{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-04-16T09:43:51Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "lwm2m-agent-v1021.11.31",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-GPL-2.0-with-oracle-classpath-exception",
    "extractedText" : "The GNU General Public License (GPL)\n\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.\n59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nEveryone is permitted to copy and distribute verbatim copies of this license\ndocument, but changing it is not allowed.\n\nPreamble\n\nThe licenses for most software are designed to take away your freedom to share\nand change it.  By contrast, the GNU General Public License is intended to\nguarantee your freedom to share and change free software--to make sure the\nsoftware is free for all its users.  This General Public License applies to\nmost of the Free Software Foundation's software and to any other program whose\nauthors commit to using it.  (Some other Free Software Foundation software is\ncovered by the GNU Library General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not price.  Our\nGeneral Public Licenses are designed to make sure that you have the freedom to\ndistribute copies of free software (and charge for this service if you wish),\nthat you receive source code or can get it if you want it, that you can change\nthe software or use pieces of it in new free programs; and that you know you\ncan do these things.\n\nTo protect your rights, we need to make restrictions that forbid anyone to deny\nyou these rights or to ask you to surrender the rights.  These restrictions\ntranslate to certain responsibilities for you if you distribute copies of the\nsoftware, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether gratis or for\na fee, you must give the recipients all the rights that you have.  You must\nmake sure that they, too, receive or can get the source code.  And you must\nshow them these terms so they know their rights.\n\nWe protect your rights with two steps: (1) copyright the software, and (2)\noffer you this license which gives you legal permission to copy, distribute\nand/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain that\neveryone understands that there is no warranty for this free software.  If the\nsoftware is modified by someone else and passed on, we want its recipients to\nknow that what they have is not the original, so that any problems introduced\nby others will not reflect on the original authors' reputations.\n\nFinally, any free program is threatened constantly by software patents.  We\nwish to avoid the danger that redistributors of a free program will\nindividually obtain patent licenses, in effect making the program proprietary.\nTo prevent this, we have made it clear that any patent must be licensed for\neveryone's free use or not licensed at all.\n\nThe precise terms and conditions for copying, distribution and modification\nfollow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a notice\nplaced by the copyright holder saying it may be distributed under the terms of\nthis General Public License.  The \"Program\", below, refers to any such program\nor work, and a \"work based on the Program\" means either the Program or any\nderivative work under copyright law: that is to say, a work containing the\nProgram or a portion of it, either verbatim or with modifications and/or\ntranslated into another language.  (Hereinafter, translation is included\nwithout limitation in the term \"modification\".) Each licensee is addressed as\n\"you\".\n\nActivities other than copying, distribution and modification are not covered by\nthis License; they are outside its scope.  The act of running the Program is\nnot restricted, and the output from the Program is covered only if its contents\nconstitute a work based on the Program (independent of having been made by\nrunning the Program).  Whether that is true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source code as\nyou receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice and\ndisclaimer of warranty; keep intact all the notices that refer to this License\nand to the absence of any warranty; and give any other recipients of the\nProgram a copy of this License along with the Program.\n\nYou may charge a fee for the physical act of transferring a copy, and you may\nat your option offer warranty protection in exchange for a fee.\n\n2. You may modify your copy or copies of the Program or any portion of it, thus\nforming a work based on the Program, and copy and distribute such modifications\nor work under the terms of Section 1 above, provided that you also meet all of\nthese conditions:\n\n    a) You must cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change.\n\n    b) You must cause any work that you distribute or publish, that in whole or\n    in part contains or is derived from the Program or any part thereof, to be\n    licensed as a whole at no charge to all third parties under the terms of\n    this License.\n\n    c) If the modified program normally reads commands interactively when run,\n    you must cause it, when started running for such interactive use in the\n    most ordinary way, to print or display an announcement including an\n    appropriate copyright notice and a notice that there is no warranty (or\n    else, saying that you provide a warranty) and that users may redistribute\n    the program under these conditions, and telling the user how to view a copy\n    of this License.  (Exception: if the Program itself is interactive but does\n    not normally print such an announcement, your work based on the Program is\n    not required to print an announcement.)\n\nThese requirements apply to the modified work as a whole.  If identifiable\nsections of that work are not derived from the Program, and can be reasonably\nconsidered independent and separate works in themselves, then this License, and\nits terms, do not apply to those sections when you distribute them as separate\nworks.  But when you distribute the same sections as part of a whole which is a\nwork based on the Program, the distribution of the whole must be on the terms\nof this License, whose permissions for other licensees extend to the entire\nwhole, and thus to each and every part regardless of who wrote it.\n\nThus, it is not the intent of this section to claim rights or contest your\nrights to work written entirely by you; rather, the intent is to exercise the\nright to control the distribution of derivative or collective works based on\nthe Program.\n\nIn addition, mere aggregation of another work not based on the Program with the\nProgram (or with a work based on the Program) on a volume of a storage or\ndistribution medium does not bring the other work under the scope of this\nLicense.