.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G_HWRXF5s_ZP3Zw4MHSQn0X_C-McHcVgo8zPeWuXUlg/docker-java-transport-okhttp-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/docker-java/docker-java", "licenseConcluded" : "(CDDL-1.1 AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java-transport-okhttp", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-3.2.13", "copyrightText" : "Copyright 2012-2020 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/github/docker-java/docker-java-transport/3.2.13/docker-java-transport-3.2.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java-transport@3.2.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/seSlaVMGyjpbbZD2zNCEtDt6px2A2OjjdEcPDuMdWsM/docker-java-transport-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/docker-java/docker-java", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java-transport", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-3.2.13", "copyrightText" : "Copyright [2013] [docker-java@googlegroups.com]", "downloadLocation" : "NOASSERTION", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.docker-java/docker-java@3.2.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DK5tdfr31Afz_NyIEHjkLnkokzqTyi07UNftkWszuG0/docker-java-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.docker-java/docker-java", "versionInfo" : "3.2.13" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2", "copyrightText" : "Copyright (c) 2005 Brian Goetz", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UQuG5-vHXi2MjGeL4DdvxtCv9MA177o15GvTUTfIVeo/jsr305-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://findbugs.sourceforge.net/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.code.findbugs/jsr305", "versionInfo" : "3.0.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.12", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.12/svenson-1.5.12.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1H2WfsR1bY10xtg-2AtmiWT1yNCYP4eHFmyq71eXt7Y/svenson-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.12", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://code.google.com/p/svenson/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.code.svenson/svenson", "versionInfo" : "1.5.12" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://code.google.com/p/svenson/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.code.svenson/svenson", "versionInfo" : "1.5.8" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.collections-google-collections-1.0", "copyrightText" : "Copyright (c) 2006 Google Inc", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/collections/google-collections/1.0/google-collections-1.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZkPU2qHi65P5X3iLwYlxpi8WpI2kTBFX6LRg1Sih-BE/google-collections-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.collections/google-collections@1.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://code.google.com/p/google-collections/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.collections/google-collections", "versionInfo" : "1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0", "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.36.0/error_prone_annotations-2.36.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9bWGnK58Q_0GOKefs5N_WRrO3saRKkdOB8y5ybh6oOg/error_prone_annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.errorprone/error_prone_annotations", "versionInfo" : "2.36.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3", "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/failureaccess", "versionInfo" : "1.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre", "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/guava", "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/guava", "versionInfo" : "33.4.8-jre" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava", "copyrightText" : "Copyright (C) 2007 The Guava Authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/listenablefuture", "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0", "copyrightText" : "Copyright 2012 Google Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/j2objc/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.j2objc/j2objc-annotations", "versionInfo" : "3.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.kohlschutter.junixsocket-junixsocket-common-2.3.2", "copyrightText" : "Copyright 2009-2020 Christian Kohlschutter", "downloadLocation" : "https://repo1.maven.org/maven2/com/kohlschutter/junixsocket/junixsocket-common/2.3.2/junixsocket-common-2.3.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HSwCivkCVgDR1Xh_CD42QUbMKVe1r15NFLIFm8gighg/junixsocket-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.kohlschutter.junixsocket/junixsocket-common", "versionInfo" : "2.3.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.kohlschutter.junixsocket-junixsocket-native-common-2.3.2", "copyrightText" : "Copyright 2009-2020 Christian Kohlschutter", "downloadLocation" : "https://repo1.maven.org/maven2/com/kohlschutter/junixsocket/junixsocket-native-common/2.3.2/junixsocket-native-common-2.3.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M5IxfTUMUhelrj49kmVC7uNDB8w7sOt_WZJu2oKU34k/junixsocket-native-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.kohlschutter.junixsocket/junixsocket-native-common", "versionInfo" : "2.3.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6", "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov", "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.6/nimbus-jose-jwt-10.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s5CzC5UPQfCya0w6T9tVplJoiSuLf36E7C7Dc3SSZSs/nimbus-jose-jwt-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.nimbusds/nimbus-jose-jwt", "versionInfo" : "10.6" }, { "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-3.14.9", "copyrightText" : "Copyright 2013 Twitter, Inc.\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2010 The Android Open Source Project", "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp/3.14.9/okhttp-3.14.9.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iZRq8c5RphH8FA4nawsBky_4iVrmP049KEbLjfXOo90/okhttp-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(MPL-2.0 AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.squareup.okhttp3/okhttp", "versionInfo" : "3.14.9" }, { "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okio-okio-1.17.2", "copyrightText" : "Copyright 2014 Square Inc.\nCopyright (c) 2014 Square, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okio/okio/1.17.2/okio-1.17.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6zkhEbUoMvxBSsg6E2SQAG4IMmyMAEVTK8__GbuR1yw/okio-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.squareup.okio/okio@1.17.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.squareup.okio/okio", "versionInfo" : "1.17.2" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0", "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-beanutils", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-beanutils/commons-beanutils", "versionInfo" : "1.11.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.18.0/commons-codec-1.18.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k8pM1DHZ-WlY4QVlqL72L0DrDf6wWZAO2dt1zTn9Q-Y/commons-codec-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.18.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-codec/", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-codec/commons-codec", "versionInfo" : "1.18.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2", "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://commons.apache.org/collections/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-collections/commons-collections", "versionInfo" : "3.2.2" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NlO8kR0Jl5QXiVtvjDRvRkRZKDcpxujTSIzpdY_P8yI/commons-io-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-io/commons-io@2.20.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-io/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-io/commons-io", "versionInfo" : "2.20.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.3.5", "copyrightText" : "Copyright 2001-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.3.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Q7gbLfgvgCG6YfcXcJwDHFiE5M7y4g9xM6dbROtfbck/commons-logging-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-logging/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-logging/commons-logging", "versionInfo" : "1.3.5" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.15.10/micrometer-commons-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.15.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YQXbpZu_ZyHHT11iNXLEBR7iXZWlf-WZM-Rci4tfp6I/micrometer-commons-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-commons", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.15.10/micrometer-core-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.15.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cshRLSSJFFrH6XCufN0K7zsSRLUf5JeLNSTSvP9zGrE/micrometer-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-core", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.15.10/micrometer-jakarta9-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.15.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D07CDk9TJg7E8hSnw9G2Fo7xMRwXIBbPPXKMPbKdaiM/micrometer-jakarta9-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-jakarta9", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Maksim Petelin; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.15.10/micrometer-observation-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.15.