\n\n3. You may copy and distribute the Program (or a work based on it, under\nSection 2) in object code or executable form under the terms of Sections 1 and\n2 above provided that you also do one of the following:\n\n    a) Accompany it with the complete corresponding machine-readable source\n    code, which must be distributed under the terms of Sections 1 and 2 above\n    on a medium customarily used for software interchange; or,\n\n    b) Accompany it with a written offer, valid for at least three years, to\n    give any third party, for a charge no more than your cost of physically\n    performing source distribution, a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of Sections 1\n    and 2 above on a medium customarily used for software interchange; or,\n\n    c) Accompany it with the information you received as to the offer to\n    distribute corresponding source code.  (This alternative is allowed only\n    for noncommercial distribution and only if you received the program in\n    object code or executable form with such an offer, in accord with\n    Subsection b above.)\n\nThe source code for a work means the preferred form of the work for making\nmodifications to it.  For an executable work, complete source code means all\nthe source code for all modules it contains, plus any associated interface\ndefinition files, plus the scripts used to control compilation and installation\nof the executable.  However, as a special exception, the source code\ndistributed need not include anything that is normally distributed (in either\nsource or binary form) with the major components (compiler, kernel, and so on)\nof the operating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering access to copy\nfrom a designated place, then offering equivalent access to copy the source\ncode from the same place counts as distribution of the source code, even though\nthird parties are not compelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program except as\nexpressly provided under this License.  Any attempt otherwise to copy, modify,\nsublicense or distribute the Program is void, and will automatically terminate\nyour rights under this License.  However, parties who have received copies, or\nrights, from you under this License will not have their licenses terminated so\nlong as such parties remain in full compliance.\n\n5. You are not required to accept this License, since you have not signed it.\nHowever, nothing else grants you permission to modify or distribute the Program\nor its derivative works.  These actions are prohibited by law if you do not\naccept this License.  Therefore, by modifying or distributing the Program (or\nany work based on the Program), you indicate your acceptance of this License to\ndo so, and all its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the Program),\nthe recipient automatically receives a license from the original licensor to\ncopy, distribute or modify the Program subject to these terms and conditions.\nYou may not impose any further restrictions on the recipients' exercise of the\nrights granted herein.  You are not responsible for enforcing compliance by\nthird parties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues), conditions\nare imposed on you (whether by court order, agreement or otherwise) that\ncontradict the conditions of this License, they do not excuse you from the\nconditions of this License.  If you cannot distribute so as to satisfy\nsimultaneously your obligations under this License and any other pertinent\nobligations, then as a consequence you may not distribute the Program at all.\nFor example, if a patent license would not permit royalty-free redistribution\nof the Program by all those who receive copies directly or indirectly through\nyou, then the only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under any\nparticular circumstance, the balance of the section is intended to apply and\nthe section as a whole is intended to apply in other circumstances.\n\nIt is not the purpose of this section to induce you to infringe any patents or\nother property right claims or to contest validity of any such claims; this\nsection has the sole purpose of protecting the integrity of the free software\ndistribution system, which is implemented by public license practices.  Many\npeople have made generous contributions to the wide range of software\ndistributed through that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing to\ndistribute software through any other system and a licensee cannot impose that\nchoice.\n\nThis section is intended to make thoroughly clear what is believed to be a\nconsequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in certain\ncountries either by patents or by copyrighted interfaces, the original\ncopyright holder who places the Program under this License may add an explicit\ngeographical distribution limitation excluding those countries, so that\ndistribution is permitted only in or among countries not thus excluded.  In\nsuch case, this License incorporates the limitation as if written in the body\nof this License.\n\n9. The Free Software Foundation may publish revised and/or new versions of the\nGeneral Public License from time to time.  Such new versions will be similar in\nspirit to the present version, but may differ in detail to address new problems\nor concerns.\n\nEach version is given a distinguishing version number.  If the Program\nspecifies a version number of this License which applies to it and \"any later\nversion\", you have the option of following the terms and conditions either of\nthat version or of any later version published by the Free Software Foundation.\nIf the Program does not specify a version number of this License, you may\nchoose any version ever published by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free programs\nwhose distribution conditions are different, write to the author to ask for\npermission.  For software which is copyrighted by the Free Software Foundation,\nwrite to the Free Software Foundation; we sometimes make exceptions for this.\nOur decision will be guided by the two goals of preserving the free status of\nall derivatives of our free software and of promoting the sharing and reuse of\nsoftware generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR\nTHE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN OTHERWISE\nSTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE\nPROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND\nPERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE,\nYOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL\nANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE\nPROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER\nOR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\nHow to Apply These Terms to Your New Programs\n\nIf you develop a new program, and you want it to be of the greatest possible\nuse to the public, the best way to achieve this is to make it free software\nwhich everyone can redistribute and change under these terms.\n\nTo do so, attach the following notices to the program.  It is safest to attach\nthem to the start of each source file to most effectively convey the exclusion\nof warranty; and each file should have at least the \"copyright\" line and a\npointer to where the full notice is found.\n\n    One line to give the program's name and a brief idea of what it does.\n\n    Copyright (C) <year> <name of author>\n\n    This program is free software; you can redistribute it and/or modify it\n    under the terms of the GNU General Public License as published by the Free\n    Software Foundation; either version 2 of the License, or (at your option)\n    any later version.