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5gThKpaPpgXmn03qQo7kC5wqYneJl3DT-3halQCJJrw/micrometer-observation-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-observation", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.10", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.15.10/micrometer-registry-prometheus-1.15.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WD2ZQaVtmEHgACpIUz9YKfq2TUlMT7IMuyw0tVCdNtc/micrometer-registry-prometheus-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-registry-prometheus", "versionInfo" : "1.15.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.132.Final/netty-buffer-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dyjnWtPOrugVY8e7PxK4eMyMHPPXg2afMCG9V3D7pIM/netty-buffer-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-buffer/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-buffer", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.132.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.132.Final/netty-codec-dns-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kYOMmEVmmyLq9_qbxISPgAXL33f0hjyKtZ9FR_Wjwsc/netty-codec-dns-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-dns/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-dns", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.132.Final", "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2014 Twitter, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http2/4.1.132.Final/netty-codec-http2-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KKobnbXK3wCpcxhZLonBNiHd8G43jFoIkccWikrZY_o/netty-codec-http2-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-http2@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-http2/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-http2", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann \nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.132.Final/netty-codec-http-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1oJwG_0vPlXp0HSq8fID5vge0IVhMxmJiH7jyedliP8/netty-codec-http-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-http/", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-http", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-socks/4.1.132.Final/netty-codec-socks-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RIx9Rhm5cFPI_mJB4FSRqapjK2BoKg2KUqonse5stAk/netty-codec-socks-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-socks@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-socks/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-socks", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.132.Final/netty-codec-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TvD8c9aTZW1JFV2XDpKjyu01qzHGd0Ss6wFA_cw7QWY/netty-codec-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec/", "licenseConcluded" : "(CC-PDDC AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.132.Final/netty-common-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J5jRuN1FW6J5DNpPc1cxilRfBKidoppEjN3jrgMAXFU/netty-common-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND CC0-1.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-common", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.132.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler-proxy/4.1.132.Final/netty-handler-proxy-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-handler-proxy@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/h7Uf-WI0Rs7xdPP-a05v__Bg_IFd4S22lB2LDXlumQ8/netty-handler-proxy-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-handler-proxy/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-handler-proxy", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.132.Final/netty-handler-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hM0y43YAIHiEftETo8kXh-vgEn2V32EX2mmuMgKugG8/netty-handler-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-handler/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-handler", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.132.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.132.Final/netty-resolver-dns-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Jdi-HPY0bNrtOjrT5fKfctBXC1kJ5-R9ZawIQVSdWZo/netty-resolver-dns-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-resolver-dns/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-resolver-dns", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.132.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.132.Final/netty-resolver-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QG97cN8d1LzMvxwwdmRw4HpI18345g7JTuMT9DBY878/netty-resolver-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-resolver/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-resolver", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.132.Final", "copyrightText" : "Copyright 2021 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.132.Final/netty-transport-classes-epoll-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1EDta9QtQ92-nd2rMjOWbxnoHpTw0aSXh2mKeFTzWwg/netty-transport-classes-epoll-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport-classes-epoll/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-classes-epoll", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-kqueue-4.1.132.Final", "copyrightText" : "Copyright 2021 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-kqueue/4.1.132.Final/netty-transport-classes-kqueue-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nguXkMP6NDsuyYH-Ytl4xOaHb_dUQkLdi-lbB4UYdHk/netty-transport-classes-kqueue-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport-classes-kqueue/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-classes-kqueue", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.132.Final-classifier-linux-x86-64", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.132.Final/netty-transport-native-epoll-4.1.132.Final-linux-x86_64.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/szGpYp_fIFHeafXx-s0LFoS4n9Td0QtwXiIXOyxPkB4/netty-transport-native-epoll-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.132.Final?classifier=linux-x86_64", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-native-epoll", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-kqueue-4.1.132.Final-classifier-osx-x86-64", "copyrightText" : "Copyright 2016 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-kqueue/4.1.132.Final/netty-transport-native-kqueue-4.1.132.Final-osx-x86_64.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KDd9IwSgAOFI7VvCaj49Ta0c-uZf2dhfcp-Rb-7WU6Q/netty-transport-native-kqueue-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.132.Final?classifier=osx-x86_64", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-native-kqueue", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.132.Final", "copyrightText" : "Copyright 2016 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.132.Final/netty-transport-native-unix-common-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5jLyneqLd22KHUhtbi3ucena2lEaIZsKSLpUSiXTRQQ/netty-transport-native-unix-common-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.132.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport-native-unix-common/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-native-unix-common", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.132.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.132.Final/netty-transport-4.1.132.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.132.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VU-bOEnVYwrXu4DsyE_QrGghkX4352vnujycwmzYijE/netty-transport-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport", "versionInfo" : "4.1.132.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.2.16", "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-core/1.2.16/reactor-netty-core-1.2.16.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.16", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/azMIaZkj4MMpgINSHljK62N1I9ckSqGF19zJijjOvys/reactor-netty-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/reactor/reactor-netty", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.projectreactor.netty/reactor-netty-core", "versionInfo" : "1.2.16" }, { "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.2.16", "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-http/1.2.16/reactor-netty-http-1.2.16.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.16", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UO3znFHG13S7abXewPMVoTt-isR2lbrcTgFciv5bfjc/reactor-netty-http-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/reactor/reactor-netty", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.projectreactor.netty/reactor-netty-http", "versionInfo" : "1.2.16" }, { "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.7.17", "copyrightText" : "Copyright (c) 2019-2021 VMware Inc. or its affiliates\nCopyright 2002-2017 the original author or authors\n\nAuthors: Animesh Chaturvedi; David Karnok; DoHyung Kim; Injae Kim; Injae Kim https://github.com/reactor/reactive-streams-commons; Jon Brisbin; Juergen Hoeller; Oleh Dokuka; Rossen Stoyanchev; Sebastien Deleuze; Sergei Egorov; Simon Basle; Simon Basle https://github.com/reactor/reactive-streams-commons; Stephane Maldini; VMware Inc. or its affiliates; Violeta Georgieva; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/reactor-core/3.7.17/reactor-core-3.7.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.projectreactor/reactor-core@3.7.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IjOlcDoVCswSMAkdi_we86vs3pMoPr4fGkZl7l9SuU4/reactor-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/reactor/reactor-core", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.projectreactor/reactor-core", "versionInfo" : "3.7.17" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.3.10/prometheus-metrics-config-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UHTzQ-XwDKf_cEWqR-cvpcQlcwU-pfvxbBTS_IAhu94/prometheus-metrics-config-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-config", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.3.10/prometheus-metrics-core-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I8gCRyk7q7mtrGouy3qx9_L_d9J22Q7fniMuGpQdoIA/prometheus-metrics-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-core", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10", "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.3.10/prometheus-metrics-exposition-formats-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cBUYYlLazSiCq49QjFQGEv_0IoMLV1IgNZxx6wXDkhs/prometheus-metrics-exposition-formats-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.3.10/prometheus-metrics-exposition-textformats-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uEL0F2qPRr2_DzJKJNPnpkMtK_rrhzF-Bo4Ja8Nn5U/prometheus-metrics-exposition-textformats-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.3.10/prometheus-metrics-model-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6zzDlJBJZO1fyuySffEYb1Hs4jRARYm1_TBjE8L2pSs/prometheus-metrics-model-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-model", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.3.10/prometheus-metrics-tracer-common-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pmnxX5WNpK2YLcGxlRBkzm_zwzBqXlXjNJiqRVmC9tA/prometheus-metrics-tracer-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-tracer-common", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4", "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PRU62PFiEM2QmMRN3dinnHVhUbmo6H2GxaRvzrObX5g/jakarta.activation-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/jakartaee/jaf-api", "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND OFL-1.1)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.activation/jakarta.activation-api", "versionInfo" : "2.1.4" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1", "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://projects.eclipse.org/projects/ee4j.ca", "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.annotation/jakarta.annotation-api", "versionInfo" : "2.1.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.el-jakarta.el-api-6.0.1", "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 2023 Contributors to the Eclipse Foundation\nCopyright (c) 2018, 2022 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997, 2023 Oracle and/or its affiliates and others\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to the Eclipse Foundation; Dongbin Nie; Eclipse Foundation; Free Software Foundation, Inc.; Kin-man Chung; Oracle and/or its affiliates; Oracle and/or its affiliates and others; The Apache Software Foundation; the Free Software Foundation; the Jakarta Expression Language project", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/el/jakarta.el-api/6.0.1/jakarta.el-api-6.0.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.el/jakarta.el-api@6.0.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XOGKDTOs_3KHscF9iQzLmLw5zi7lA-u7JbEERiUQxWc/jakarta.el-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://projects.eclipse.org/projects/ee4j.el", "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.el/jakarta.el-api", "versionInfo" : "6.0.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1", "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/injection-api", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.inject/jakarta.inject-api", "versionInfo" : "2.0.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2", "copyrightText" : "Copyright (c) 2019,2020 Eclipse Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA-vINKxODilOfJFhMZt7frREieCkTHGattM2ePqCWw/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://beanvalidation.org", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.validation/jakarta.validation-api", "versionInfo" : "3.0.2" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0", "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api", "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api", "versionInfo" : "3.1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-javax.activation-activation-1.1.1", "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/javax/activation/activation/1.1.1/activation-1.1.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WIj1FmEei-pV1ebz48rC-FndB4CxCja2LVPTH4nJBmc/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/javax.activation/activation@1.1.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp", "licenseConcluded" : "CDDL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/javax.activation/activation", "versionInfo" : "1.1.1" }, { "SPDXID" : "SPDXRef-pkg-maven-javax.annotation-jsr250-api-1.0", "copyrightText" : "Copyright 2005-2006 Sun Microsystems, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/javax/annotation/jsr250-api/1.0/jsr250-api-1.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lD4GJx1JiBRmqeEMFbz_SYSp1NKWtijPo-NNAPzNluU/jsr250-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/javax.annotation/jsr250-api@1.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html", "licenseConcluded" : "CDDL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/javax.annotation/jsr250-api", "versionInfo" : "1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-javax.enterprise-cdi-api-1.0", "copyrightText" : "Copyright 2008, Red Hat Middleware LLC, and individual contributors by the @authors\n\nAuthors: Clint Popetz; Dan Allen; David Allen; Gavin King; Nicklas Karlsson; Pete Muir; Red Hat Middleware LLC, and individual contributors by the @authors; Shane Bryzak", "downloadLocation" : "https://repo1.maven.org/maven2/javax/enterprise/cdi-api/1.0/cdi-api-1.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kGO_tCzRMjLcH9fC3vtXjT8WCL-E58vBfVM_Zx-4DaU/cdi-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/javax.enterprise/cdi-api@1.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/javax.enterprise/cdi-api", "versionInfo" : "1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-javax.inject-javax.inject-1", "copyrightText" : "Copyright (c) 2009 The JSR-330 Expert Group", "downloadLocation" : "https://repo1.maven.org/maven2/javax/inject/javax.inject/1/javax.inject-1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bC-qNBAeq5cGb0-tWmzqkYHBn-mOw5DPFATKTjZVABQ/javax.inject-1-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/javax.inject/javax.inject@1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://code.google.com/p/atinject/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/javax.inject/javax.inject", "versionInfo" : "1" }, { "SPDXID" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.2.12", "copyrightText" : "Copyright (c) 2004-2011 Oracle\nCopyright (c) 1997-2013 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/javax/xml/bind/jaxb-api/2.2.12/jaxb-api-2.2.12.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sbx9qg2e7osbgzbXQd-nRGjE0wAMWAdFhIfNSJ0EGv4/jaxb-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.12", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://jaxb.java.net/", "licenseConcluded" : "CDDL-1.1", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/javax.xml.bind/jaxb-api", "versionInfo" : "2.2.12" }, { "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14", "copyrightText" : "Copyright 2001-2005 Stephen Colebourne", "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.joda.org/joda-time/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/joda-time/joda-time", "versionInfo" : "2.10.14" }, { "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.8.0", "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 1991, 1999 Free Software Foundation, Inc\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.8.0/jna-5.8.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.8.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2puBnSLPaEid0VIBbSAGe7K6BLc2zHP5B9ft5EWjKPA/jna-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/java-native-access/jna", "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/net.java.dev.jna/jna", "versionInfo" : "5.8.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.1", "copyrightText" : "Copyright 2009-2025 The Apache Software Foundation\nCopyright 2006-2015 The Guava Authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Chris Beams; Colin Sampaleanu; Juergen Hoeller; Keith Donald; Rob Harrop; Rod Johnson; Sam Brannen; The Apache Software Foundation; The Guava Authors; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro/1.12.1/avro-1.12.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.avro/avro@1.12.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEhl6MJsKkwa8nBQg-sx8O6YPMHRfI8k8Ou8HQFWA6U/avro-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://avro.apache.org", "licenseConcluded" : "(0BSD AND BSD-2-Clause AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.avro/avro", "versionInfo" : "1.12.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.21", "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation\ncopyright (c) 1996-2019 Julian R Seward", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.21/commons-compress-1.21.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.21", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WWiYm3SbbcWZc7JT2oRKJmOOnDAs4edVJ8kOdBMbj2Q/commons-compress-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-compress/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-compress", "versionInfo" : "1.21" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GeAZl8zP9Io_wlCT9pgjRpi5nAJ3fDA-1s03Lh0SKSU/commons-compress-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.28.