\n\n    This program is distributed in the hope that it will be useful, but WITHOUT\n    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\n    FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for\n    more details.\n\n    You should have received a copy of the GNU General Public License along\n    with this program; if not, write to the Free Software Foundation, Inc., 59\n    Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nAlso add information on how to contact you by electronic and paper mail.\n\nIf the program is interactive, make it output a short notice like this when it\nstarts in an interactive mode:\n\n    Gnomovision version 69, Copyright (C) year name of author Gnomovision comes\n    with ABSOLUTELY NO WARRANTY; for details type 'show w'.  This is free\n    software, and you are welcome to redistribute it under certain conditions;\n    type 'show c' for details.\n\nThe hypothetical commands 'show w' and 'show c' should show the appropriate\nparts of the General Public License.  Of course, the commands you use may be\ncalled something other than 'show w' and 'show c'; they could even be\nmouse-clicks or menu items--whatever suits your program.\n\nYou should also get your employer (if you work as a programmer) or your school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.  Here\nis a sample; alter the names:\n\n    Yoyodyne, Inc., hereby disclaims all copyright interest in the program\n    'Gnomovision' (which makes passes at compilers) written by James Hacker.\n\n    signature of Ty Coon, 1 April 1989\n\n    Ty Coon, President of Vice\n\nThis General Public License does not permit incorporating your program into\nproprietary programs.  If your program is a subroutine library, you may\nconsider it more useful to permit linking proprietary applications with the\nlibrary.  If this is what you want to do, use the GNU Library General Public\nLicense instead of this License.\n\n\n\"CLASSPATH\" EXCEPTION TO THE GPL\n\nCertain source files distributed by Oracle America and/or its affiliates are\nsubject to the following clarification and special exception to the GPL, but\nonly where Oracle has expressly included in the particular source file's header\nthe words \"Oracle designates this particular file as subject to the \"Classpath\"\nexception as provided by Oracle in the LICENSE file that accompanied this code.\"\n\n    Linking this library statically or dynamically with other modules is making\n    a combined work based on this library.  Thus, the terms and conditions of\n    the GNU General Public License cover the whole combination.\n\n    As a special exception, the copyright holders of this library give you\n    permission to link this library with independent modules to produce an\n    executable, regardless of the license terms of these independent modules,\n    and to copy and distribute the resulting executable under terms of your\n    choice, provided that you also meet, for each linked independent module,\n    the terms and conditions of the license of that module.  An independent\n    module is a module which is not derived from or based on this library.  If\n    you modify this library, you may extend this exception to your version of\n    the library, but you are not obligated to do so.  If you do not wish to do\n    so, delete this exception statement from your version.\n\n\n\n\nADDITIONAL INFORMATION ABOUT LICENSING\n\nCertain files distributed by Oracle America, Inc. and/or its affiliates are\nsubject to the following clarification and special exception to the GPLv2,\nbased on the GNU Project exception for its Classpath libraries, known as the\nGNU Classpath Exception.\n\nNote that Oracle includes multiple, independent programs in this software\npackage.  Some of those programs are provided under licenses deemed\nincompatible with the GPLv2 by the Free Software Foundation and others.\nFor example, the package includes programs licensed under the Apache\nLicense, Version 2.0 and may include FreeType. Such programs are licensed\nto you under their original licenses.\n\nOracle facilitates your further distribution of this package by adding the\nClasspath Exception to the necessary parts of its GPLv2 code, which permits\nyou to use that code in combination with other independent modules not\nlicensed under the GPLv2. However, note that this would not permit you to\ncommingle code under an incompatible license with Oracle's GPLv2 licensed\ncode by, for example, cutting and pasting such code into a file also\ncontaining Oracle's GPLv2 licensed code and then distributing the result.\n\nAdditionally, if you were to remove the Classpath Exception from any of the\nfiles to which it applies and distribute the result, you would likely be\nrequired to license some or all of the other code in that distribution under\nthe GPLv2 as well, and since the GPLv2 is incompatible with the license terms\nof some items included in the distribution by Oracle, removing the Classpath\nException could therefore effectively compromise your ability to further\ndistribute the package.\n\nFailing to distribute notices associated with some files may also create\nunexpected legal consequences.\n\nProceed with caution and we recommend that you obtain the advice of a lawyer\nskilled in open source matters before removing the Classpath Exception or\nmaking modifications to this package which may subsequently be redistributed\nand/or involve the use of third party software.",
    "name" : "GPL 2.0 with oracle classpath exception"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-scancode-amd-historical",
    "extractedText" : "This software is the property of Advanced Micro Devices, Inc  (AMD)  which\nspecifically  grants the user the right to modify, use and distribute this\nsoftware provided this notice is not removed or altered.  All other rights\nare reserved by AMD.\n\nAMD MAKES NO WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, WITH REGARD TO THIS\nSOFTWARE.  IN NO EVENT SHALL AMD BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL\nDAMAGES IN CONNECTION WITH OR ARISING FROM THE FURNISHING, PERFORMANCE, OR\nUSE OF THIS SOFTWARE.",
    "name" : "LicenseRef-scancode-amd-historical"
  }, {
    "licenseId" : "LicenseRef-scancode-bsla-no-advert",
    "extractedText" : "Redistribution and use in source and binary forms are permitted\nprovided that the above copyright notice and this paragraph are\nduplicated in all such forms and that any documentation,\nand other materials related to such\ndistribution and use acknowledge that the software was developed\nby the University of California, Berkeley. The name of the\nUniversity may not be used to endorse or promote products derived\nfrom this software without specific prior written permission.\nTHIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.",
    "name" : "LicenseRef-scancode-bsla-no-advert"
  }, {
    "licenseId" : "LicenseRef-scancode-d-zlib",
    "extractedText" : "This software is provided 'as-is', without any express or implied\nwarranty. In no event will the authors be held liable for any damages\narising from the use of this software.\n\nPermission is granted to anyone to use this software for any purpose,\nincluding commercial applications, and to alter it and redistribute it\nfreely, in both source and binary form, subject to the following\nrestrictions:\n\no  The origin of this software must not be misrepresented; you must not\n   claim that you wrote the original software. If you use this software\n   in a product, an acknowledgment in the product documentation would be\n   appreciated but is not required.\no  Altered source versions must be plainly marked as such, and must not\n   be misrepresented as being the original software.\no  This notice may not be removed or altered from any source\n   distribution.",
    "name" : "LicenseRef-scancode-d-zlib"
  }, {
    "licenseId" : "LicenseRef-scancode-freetype-patent",
    "extractedText" : "Additionally, subject to the terms and conditions of the */\nFreeType Project License, each contributor to the Work hereby grants \nto any individual or legal entity exercising permissions granted by  \nthe FreeType Project License and this section (hereafter, \"You\" or   \n\"Your\") a perpetual, worldwide, non-exclusive, no-charge,            \nroyalty-free, irrevocable (except as stated in this section) patent  \nlicense to make, have made, use, offer to sell, sell, import, and    \notherwise transfer the Work, where such license applies only to those\npatent claims licensable by such contributor that are necessarily    \ninfringed by their contribution(s) alone or by combination of their  \ncontribution(s) with the Work to which such contribution(s) was      \nsubmitted.  If You institute patent litigation against any entity    \n(including a cross-claim or counterclaim in a lawsuit) alleging that \nthe Work or a contribution incorporated within the Work constitutes  \ndirect or contributory patent infringement, then any patent licenses \ngranted to You under this License for that Work shall terminate as of\nthe date such litigation is filed.",
    "name" : "LicenseRef-scancode-freetype-patent"
  }, {
    "licenseId" : "LicenseRef-scancode-gnu-emacs-gpl-1988",
    "extractedText" : "GNU EMACS GENERAL PUBLIC LICENSE\n\t\t    (Clarified 11 Feb 1988)\n\n Copyright (C) 1985, 1987, 1988 Richard M. Stallman\n Everyone is permitted to copy and distribute verbatim copies\n of this license, but changing it is not allowed.  You can also\n use this wording to make the terms for other programs.\n\n  The license agreements of most software companies keep you at the\nmercy of those companies.  By contrast, our general public license is\nintended to give everyone the right to share GNU Emacs.  To make\nsure that you get the rights we want you to have, we need to make\nrestrictions that forbid anyone to deny you these rights or to ask you\nto surrender the rights.  Hence this license agreement.\n\n  Specifically, we want to make sure that you have the right to give\naway copies of Emacs, that you receive source code or else can get it\nif you want it, that you can change Emacs or use pieces of it in new\nfree programs, and that you know you can do these things.\n\n  To make sure that everyone has such rights, we have to forbid you to\ndeprive anyone else of these rights.  For example, if you distribute\ncopies of Emacs, you must give the recipients all the rights that you\nhave.  You must make sure that they, too, receive or can get the\nsource code.  And you must tell them their rights.\n\n  Also, for our own protection, we must make certain that everyone\nfinds out that there is no warranty for GNU Emacs.  If Emacs is\nmodified by someone else and passed on, we want its recipients to know\nthat what they have is not what we distributed, so that any problems\nintroduced by others will not reflect on our reputation.\n\n  Therefore we (Richard Stallman and the Free Software Fundation,\nInc.) make the following terms which say what you must do to be\nallowed to distribute or change GNU Emacs.\n\n\t\t\tCOPYING POLICIES\n\n  1. You may copy and distribute verbatim copies of GNU Emacs source code\nas you receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy a valid copyright notice \"Copyright\n(C) 1988 Free Software Foundation, Inc.\" (or with whatever year is\nappropriate); keep intact the notices on all files that refer to this\nLicense Agreement and to the absence of any warranty; and give any\nother recipients of the GNU Emacs program a copy of this License\nAgreement along with the program.  You may charge a distribution fee\nfor the physical act of transferring a copy.\n\n  2. You may modify your copy or copies of GNU Emacs source code or\nany portion of it, and copy and distribute such modifications under\nthe terms of Paragraph 1 above, provided that you also do the following:\n\n    a) cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change; and\n\n    b) cause the whole of any work that you distribute or publish,\n    that in whole or in part contains or is a derivative of GNU Emacs\n    or any part thereof, to be licensed at no charge to all third\n    parties on terms identical to those contained in this License\n    Agreement (except that you may choose to grant more extensive\n    warranty protection to some or all third parties, at your option).\n\n    c) if the modified program serves as a text editor, cause it when\n    started running in the simplest and usual way, to print an\n    announcement including a valid copyright notice \"Copyright (C)\n    1988 Free Software Foundation, Inc.\" (or with the year that is\n    appropriate), saying that there is no warranty (or else, saying\n    that you provide a warranty) and that users may redistribute the\n    program under these conditions, and telling the user how to view a\n    copy of this License Agreement.\n\n    d) You may charge a distribution fee for the physical act of\n    transferring a copy, and you may at your option offer warranty\n    protection in exchange for a fee.\n\nMere aggregation of another unrelated program with this program (or its\nderivative) on a volume of a storage or distribution medium does not bring\nthe other program under the scope of these terms.\n\n  3. You may copy and distribute GNU Emacs (or a portion or derivative of it,\nunder Paragraph 2) in object code or executable form under the terms of\nParagraphs 1 and 2 above provided that you also do one of the following:\n\n    a) accompany it with the complete corresponding machine-readable\n    source code, which must be distributed under the terms of\n    Paragraphs 1 and 2 above; or,\n\n    b) accompany it with a written offer, valid for at least three\n    years, to give any third party free (except for a nominal\n    shipping charge) a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of\n    Paragraphs 1 and 2 above; or,\n\n    c) accompany it with the information you received as to where the\n    corresponding source code may be obtained.  (This alternative is\n    allowed only for noncommercial distribution and only if you\n    received the program in object code or executable form alone.)\n\nFor an executable file, complete source code means all the source code for\nall modules it contains; but, as a special exception, it need not include\nsource code for modules which are standard libraries that accompany the\noperating system on which the executable file runs.