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-compress/", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-compress", "versionInfo" : "1.28.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.13.0", "copyrightText" : "Copyright 2005-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-csv/1.13.0/commons-csv-1.13.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zDNPdqIdCFCd97an4LrAGhnhAsAD44ng3qONd0eQs74/commons-csv-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-csv@1.13.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-csv/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-csv", "versionInfo" : "1.13.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0", "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-lang/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-lang3", "versionInfo" : "3.17.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.14.0", "copyrightText" : "Copyright 2014-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.14.0/commons-text-1.14.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I_uMV1RMs0HO_RiX4MK1_9K91ek-AQ01VL16aof-Lf4/commons-text-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-text@1.14.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-text", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-text", "versionInfo" : "1.14.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14", "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/fluent-hc/4.5.14/fluent-hc-4.5.14.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Beykp52o_7Kq-JfqMiy3kjazjuggNjwoJIvwxGBTcVQ/fluent-hc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.14", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/fluent-hc", "versionInfo" : "4.5.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14", "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpclient", "versionInfo" : "4.5.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16", "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-core-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpcore", "versionInfo" : "4.4.16" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpmime-4.5.14", "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpmime/4.5.14/httpmime-4.5.14.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iDSBHV8O-4GMGB5Qi3lT-Wx5RyBkgmd1fw-9Bz6QwIY/httpmime-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpmime", "versionInfo" : "4.5.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3", "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.logging.log4j/log4j-api", "versionInfo" : "2.24.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3", "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j", "versionInfo" : "2.24.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.15.1", "copyrightText" : "Copyright 2004-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/plugin-tools/maven-plugin-annotations/3.15.1/maven-plugin-annotations-3.15.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8PmaCR-kdWeptnL__KASSvruLfeYatLc71q3hjnFtbs/maven-plugin-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven.plugin-tools/maven-plugin-annotations", "versionInfo" : "3.15.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven.shared-maven-filtering-1.3", "copyrightText" : "Copyright 2002-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/shared/maven-filtering/1.3/maven-filtering-1.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven.shared/maven-filtering@1.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ebWQp3xs1hZK-HX2P7Lodf5eGhfYRAnvk2mHhdX0bFA/maven-filtering-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven.shared/maven-filtering", "versionInfo" : "1.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven.shared-maven-shared-utils-0.6", "copyrightText" : "Copyright 2002-2012 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/shared/maven-shared-utils/0.6/maven-shared-utils-0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bmAV5N6PyQt5OSTjyc5dQ8wN5-a4fJI4MaN0iTzRsAQ/maven-shared-utils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven.shared/maven-shared-utils", "versionInfo" : "0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven.wagon-wagon-http-lightweight-3.5.3", "copyrightText" : "Copyright 2003-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/wagon/wagon-http-lightweight/3.5.3/wagon-http-lightweight-3.5.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven.wagon/wagon-http-lightweight@3.5.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fLH-PrA9aGMYkNxGkm8WByrcLyHCS0Q9jkzS983ulk0/wagon-http-lightweight-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven.wagon/wagon-http-lightweight", "versionInfo" : "3.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven.wagon-wagon-http-shared-3.5.3", "copyrightText" : "Copyright 2003-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/wagon/wagon-http-shared/3.5.3/wagon-http-shared-3.5.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.5.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8D6EIilDYkMpvz9L2Hz2scsQ9EkoGUFmh71dPa-ySLQ/wagon-http-shared-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven.wagon/wagon-http-shared", "versionInfo" : "3.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven.wagon-wagon-provider-api-3.5.3", "copyrightText" : "Copyright 2003-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/wagon/wagon-provider-api/3.5.3/wagon-provider-api-3.5.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OlhSLcaOLIRSWq_l26zU1_8DM2qC-cduBlrK6UUOX2E/wagon-provider-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven.wagon/wagon-provider-api", "versionInfo" : "3.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-aether-provider-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-aether-provider/3.2.5/maven-aether-provider-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NYWafFEjGgae2dTE0LamCGTB9dvKdoRgaafu9iFr1iM/maven-aether-provider-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-aether-provider", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-artifact-manager-2.2.1", "copyrightText" : "Copyright 2001-2009 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-artifact-manager/2.2.1/maven-artifact-manager-2.2.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-artifact-manager@2.2.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cCAmroMORAdxhJsVGtpxIw3T2U-R2VuALoEoIxD7ods/maven-artifact-manager-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-artifact-manager", "versionInfo" : "2.2.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-artifact-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-artifact/3.2.5/maven-artifact-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kpW3cWoEhVV1ftOmIT3KnIs_59WfW_eEqFp8JAOKCuw/maven-artifact-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-artifact", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-core-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-core/3.2.5/maven-core-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ixrc_gfQGVe7Dl6R_YmAbswu8Sh0wN0kL515HY9y9Po/maven-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-core@3.2.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-core", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-model-builder-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-model-builder/3.2.5/maven-model-builder-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RtJe7_-NyFUvQxJCKitZxU3QYlskeB3W0wHozr0y3XE/maven-model-builder-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-model-builder", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-model-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-model/3.2.5/maven-model-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-model@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AHv7wtYjJDoCpKnUFByt6D1KD3fy5wXNQJqWVe1-HVY/maven-model-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-model", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-plugin-api-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-plugin-api/3.2.5/maven-plugin-api-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dhcItle9KAyYjAMxg3i7q2iDDw5wIRKLLdRmMBK7zfE/maven-plugin-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-plugin-api", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-plugin-registry-2.2.1", "copyrightText" : "Copyright 2001-2009 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-plugin-registry/2.2.1/maven-plugin-registry-2.2.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-plugin-registry@2.2.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hKEv-8CJiNg9ANdqcSJ_OvNp5XWkjM0QVfsQ1nUS82A/maven-plugin-registry-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-plugin-registry", "versionInfo" : "2.2.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-profile-2.2.1", "copyrightText" : "Copyright 2001-2009 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-profile/2.2.1/maven-profile-2.2.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-profile@2.2.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t5kma7SZvZfmKvB9WWAqCTOGAm8N5jbCeZrX6Hu85BQ/maven-profile-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-profile", "versionInfo" : "2.2.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-project-2.2.1", "copyrightText" : "Copyright 2001-2009 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-project/2.2.1/maven-project-2.2.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-project@2.2.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ACFwcWHmNb5oMvKR0TSFELB9HvkSUxjHs-kDpGIufGM/maven-project-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-project", "versionInfo" : "2.2.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-repository-metadata-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-repository-metadata/3.2.5/maven-repository-metadata-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bX2AK9B-ITqr682rMQaztKAGd6pYDbjkU6pGzRAvxl8/maven-repository-metadata-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-repository-metadata", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-settings-builder-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-settings-builder/3.2.5/maven-settings-builder-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M0HcLH3JldWWXeSmdg22PlQLcL_BDEFZQN1sYvDH0p8/maven-settings-builder-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-settings-builder", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.maven-maven-settings-3.2.5", "copyrightText" : "Copyright 2001-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/maven/maven-settings/3.2.5/maven-settings-3.2.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.maven/maven-settings@3.2.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ptYIfDFyAFaAf-9zTr6C780Btn_n5hRmVhCyD8MP-HM/maven-settings-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.maven/maven-settings", "versionInfo" : "3.2.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.53", "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2026 The Apache Software Foundation\nCopyright (c) 1999-2026, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2026, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.53/tomcat-embed-core-10.1.53.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/63f55G8TakLNgM0N1lyEgudMbo2wq1CBcebTpRXoGqY/tomcat-embed-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.53", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core", "versionInfo" : "10.1.53" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.53", "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.53/tomcat-embed-el-10.1.53.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SmQc4dnuCkYqXLhFR5hxM9WYCpLTI5FYNfyTtIlf9fw/tomcat-embed-el-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.53", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el", "versionInfo" : "10.1.53" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.53", "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.53/tomcat-embed-websocket-10.1.53.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5Vmg47MJlL7qWTbtjpKAyMfVy2n0CgncUYl9-k3kKOo/tomcat-embed-websocket-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.53", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket", "versionInfo" : "10.1.53" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.xbean-xbean-reflect-3.7", "copyrightText" : "Copyright 2005-2010 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/xbean/xbean-reflect/3.7/xbean-reflect-3.7.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.xbean/xbean-reflect@3.7", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZWdWB66_ZC4ve5wlhIaFJYjlj3dHqBmTORUQ5gX4bEo/xbean-reflect-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.xbean/xbean-reflect", "versionInfo" : "3.7" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1", "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.78.1/bcpkix-jdk18on-1.78.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcpkix-jdk18on", "versionInfo" : "1.78.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b2cWV45eM6_2mMsYRqjw77Mlu_ur6sL214SFPwnGty4/bcprov-jdk18on-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.bouncycastle.org/java.html", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcprov-jdk18on", "versionInfo" : "1.78.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1", "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.78.1/bcutil-jdk18on-1.78.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcutil-jdk18on", "versionInfo" : "1.78.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-classworlds-2.5.2", "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2006 The Codehaus Foundation\nCopyright 2002 (c) The Werken Company", "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/plexus/plexus-classworlds/2.5.2/plexus-classworlds-2.5.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fGf4-1srO8nFGuytAWjeiqfQx74LNW7iijQtUjLetU8/plexus-classworlds-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/sonatype/plexus-classworlds.git", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.codehaus.plexus/plexus-classworlds", "versionInfo" : "2.5.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-component-annotations-1.5.5", "copyrightText" : "Copyright (c) 2007 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/plexus/plexus-component-annotations/1.5.5/plexus-component-annotations-1.5.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cQCIalw-IRU5hn2Oac4FtO9yfVt6DR-hAFlj1xsu67I/plexus-component-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.codehaus.plexus/plexus-component-annotations", "versionInfo" : "1.5.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-container-default-2.1.0", "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2005 The Apache Software Foundation\nCopyright (c) 2004, The Codehaus\nCopyright (c) 2004-5, The Codehaus\nCopyright (c) 2007 the original author or authors\n\nAuthors: Andrew Williams; Benjamin Bentmann; Codehaus Foundation; Dain Sundstrom; Jason van Zyl; Kenney Westerhof; Kristian Rosenvold; The Apache Software Foundation; The Codehaus; brett@apache.org Brett Porter; brett@codehaus.org Brett Porter; dan@envoisolutions.com Dan Diephouse; kenney@apache.org Kenney Westerhof; kenney@codehaus.org Kenney Westerhof; kenney@neonics.com Kenney Westerhof; michal.maczka@dimatics.com Michal Maczka; michal@codehaus.org Michal Maczka; mmaczka@interia.pl' Michal Maczka", "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/plexus/plexus-container-default/2.1.0/plexus-container-default-2.1.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.codehaus.plexus/plexus-container-default@2.1.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wyfx-NGiwsDjHweEBow2PPgvUh6Jg9zTxbMI8f4w7Qk/plexus-container-default-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.codehaus.plexus/plexus-container-default", "versionInfo" : "2.1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-interpolation-1.21", "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2004 The Apache Software Foundation\nCopyright 2007 The Codehaus Foundation\nCopyright (c) 2001-2003 The Apache Software Foundation\nCopyright (c) 2004, The Codehaus", "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/plexus/plexus-interpolation/1.21/plexus-interpolation-1.21.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I3EmXTqECyziP69Nh4uFXGnreoosIb2n9qnU75yeu7U/plexus-interpolation-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/sonatype/plexus-interpolation.git", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.codehaus.plexus/plexus-interpolation", "versionInfo" : "1.21" }, { "SPDXID" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-utils-3.0.20", "copyrightText" : "Copyright 2004 Sun Microsystems, Inc\nCopyright 2003-2004 The Apache Software Foundation\nCopyright The Codehaus Foundation\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c) 2006, Javolution (http://javolution.org)\nCopyright (c) 2000-2002 The Apache Software Foundation\nCopyright (c) 2003 The Trustees of Indiana University\nCopyright (c) 2001-2003, ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL 60661 USA", "downloadLocation" : "https://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/3.0.20/plexus-utils-3.0.20.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JvuXFEvHk1ZifCMR3cGZX-FPRsekM1-wIuxK4EsHnoY/plexus-utils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.20", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://plexus.codehaus.org/plexus-utils", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.codehaus.plexus/plexus-utils", "versionInfo" : "3.0.20" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/bayeux-api", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/cometd-java-client", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/cometd-java-common", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-api-1.0.0.v20140518", "copyrightText" : "Copyright (c) 2010, 2011 Sonatype, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/aether/aether-api/1.0.0.v20140518/aether-api-1.0.0.v20140518.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_X81l7XcTguVUS2mDw43pM98VSbK3GpyMSffewVnC5U/aether-api-~.v20140518-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.aether/aether-api", "versionInfo" : "1.0.0.v20140518" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-impl-1.0.0.v20140518", "copyrightText" : "Copyright (c) 2010, 2011 Sonatype, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/aether/aether-impl/1.0.0.v20140518/aether-impl-1.0.0.v20140518.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YczWWG3jYoiYhWSfOplRvZMnOWZ1GA6omkG5FiWDVuA/aether-impl-~.v20140518-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.aether/aether-impl", "versionInfo" : "1.0.0.v20140518" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-spi-1.0.0.v20140518", "copyrightText" : "Copyright (c) 2010, 2011 Sonatype, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/aether/aether-spi/1.0.0.v20140518/aether-spi-1.0.0.v20140518.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Sf08unOzj9lTmXt49uiq_ZYrnC4gmX9AJizqdevl3do/aether-spi-~.v20140518-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.aether/aether-spi", "versionInfo" : "1.0.0.v20140518" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-util-1.0.0.v20140518", "copyrightText" : "Copyright (c) 2010, 2011 Sonatype, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/aether/aether-util/1.0.0.v20140518/aether-util-1.0.0.v20140518.