\n\n  4. You may not copy, sublicense, distribute or transfer GNU Emacs\nexcept as expressly provided under this License Agreement.  Any attempt\notherwise to copy, sublicense, distribute or transfer GNU Emacs is void and\nyour rights to use GNU Emacs under this License agreement shall be\nautomatically terminated.  However, parties who have received computer\nsoftware programs from you with this License Agreement will not have\ntheir licenses terminated so long as such parties remain in full compliance.\n\n  5. If you wish to incorporate parts of GNU Emacs into other free programs\nwhose distribution conditions are different, write to the Free Software\nFoundation.  We have not yet worked out a simple rule that can be stated\nhere, but we will often permit this.  We will be guided by the two goals of\npreserving the free status of all derivatives of our free software and of\npromoting the sharing and reuse of software.\n\nYour comments and suggestions about our licensing policies and our\nsoftware are welcome!  Please contact the Free Software Foundation, Inc.,\n675 Mass Ave, Cambridge, MA 02139, or call (617) 876-3296.\n\n\t\t\t   NO WARRANTY\n\n  BECAUSE GNU EMACS IS LICENSED FREE OF CHARGE, WE PROVIDE ABSOLUTELY\nNO WARRANTY, TO THE EXTENT PERMITTED BY APPLICABLE STATE LAW.  EXCEPT\nWHEN OTHERWISE STATED IN WRITING, FREE SOFTWARE FOUNDATION, INC,\nRICHARD M. STALLMAN AND/OR OTHER PARTIES PROVIDE GNU EMACS \"AS IS\"\nWITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING,\nBUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY\nAND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE GNU EMACS\nPROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY\nSERVICING, REPAIR OR CORRECTION.\n\n IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW WILL FREE SOFTWARE\nFOUNDATION, INC., RICHARD M. STALLMAN, AND/OR ANY OTHER PARTY WHO MAY\nMODIFY AND REDISTRIBUTE GNU EMACS AS PERMITTED ABOVE, BE LIABLE TO YOU\nFOR DAMAGES, INCLUDING ANY LOST PROFITS, LOST MONIES, OR OTHER\nSPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH PROGRAMS NOT DISTRIBUTED BY\nFREE SOFTWARE FOUNDATION, INC.) THE PROGRAM, EVEN IF YOU HAVE BEEN\nADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY ANY\nOTHER PARTY.",
    "name" : "LicenseRef-scancode-gnu-emacs-gpl-1988"
  }, {
    "licenseId" : "LicenseRef-scancode-intel-osl-1993",
    "extractedText" : "Intel hereby grants you permission to copy, modify, and distribute this\nsoftware and its documentation.  Intel grants this permission provided\nthat the above copyright notice appears in all copies and that both the\ncopyright notice and this permission notice appear in supporting\ndocumentation.  In addition, Intel grants this permission provided that\nyou prominently mark as \"not part of the original\" any modifications\nmade to this software or documentation, and that the name of Intel\nCorporation not be used in advertising or publicity pertaining to\ndistribution of the software or the documentation without specific,\nwritten prior permission.\n\nIntel Corporation provides this AS IS, WITHOUT ANY WARRANTY, EXPRESS OR\nIMPLIED, INCLUDING, WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY\nOR FITNESS FOR A PARTICULAR PURPOSE.  Intel makes no guarantee or\nrepresentations regarding the use of, or the results of the use of,\nthe software and documentation in terms of correctness, accuracy,\nreliability, currentness, or otherwise; and you rely on the software,\ndocumentation and results solely at your own risk.\n\nIN NO EVENT SHALL INTEL BE LIABLE FOR ANY LOSS OF USE, LOSS OF BUSINESS,\nLOSS OF PROFITS, INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES\nOF ANY KIND.  IN NO EVENT SHALL INTEL'S TOTAL LIABILITY EXCEED THE SUM\nPAID TO INTEL FOR THE PRODUCT LICENSED HEREUNDER.",
    "name" : "LicenseRef-scancode-intel-osl-1993"
  }, {
    "licenseId" : "LicenseRef-scancode-khronos",
    "extractedText" : "Permission is hereby granted, free of charge, to any person obtaining a\ncopy of this software and/or associated documentation files (the\n\"Materials\"), to deal in the Materials without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Materials, and to\npermit persons to whom the Materials are furnished to do so, subject\nto the following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Materials.\n\nTHE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\nIN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\nCLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\nTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\nMATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.",
    "name" : "LicenseRef-scancode-khronos"
  }, {
    "licenseId" : "LicenseRef-scancode-newlib-historical",
    "extractedText" : "The authors hereby grant permission to use, copy, modify, distribute,\nand license this software and its documentation for any purpose, provided\nthat existing copyright notices are retained in all copies and that this\nnotice is included verbatim in any distributions. No written agreement,\nlicense, or royalty fee is required for any of the authorized uses.\nModifications to this software may be copyrighted by their authors\nand need not follow the licensing terms described here, provided that\nthe new terms are clearly indicated on the first page of each file where\nthey apply.",
    "name" : "LicenseRef-scancode-newlib-historical"
  }, {
    "licenseId" : "LicenseRef-scancode-nilsson-historical",
    "extractedText" : "Permission to use, copy, modify, and distribute this software is\nfreely granted, provided that the above copyright notice, this notice\nand the following disclaimer are preserved with no changes.\n\nTHIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\nPURPOSE.",
    "name" : "LicenseRef-scancode-nilsson-historical"
  }, {
    "licenseId" : "LicenseRef-scancode-pcre",
    "extractedText" : "PCRE LICENCE \n------------ \n\nPCRE is a library of functions to support regular expressions whose\nsyntax and semantics are as close as possible to those of the Perl 5\nlanguage.\n\nWritten by: Philip Hazel <ph10@cam.ac.uk>\nUniversity of Cambridge Computing Service, Cambridge, England. \nPhone: +44 1223 334714.\nCopyright (c) 1997-2001 University of Cambridge\n\nPermission is granted to anyone to use this software for any purpose on\nany computer system, and to redistribute it freely, subject to the\nfollowing restrictions:\n\n1. This software is distributed in the hope that it will be useful, but\nWITHOUT ANY WARRANTY; without even the implied warranty of\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n\n2. The origin of this software must not be misrepresented, either by\nexplicit claim or by omission. In practice, this means that if you use\nPCRE in software which you distribute to others, commercially or\notherwise, you must put a sentence like this\n\"Regular expression support is provided by the PCRE library package,\nwhich is open source software, written by Philip Hazel, and copyright by\nthe University of Cambridge, England\" \n\nsomewhere reasonably visible in your documentation and in any relevant\nfiles or online help data or similar.\n\nA reference to the ftp site for the source, that is, to\nftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/ \nshould also be given in the documentation.\n\n3. Altered versions must be plainly marked as such, and must not be\nmisrepresented as being the original software.\n\n4. If PCRE is embedded in any software that is released under the GNU\nGeneral Purpose Licence (GPL), or Lesser General Purpose Licence (LGPL),\nthen the terms of that licence shall supersede any condition above with\nwhich it is incompatible.\n\nThe documentation for PCRE, supplied in the \"doc\" directory, is\ndistributed under the same terms as the software itself.\n\nEnd PCRE LICENCE",
    "name" : "LicenseRef-scancode-pcre"
  }, {
    "licenseId" : "LicenseRef-scancode-unicode",
    "extractedText" : "UNICODE, INC. LICENSE AGREEMENT - DATA FILES AND SOFTWARE\n\nUnicode Data Files include all data files under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/ . Unicode Software includes any source\ncode published in the Unicode Standard or under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/.\n\nNOTICE TO USER: Carefully read the following legal agreement. BY\nDOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING UNICODE INC.'S DATA\nFILES (\"DATA FILES\"), AND/OR SOFTWARE (\"SOFTWARE\"), YOU UNEQUIVOCALLY\nACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE TERMS AND CONDITIONS OF THIS\nAGREEMENT. IF YOU DO NOT AGREE, DO NOT DOWNLOAD, INSTALL, COPY, DISTRIBUTE\nOR USE THE DATA FILES OR SOFTWARE.\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright ©  Unicode, Inc. All rights reserved. Distributed under\nthe Terms of Use in http://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of the Unicode data files and any associated documentation (the\n\"Data Files\") or Unicode software and any associated documentation (the\n\"Software\") to deal in the Data Files or Software without restriction,\nincluding without limitation the rights to use, copy, modify, merge,\npublish, distribute, and/or sell copies of the Data Files or Software,\nand to permit persons to whom the Data Files or Software are furnished\nto do so, provided that\n\n(a) the above copyright notice(s) and this permission notice appear with\nall copies of the Data Files or Software,\n\n(b) both the above copyright notice(s) and this permission notice appear\nin associated documentation, and\n\n(c) there is clear notice in each modified Data File or in the Software\nas well as in the documentation associated with the Data File(s) or\nSoftware that the data or software has been modified.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR HOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR\nANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder shall\nnot be used in advertising or otherwise to promote the sale, use or\nother dealings in these Data Files or Software without prior written\nauthorization of the copyright holder.\n\nUnicode and the Unicode logo are trademarks of Unicode, Inc., and may be\nregistered in some jurisdictions. All other trademarks and registered\ntrademarks mentioned herein are the property of their respective owners.",
    "name" : "LicenseRef-scancode-unicode"
  }, {
    "licenseId" : "LicenseRef-scancode-x11-hanson",
    "extractedText" : "Permission to use, copy, modify, and distribute this software for any\npurpose, subject to the provisions described below, without fee is\nhereby granted, provided that this entire notice is included in all\ncopies of any software that is or includes a copy or modification of\nthis software and in all copies of the supporting documentation for\nsuch software.\n\nTHIS SOFTWARE IS BEING PROVIDED \"AS IS\", WITHOUT ANY EXPRESS OR IMPLIED\nWARRANTY. IN PARTICULAR, THE AUTHOR DOES MAKE ANY REPRESENTATION OR\nWARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY OF THIS SOFTWARE OR\nITS FITNESS FOR ANY PARTICULAR PURPOSE.",
    "name" : "LicenseRef-scancode-x11-hanson"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-lwm2m-agent-v1021.11.31-d22cf96a-1cfe-4190-9076-590a4d232e53",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/lwm2m-agent@1021.11.31",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "lwm2m-agent",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "1021.11.31"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-base-files-12.4PLUSdeb12u13-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright (c) 1989 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1995-2011 Software in the Public Interest\nCopyright (c) The Regents of the University of California\ncopyrighted by the Free Software Foundation\ncopyrighted by the Free Software Foundation, Inc.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/b/base-files/base-files_12.4+deb12u13_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1Y0q3myGyhIIXAQx1eV1M6pgzSBHCaKGATbBadrKM6E/base-files_~%2Bdeb12u13_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/base-files@12.4%2Bdeb12u13?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/base-files",
    "versionInfo" : "12.4+deb12u13"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-fontconfig-config-2.14.1-4-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright (c) 2001,2003 Keith Packard\nCopyright (c) 2005 Sharif FarsiWeb, Inc. <license@farsiweb.info>",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/fontconfig/fontconfig-config_2.14.1-4_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8pEOEHBCEeNrlOhNOuVvmh7WaL1AECB2pEgOXckCGQo/fontconfig-config_~-4_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/fontconfig-config@2.14.1-4?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.freedesktop.org/wiki/Software/fontconfig/",
    "licenseConcluded" : "HPND-sell-variant",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/fontconfig-config",
    "versionInfo" : "2.14.1-4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-fonts-dejavu-core-2.37-6-arch-all-distro-debian-12",
    "copyrightText" : "Bitstream Vera is a trademark of Bitstream, Inc.\n(C) 2011-2013 Christian Perrier <bubulle@debian.org>\n(C) 2006-2011 Davide Viti <zinosat@tiscali.it>\n(C) 2013 Fabian Greffrath <fabian+debian@greffrath.com>\n(C) 2005-2006 Peter Cernak <pce@users.sourceforge.net>\nCopyright (c) 2005-2006 Peter Cernak <pce@users.sourceforge.net>\nCopyright (c) 2003 by Bitstream, Inc.\nCopyright (c) 2003 by Bitstream, Inc. All Rights Reserved.\nCopyright (c) 2006 by Tavmjong Bah\nDejaVu changes are in public domain.\n(c) 2004-2016 DejaVu fonts team\n(c) 2006-2008 Nicolas Mailhot at laposte.net\n(c) Tavmjung Bah\n(c) 2003 by Bitstream, Inc.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/fonts-dejavu/fonts-dejavu-core_2.37-6_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0bOn9tiuG6SQFD8wEmuZhFVT3Kaw2tqZYsEpm3dE-uU/fonts-dejavu-core_~-6_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/fonts-dejavu-core@2.37-6?arch=all&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://dejavu-fonts.github.io/",
    "licenseConcluded" : "(Bitstream-Vera AND GPL-2.0-or-later AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/fonts-dejavu-core",