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JClPKBV9Hve4f9mAZOb2cOEcEQ6US_TtMZJ53SMwzvQ/aether-util-~.v20140518-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.aether/aether-util", "versionInfo" : "1.0.0.v20140518" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25", "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ], "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.25/jetty-util-ajax-12.0.25.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.25", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MlBdgH06sFwFG34mdFmktMfqBaBZVME3axZ1TNJ5fec/jetty-util-ajax-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.jetty/jetty-util-ajax", "versionInfo" : "12.0.25" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25", "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ], "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.25/jetty-util-12.0.25.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.25", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fyRe10si-Sp2CYEl8KFav6V6nFhhnN6Ii1XfzmRPsYw/jetty-util-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.jetty/jetty-util", "versionInfo" : "12.0.25" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.paho-org.eclipse.paho.client.mqttv3-1.2.1", "copyrightText" : "Copyright (c) 2017 BMW Car IT GmbH.\nCopyright (c) 2014 IBM Corp.\nCopyright (c) 2009, 2018 IBM Corp and others\n(c) 2008 VeriSign, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/paho/org.eclipse.paho.client.mqttv3/1.2.1/org.eclipse.paho.client.mqttv3-1.2.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oxfFnDW5UFcw1DGQrUjV9wCGtIqLOkUGMw4B5WXZ4G4/org.eclipse.paho.client.mqttv3-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3@1.2.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3", "versionInfo" : "1.2.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.0.M1", "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2010, 2013 Sonatype, Inc\nCopyright (c) 2010, 2013 Sonatype, Inc. and others", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/sisu/org.eclipse.sisu.inject/0.3.0.M1/org.eclipse.sisu.inject-0.3.0.M1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYZtiEiCR5mg1vUCH2KGD4ZUCBEGxr3_PugTpc0FIdo/org.eclipse.sisu.inject-~.M1-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.0.M1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.sisu/org.eclipse.sisu.inject", "versionInfo" : "0.3.0.M1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.0.M1", "copyrightText" : "Copyright (c) 2010, 2013 Sonatype, Inc\nCopyright (c) 2010, 2013 Sonatype, Inc. and others Bundle-Vendor Eclipse Sisu Eclipse-SourceReferences", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/sisu/org.eclipse.sisu.plexus/0.3.0.M1/org.eclipse.sisu.plexus-0.3.0.M1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4Wbn0kp-BoMXb7yuExvaWd0CeLw2mGzZnh7Yilb-B1M/org.eclipse.sisu.plexus-~.M1-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.0.M1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.sisu/org.eclipse.sisu.plexus", "versionInfo" : "0.3.0.M1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6", "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-api", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-locator", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-utils", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3", "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/osgi-resource-locator", "versionInfo" : "1.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.11/jersey-apache-connector-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.11", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SQGAvKCLb_YeIGpdm5DjRAFzHDlA3HXaKH0uoJhOIE/jersey-apache-connector-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.11/jersey-client-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFjkdmYyZIHDOWs70Y5lX-e5ktE_v-nP68lBbE6IWc0/jersey-client-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.core/jersey-client", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.11/jersey-common-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3lGNO9mwu28Bux_-Nu4u-Z-oHnHcwzF4DrIghQIHeY/jersey-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.core/jersey-common", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.11/jersey-hk2-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TebQJATQdwGRUPpC7VduvmcqQ2dc1hXux_4MMMU9sA0/jersey-hk2-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.inject/jersey-hk2", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.11/jersey-media-multipart-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l7JeW-thtrqp3-KRhvIyVi8fupF-HoJOx5jPiVp5Bv8/jersey-media-multipart-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2", "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker", "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hdrhistogram.github.io/HdrHistogram/", "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hdrhistogram/HdrHistogram", "versionInfo" : "2.2.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.2.Final", "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI", "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.2.Final/hibernate-validator-8.0.2.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ea6B0dJlADwa8XirwlEqD5Me8zch6Js0xrZm3M89WDg/hibernate-validator-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hibernate.org/validator/", "licenseConcluded" : "(CC-PDDC AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hibernate.validator/hibernate-validator", "versionInfo" : "8.0.2.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final", "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI", "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.3.Final/hibernate-validator-8.0.3.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.3.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xGDFrb_wMfreSEhbwws_H9EC2UHSwbM5qieHyeehJ2U/hibernate-validator-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://hibernate.org/validator", "licenseConcluded" : "(CC-PDDC AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hibernate.validator/hibernate-validator", "versionInfo" : "8.0.3.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0", "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich", "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/TooTallNate/Java-WebSocket", "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.java-websocket/Java-WebSocket", "versionInfo" : "1.6.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA", "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba", "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.javassist.org/", "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.javassist/javassist", "versionInfo" : "3.30.2-GA" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final", "copyrightText" : "Copyright 2023 Red Hat, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.3.Final/jboss-logging-3.6.3.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uvI3EFUkHy5LdLFSEGRYKeGb49613nbl5zJk5Fw1lJw/jboss-logging-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.jboss.org", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jboss.logging/jboss-logging", "versionInfo" : "3.6.3.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0", "copyrightText" : "Copyright 2018-2020 The JSpecify", "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://jspecify.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jspecify/jspecify", "versionInfo" : "1.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15", "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jvnet.mimepull/mimepull", "versionInfo" : "1.9.15" }, { "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3", "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene", "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://latencyutils.github.io/LatencyUtils/", "licenseConcluded" : "CC0-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.latencyutils/LatencyUtils", "versionInfo" : "2.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4", "copyrightText" : "Copyright 2014 Reactive Streams", "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzlZKD1w0srcX7HUjm-dlT3mVAU0KPihSho4sZTZnm4/reactive-streams-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.reactive-streams.org/", "licenseConcluded" : "MIT-0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.reactivestreams/reactive-streams", "versionInfo" : "1.0.4" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17", "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/jcl-over-slf4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fQc2eKipjY0kpA5RY8tMSF1CmGwn1uqL1jZo391dDj4/jul-to-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/jul-to-slf4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/slf4j-api", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-reload4j-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-reload4j/2.0.17/slf4j-reload4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/slf4j-reload4j@2.0.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TyHfxZJ9YBaVXO0Kgr34KiJDvO8S4gHfEbZok6cNyxg/slf4j-reload4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://reload4j.qos.ch", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/slf4j-reload4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.sonatype.plexus-plexus-build-api-0.0.4", "copyrightText" : "Copyright (c) 2008 Sonatype, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/org/sonatype/plexus/plexus-build-api/0.0.4/plexus-build-api-0.0.4.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.4", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WVfbY2EGN_4YknTUzw6Z8xZFvQPDEZZbQ1JwNh819x8/plexus-build-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.sonatype.plexus/plexus-build-api", "versionInfo" : "0.0.4" }, { "SPDXID" : "SPDXRef-pkg-maven-org.sonatype.plexus-plexus-cipher-1.4", "copyrightText" : "Copyright (c) 2008 Sonatype, Inc", "downloadLocation" : "https://repo1.maven.org/maven2/org/sonatype/plexus/plexus-cipher/1.4/plexus-cipher-1.4.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rvMkYl7gFSEDuuhek0iJJsUTWnzTek1jqFTG0djx5EM/plexus-cipher-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://spice.sonatype.org/plexus-cipher", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.sonatype.plexus/plexus-cipher", "versionInfo" : "1.4" }, { "SPDXID" : "SPDXRef-pkg-maven-org.sonatype.plexus-plexus-sec-dispatcher-1.3", "copyrightText" : "© 2001–2024 Codehaus Plexus", "downloadLocation" : "NOASSERTION", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pPtu-SbquY23jy19eggpiNR2MItUuyM9Sm-4nC7I_F0/plexus-sec-dispatcher-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.sonatype.plexus/plexus-sec-dispatcher", "versionInfo" : "1.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.sonatype.sisu-sisu-guice-3.2.3-classifier-no-aop", "copyrightText" : "Copyright 2006-2014 Google, Inc\nCopyright (c) 2006 Google Inc\nCopyright (c) 2006 Google Inc. Bundle-Vendor Sonatype, Inc. DynamicImport-Package", "downloadLocation" : "https://repo1.maven.org/maven2/org/sonatype/sisu/sisu-guice/3.2.3/sisu-guice-3.2.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sitoqxA0XZbcUAd9qV7QPy-djgAYHv3HKzMzm7jZVCk/sisu-guice-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.sonatype.sisu/sisu-guice", "versionInfo" : "3.2.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael Berry; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Wick Dynex; Yanming Zhou; Yongjun Hong; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.5.13/spring-boot-actuator-autoconfigure-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qM1Vrhn5pRKBIJLxuC8k276zGw1B-bMUI3jGbQqQ3Os/spring-boot-actuator-autoconfigure-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nabil Fawwaz Elqayyim; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Tommy Karlsson; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Xiong Tang; Young Jae; Yulin Qin; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.5.13/spring-boot-actuator-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MK768KVojQZgk0L32_OgahdvR30Wo47C1zuZckoKyf0/spring-boot-actuator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-actuator", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmitry Sulman; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Florian Lemaire; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Pedro Xavier Leite Cavadas; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.5.13/spring-boot-autoconfigure-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LuxV4VpV9t8JzrrGjEGTK-6xYYGKEtKZ5DLY4-n15do/spring-boot-autoconfigure-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-autoconfigure", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/3.5.13/spring-boot-starter-actuator-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AtExloF06w-vDS7jw2nn3kfeesOqdlXwdlSGLcQ4jak/spring-boot-starter-actuator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-actuator", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/3.5.13/spring-boot-starter-json-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e4jWB2hFmab1xDfAt74-Y55w_HEDksQiH4H4DPtdWT8/spring-boot-starter-json-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-json", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.5.13/spring-boot-starter-logging-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5fw_0zraYl_7voCFsy6BuBqxo21zNIT8tYzrulTioL8/spring-boot-starter-logging-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-logging", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-reactor-netty-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-reactor-netty/3.5.13/spring-boot-starter-reactor-netty-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QhljdNjL_aS3mR5dSHaWO0QRzA3oz0bZkKxpEeZc_FQ/spring-boot-starter-reactor-netty-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-reactor-netty", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/3.5.13/spring-boot-starter-security-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5vRQfv6LyeCINTNy1bRdBhh7f7s1AgQu-kwqkSXDR1w/spring-boot-starter-security-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-security", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/3.5.13/spring-boot-starter-tomcat-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kAtsyxlhJFmWQ4maWbTbeeBHbU1pKRKgrNkR1eHBcsE/spring-boot-starter-tomcat-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-validation/3.5.13/spring-boot-starter-validation-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-validation@3.5.13", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CC4GzBoFiZW_XcqqXjBIqPq0DRxDCwBuVBrYGOsu9VY/spring-boot-starter-validation-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-validation", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/3.5.13/spring-boot-starter-web-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1lH2ueoU4mTz3qjjA3rqk4tMzuHyNMP93qsNdT2rK0g/spring-boot-starter-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-web", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-webflux-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-webflux/3.5.13/spring-boot-starter-webflux-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KNKapLkyGDXZqAD7o8_DN_aAj7gYrjfwUValPSbdtBc/spring-boot-starter-webflux-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-webflux@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter-webflux", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.5.13/spring-boot-starter-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GRoeX2vsgR9dduGW3M_PnUMwSKd0tVVso19HxniUr80/spring-boot-starter-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-starter", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.13", "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andrey Litvitski; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daeho Kwon; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nan Chiu; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.5.13/spring-boot-3.5.13.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E8p1TSHRrSNERP-wjygNUPG0DFC3OHMg6ZC8n8H_HmM/spring-boot-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.5.13", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot", "versionInfo" : "3.5.13" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.9", "copyrightText" : "Copyright 2004-present the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ding Hao; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne ; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Pat McCusker; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/6.5.9/spring-security-config-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nZUCgaHURHNR26NoiH3XGaVee3jvyYWKNE_caI4qbV0/spring-security-config-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@6.5.9", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-config", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.9", "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/6.5.9/spring-security-core-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NfIRbLtdWIL1wW_tLh5VyAelT4K1jhpwv-yia28jNLU/spring-security-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@6.5.9", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-core", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.9", "copyrightText" : "Copyright (c) 2006 Damien Miller \nCopyright 2004-present the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/6.5.9/spring-security-crypto-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zB5v97tz2OACsjfNbbsZyR9_AuPFaKBCOumX-iQZfjU/spring-security-crypto-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@6.5.9", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-crypto", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.9", "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Claudenir Freitas; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Daeho Kwon; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Michal Okosy; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Nikita Konev; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sangyoon Jeong; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Yoobin Yoon; Zeeshan Adnan; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/6.5.9/spring-security-web-6.5.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@6.5.