    "versionInfo" : "2.37-6"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-gcc-12-base-12.2.0-14PLUSdeb12u1-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright 1989, 1990 Advanced Micro Devices, Inc.\nCopyright 1992, 1993, 1994 Henry Spencer\nCopyright ISO/IEC (International Organization for Standardization and International Electrotechnical Commission) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010\nCopyright 2001 Red Hat, Inc.\nCopyright 2002 SuperH, Inc.\nCopyright 1984, 1991 by Stephen L. Moshier Adapted\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright (c) 1986, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019\nCopyright (c) 2000, 2001 Alexey Zelkin <phantom@FreeBSD.org>\nCopyright (c) 2003, Artem B. Bityuckiy, SoftMine Corporation\nCopyright (c) 1993 C.W. Sandmann\nCopyright (c) 2001 Christopher G. Demetriou\nCopyright (c) 1999 Citrus Project\nCopyright (c) 1991 DJ Delorie\nCopyright (c) 2004-2007 David Friedman\nCopyright (c) 1997-2002 FreeBSD Project\nCopyright (c) 1990-1999, 2000, 2001 Free Software Foundation, Inc.\nCopyright (c) 1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 1997, 1999, 2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2012, 2013 Free Software Foundation, Inc.\nCopyright (c) 2001-2018 Free Software Foundation, Inc.\nCopyright (c) 2001-2019 Free Software Foundation, Inc.\nCopyright (c) 2002-2019 Free Software Foundation, Inc.\nCopyright (c) 2010 Free Software Foundation, Inc.\nCopyright (c) 2014-2019 Free Software Foundation, Inc.\nCopyright (c) 2001-2019 Free Software Foundation, Inc. Mix\nCopyright (c) 2005-2015 Free Software Foundation, Inc. Mix\nCopyright (c) 2009 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2001 Hans-Peter Nilsson\nCopyright (c) 1993 Intel Corporation\nCopyright (c) 1999, 2000 Konstantin Chuguev\nCopyright (c) 1999 Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 1996-2003 Red Hat, Inc.\nCopyright (c) 1994, 1997, 2001, 2002, 2003, 2004 Red Hat Incorporated\nCopyright (c) 1987, 1988, 2000 Regents of the University of California\nCopyright (c) 1988, 1990, 1993 Regents of the University of California\nCopyright (c) 1984,2000 S.L. Moshier\nCopyright (c) 1999, 2000, 2001, 2002 Stephane Carrez (stcarrez@nerim.fr)\nCopyright (c) 2001 Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright (c) 2009 The Go Authors\nCopyright (c) 1981, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California\nCopyright (c) 1982, 1986, 1989, 1991, 1993, 1994 The Regents of the University of California\nCopyright (c) 1990 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1991-2013 Unicode, Inc.\nCopyright (c) 1996 Xavier Leroy (Xavier.Leroy@inria.fr)\nCopyright (c) 1991 by AT&T.\nCopyright (c) 1997 by Andrey A. Chernov, Moscow, Russia\nCopyright (c) 1999-2010 by Digital Mars\nCopyright (c) 2004-2005 by Digital Mars, www.digitalmars.com\nCopyright (c) 1993 by Sun Microsystems, Inc.\nCopyright (c) 2009-2019 by the LLVM contributors\nVincenzo Ampolo, Michael Parrot, Iain Buclaw, (c) 2009, 2010\n(c) Copyright 1992 Eric Backus\n(c) Copyright 1986 HEWLETT-PACKARD COMPANY\n(c) 1995-2004 Jean-loup Gailly and Mark Adler\n(c) UNIX System Laboratories, Inc.\n\nAuthors: AT&T; Advanced Micro Devices, Inc.; Alexey Zelkin; Andrey A. Chernov, Moscow, Russia; Artem B. Bityuckiy, SoftMine Corporation; C.W. Sandmann; Christopher G. Demetriou; Citrus Project; DJ Delorie; David Friedman; Digital Mars; Digital Mars, www.digitalmars.com; Eric Backus; Francois-Xavier Coudert <fxcoudert@gcc.gnu.org>; Free Software Foundation, Inc.; Free Software Foundation, Inc. Mix; FreeBSD Project; Gaius Mulley <gaius@glam.ac.uk>; HEWLETT-PACKARD COMPANY; Hans-Peter Nilsson; Henry Spencer; ISO/IEC (International Organization for Standardization and International Electrotechnical Commission); Intel Corporation; J.T. Conklin <jtc@netbsd.org>; Jakub Jelinek <jj@ultra.linux.cz>; Jean-loup Gailly and Mark Adler; Konstantin Chuguev; Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden); LLVM Team; Mark Kettenis <kettenis@phys.uva.nl>; Mike Barcroft; Red Hat Incorporated; Red Hat, Inc.; Regents of the University of California; S. L. Moshier; S.L. Moshier; Stephane Carrez; Stephen L. Moshier; Stephen L. Moshier Adapted; Sun Microsystems, Inc.; SuperH, Inc.; The Go Authors; The Regents of the University of California; Tobias Burnus <burnus@net-b.de>; Todd C. Miller; UNIX System Laboratories, Inc.; Ulrich Drepper <drepper@cygnus.com>; Unicode, Inc.; Vincenzo Ampolo, Michael Parrot, Iain Buclaw; Walter Bright; Walter Bright http://www.digitalmars.com; Xavier Leroy; newlib@sources.redhat.com Jeff Johnston <jjohnstn@redhat.com>; the LLVM contributors; the University of California, Berkeley; the University of California, Berkeley and its contributors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/gcc-12/gcc-12-base_12.2.0-14+deb12u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lTjBC4eflhVwveHe5qLogsH8aUAxejNJnPtrpxfs37g/gcc-12-base_~-14%2Bdeb12u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org/",
    "licenseConcluded" : "(Zlib AND GFDL-1.3-or-later AND GPL-3.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-d-zlib AND LicenseRef-scancode-nilsson-historical AND LGPL-2.0-or-later AND LicenseRef-Public-Domain AND dtoa AND LicenseRef-scancode-bsla-no-advert AND LGPL-2.0-only AND LGPL-3.0-only AND BSD-4-Clause-UC AND LGPL-2.1-or-later AND GPL-1.0-or-later AND HP-1989 AND LicenseRef-scancode-newlib-historical AND LicenseRef-scancode-amd-historical AND LicenseRef-scancode-intel-osl-1993 AND GFDL-1.2-only AND LicenseRef-scancode-gnu-emacs-gpl-1988 AND Artistic-1.0-Perl AND GPL-3.0-or-later WITH GCC-exception-3.1 AND BSD-2-Clause AND BSD-3-Clause AND NCSA AND SunPro AND Spencer-94 AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-2.0-only AND BSD-3-Clause-flex AND BSD-4.3TAHOE AND LicenseRef-scancode-x11-hanson AND LicenseRef-scancode-unicode AND MIT AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/gcc-12-base",
    "versionInfo" : "12.2.0-14+deb12u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libbrotli1-1.0.9-2PLUSb6-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright 2015 Tomasz Buchert <tomasz@debian.org>\nCopyright 2009, 2010, 2013-2015 by the Brotli Authors\n2015 Tomasz Buchert <tomasz@debian.org>\n2009, 2010, 2013-2015 by the Brotli Authors\n\nAuthors: Tomasz Buchert; the Brotli Authors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/b/brotli/libbrotli1_1.0.9-2+b6_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libbrotli1@1.0.9-2%2Bb6?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ro3yX5U_vtbtK7BeSmHzGcBrzkJ3uS19CrQ--yU5suE/libbrotli1_~-2%2Bb6_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/brotli",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libbrotli1",