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tSrlCXzZ1YK7EGOjwFFRsACCGQ1jfGzRofr3o2GB6f8/spring-security-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-web", "versionInfo" : "6.5.9" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.17/spring-aop-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NOUf0er1203jwHYX3NMxVfIVtqw4fsDlio7zjzYnroo/spring-aop-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-aop", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. Therefore; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.17/spring-beans-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f9peXVqlxLMH3VXPTN5VMSIq5UhabGo8dpB4qVEzpao/spring-beans-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-beans", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.17/spring-context-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.17", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tQmsk1uWXTR7s4EHLi1bsi8ia28Sf0qmq_JG6nqlroI/spring-context-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-context", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.17/spring-core-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o8gSdVJh9AdfMtFRHZkG2dPKCPIeTADOf0Gv18zv6lw/spring-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-core", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.17/spring-expression-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p6Ihxuv4tF5d7ljOqE6O8j16MDVzLVacbWDDESJ4dHM/spring-expression-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-expression", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.17/spring-jcl-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cuAMiMrufw6J9qa2UdETJg7geWy4vnCk3C0NS3g9WSM/spring-jcl-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-jcl", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.17/spring-web-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hS5ujBEYHNrwdzW7vNlrhWlZZMCUZzBBK0vMikHFCOU/spring-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-web", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webflux-6.2.17", "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ], "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Arjen Poutsma; Brian Clozel; Darren Davison; George Papadopoulos; Greg Wilkins; INRIA, France Telecom; Igor Manushin; Issam El-atif; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Lachlan Roberts; OW2 Consortium; Olga Maciaszek-Sharma; Pivotal, Inc.; Rob Winch; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Stephane Maldini; Valentin Shakhov; Violeta Georgieva; Yevhenii Melnyk; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webflux/6.2.17/spring-webflux-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wSFKvSRbshbwrw1ezS4KYGkegtDg83kUD_APgnlCVO0/spring-webflux-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-webflux@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-webflux", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.17", "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Taeik Lim; Thomas Risberg; Vedran Pavic; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.17/spring-webmvc-6.2.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sGOzN6BYu5Q08nytgKdkj7Amh0z7yJFpRgOab0GMan8/spring-webmvc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-webmvc", "versionInfo" : "6.2.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.twdata.maven-mojo-executor-2.4.1", "copyrightText" : "Copyright 2008-2013 Don Brown\nCopyright 2013 Robert Munteanu", "downloadLocation" : "https://repo1.maven.org/maven2/org/twdata/maven/mojo-executor/2.4.1/mojo-executor-2.4.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7-h8hGYhDWJZbmDzO2WUGiSPDoSLt0wMRvYwM2rBFas/mojo-executor-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.twdata.maven/mojo-executor@2.4.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.twdata.maven/mojo-executor", "versionInfo" : "2.4.1" }, { "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4", "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML", "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.4", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO38iEj-NCzAqI21sz6Ktwg7iVuQ5IRLxSB8qyAgRHA/snakeyaml-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.yaml/snakeyaml", "versionInfo" : "2.4" } ], "relationships" : [ { "spdxElementId" : "SPDXRef-DOCUMENT", "relationshipType" : "DESCRIBES", "relatedSpdxElement" : "SPDXRef-cumulocity-java-sdk-2026.0.7" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.13.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-artifact-manager-2.2.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-artifact-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven.wagon-wagon-provider-api-3.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-aether-provider-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven.wagon-wagon-http-lightweight-3.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven.wagon-wagon-http-shared-3.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven.shared-maven-filtering-1.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.14.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven.shared-maven-shared-utils-0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.15.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpmime-4.5.14" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-core-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-settings-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.53" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-repository-metadata-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-settings-builder-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-profile-2.2.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-project-2.2.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-plugin-api-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-plugin-registry-2.2.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-model-builder-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.maven-maven-model-3.2.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.0.M1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.0.M1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.paho-org.eclipse.paho.client.mqttv3-1.2.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.2.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-interpolation-1.21" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-component-annotations-1.5.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-container-default-2.1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-classworlds-2.5.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.53" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.xbean-xbean-reflect-3.7" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.53" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-spi-1.0.0.v20140518" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-util-1.0.0.v20140518" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-api-1.0.0.v20140518" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.aether-aether-impl-1.0.0.v20140518" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.codehaus.plexus-plexus-utils-3.0.20" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.9" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-webflux-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-core-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-api-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-okhttp-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.twdata.maven-mojo-executor-2.4.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-jersey-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webflux-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-transport-netty-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.12" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.docker-java-docker-java-3.2.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.collections-google-collections-1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.sonatype.plexus-plexus-sec-dispatcher-1.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.sonatype.plexus-plexus-build-api-0.0.4" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.sonatype.plexus-plexus-cipher-1.4" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.kohlschutter.junixsocket-junixsocket-common-2.3.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-reload4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-3.14.9" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okio-okio-1.17.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.kohlschutter.junixsocket-junixsocket-native-common-2.3.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-reactor-netty-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.3.5" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.sonatype.sisu-sisu-guice-3.2.3-classifier-no-aop" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.5.13" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.reload4j-reload4j-1.2.22" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-aopalliance-aopalliance-1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-backport-util-concurrent-backport-util-concurrent-3.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.132.Final-classifier-linux-x86-64" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-kqueue-4.1.132.Final-classifier-osx-x86-64" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-kqueue-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.2.16" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.2.16" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.132.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.7.17" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.el-jakarta.el-api-6.0.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.activation-activation-1.1.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.inject-javax.inject-1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.2.12" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.annotation-jsr250-api-1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.enterprise-cdi-api-1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.1" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.21" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14" }, { "spdxElementId" : "SPDXRef-cumulocity-java-sdk-2026.0.7", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.8.0" } ] }