    "versionInfo" : "1.0.9-2+b6"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libc6-2.36-9PLUSdeb12u13-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 2000 Red Hat, Inc.\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright 1995 by Tom Lord\nCopyright (c) 1991,1990,1989 Carnegie Mellon University\nCopyright (c) 1992 Eric Young Collected\nCopyright (c) 1991-2015 Free Software Foundation, Inc.\nCopyright (c) 2000, Intel Corporation\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 1991 Regents of the University of California\nCopyright (c) 2002, 2003, 2004, 2011 Simon Josefsson\nCopyright (c) The Internet Society (2003)\nCopyright (c) 1999, 2000 Tom Tromey\nCopyright (c) 1997-2003 University of Cambridge\nCopyright (c) 1998 WIDE Project\nCopyright (c) 1993 by Sun Microsystems, Inc.\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) Copyright C E Chew\ncopyright Eric Young\ncopyright Henry Spencer\ncopyright Simon Josefsson\ncopyright Stephen L. Moshier\ncopyright Sun Microsystems, Inc.\ncopyright Tom Lord\ncopyright University of Cambridge\ncopyright by the University of Cambridge, England\ncopyright (c) by Craig Metz",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/glibc/libc6_2.36-9+deb12u13_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libc6@2.36-9%2Bdeb12u13?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VIYCP11gggMvJnrPzijJFUkJMx68dbpfOwkmRpiw4xk/libc6_~-9%2Bdeb12u13_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libc/libc.html",
    "licenseConcluded" : "(LGPL-2.1-or-later AND BSD-3-Clause AND SunPro AND ISC AND GPL-2.0-or-later AND LicenseRef-scancode-pcre AND LGPL-2.0-or-later AND HPND)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libc6",
    "versionInfo" : "2.36-9+deb12u13"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libcrypt1-4.4.33-2-arch-amd64-distro-debian-12-epoch-1",
    "copyrightText" : "Copyright Alexander Peslyak\nCopyright Alexander Peslyak, Bjorn Esser\nCopyright Alexey Degtyarev\nCopyright Andrew Collier FSF\nCopyright 2015 Bjorn Esser\nCopyright Bjorn Esser\nCopyright Colin Percival\nCopyright David Burren\nCopyright Francesco Salvestrini FSF\nCopyright Free Software Foundation, Inc.\nCopyright Gabriele Svelto FSF\nCopyright Guido U. Draheim, Maarten Bosmans FSF\nCopyright Juniper Networks, Inc.\nCopyright Kevin Cernekee FSF\nCopyright Maarten Bosmans FSF\nCopyright Michael Bretterklieber, Bjorn Esser\nCopyright Mike Frysinger FSF\nCopyright Philip Withnall FSF\nCopyright 2005, 2008, 2009 2011 SUSE LINUX Products GmbH, Germany\nCopyright Scott James Remnant, Dan Nicholson GPL\nCopyright Solar Designer, Colin Percival\nCopyright Steven G. Johnson, Daniel Richard G. GPL\nCopyright 2002, 2003, 2004 SuSE Linux AG, Germany\nCopyright Thorsten Kukuk, Bjorn Esser, Zack Weinberg LGPL\nCopyright Tim Toolan FSF\nCopyright Vitaly Chikunov, Bjorn Esser\nCopyright Zack Weinberg\nCopyright Zack Weinberg and Free Software Foundation, Inc",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/libx/libxcrypt/libcrypt1_4.4.33-2_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libcrypt1@4.4.33-2?arch=amd64&distro=debian-12&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eUQdrkdU4ZGpKN-pqei85OvqxXca552ceKvM00J4FVw/libcrypt1_~-2_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(0BSD AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND FSFAP AND GPL-3.0-or-later WITH Autoconf-exception-3.0 AND LicenseRef-Public-Domain AND GPL-2.0-or-later WITH Autoconf-exception-generic)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libcrypt1",
    "versionInfo" : "4.4.33-2"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libexpat1-2.5.0-1PLUSdeb12u2-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright (C) 1998-2000 Adam Di Carlo <aph@debian.org>\nCopyright (C) 2000-2007 Ardo van Rangelrooij <ardo@debian.org>\nCopyright (C) 2008-2009 Daniel Leidert (dale) <daniel.leidert@wgdd.de>\nCopyright (C) 2001-2017 Expat maintainers\nCopyright (C) Expat maintainers\nCopyright (C) 2013- Laszlo Boszormenyi (GCS) <gcs@debian.org>\nCopyright (C) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/e/expat/libexpat1_2.5.0-1+deb12u2_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libexpat1@2.5.0-1%2Bdeb12u2?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gW3GkJDYjHPc0VDUvnwKIeYj_ISjKHu7MLevK-eEVIE/libexpat1_~-1%2Bdeb12u2_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://libexpat.github.io/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libexpat1",
    "versionInfo" : "2.5.0-1+deb12u2"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libfontconfig1-2.14.1-4-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright (c) 2001,2003 Keith Packard",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/fontconfig/libfontconfig1_2.14.1-4_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libfontconfig1@2.14.1-4?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xmAokduO6uS2SMurmohAg0HylbIZE3_GN4y1ziP-JfA/libfontconfig1_~-4_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.freedesktop.org/wiki/Software/fontconfig/",
    "licenseConcluded" : "HPND-sell-variant",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libfontconfig1",
    "versionInfo" : "2.14.1-4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libfreetype6-2.12.1PLUSdfsg-5PLUSdeb12u4-arch-amd64-distro-debian-12",
    "copyrightText" : "2006-2014 Adobe Systems Incorporated\n2004-2022 Albert Chin-A-Young\n1999-2022 Antoine Leca, David Turner, Robert Wilhelm and Werner Lemberg\n2018-2022 Armin Hasitzka, David Turner, Robert Wilhelm and Werner Lemberg\n1996-2019 Christoph Lameter, Anthony Fok, Steve Langasek, et al.\n2000 Computing Research Labs, New Mexico State University\nCopyright 2006-2014 Adobe Systems Incorporated\nCopyright 2004-2022 Albert\nCopyright 1999-2022 Antoine Leca, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2018-2022 Armin Hasitzka, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1996-2019 Christoph Lameter, Anthony Fok, Steve Langasek\nCopyright 2000 Computing Research Labs, New Mexico State University 2001-2014 Francesco Zappa Nardelli\nCopyright 2002-2022 David Turner\nCopyright 2018-2022 David Turner, Robert Wilhelm, Dominik Rottsches and Werner Lemberg\nCopyright 2021-2022 David Turner, Robert Wilhelm, Werner Lemberg and Anuj Verma\nCopyright 1996-2022 David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner\nCopyright 2004-2022 David Turner, Robert Wilhelm, Werner Lemberg and George Williams\nCopyright 2022 David Turner, Robert Wilhelm, Werner Lemberg and Moazin Khatti\nCopyright 2008-2022 David Turner, Robert Wilhelm, Werner Lemberg and Suzuki Toshiya\nCopyright 1996-2022 David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1996-2022 David Turner, Robert Wilhelm and Werner Lemberg 2007 Dmitry Timoshkov\nCopyright 1996-2022 David Turner, Robert Wilhelm and Werner Lemberg 2001, 2002 Francesco Zappa Nardelli 2010-2019 Joel Klinghed\nCopyright 2005-2022 David Turner, Robert Wilhelm and Werner Lemberg 2013 Google, Inc.\nCopyright 1996-2022 David Turner, Robert Wilhelm and Werner Lemberg 2003 Huw D M Davies for Codeweavers 2007 Dmitry Timoshkov\nCopyright 2007-2022 Derek Clegg and Michael Toftdal\nCopyright 2009 Francesco Salvestrini\nCopyright 2000-2014 Francesco Zappa Nardelli\nCopyright 2005, 2007, 2008, 2013 George Williams\nCopyright 2013-2022 Google, Inc.\nCopyright 2012 Intel Corporation 2019 Sony Interactive Entertainment Inc.\nCopyright 1995-2017 Jean-loup Gailly\nCopyright 1995-2022 Jean-loup Gailly and Mark Adler\nCopyright 2010-2022 Joel Klinghed\nCopyright 1999-2022 Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1996-2022 Just van Rossum, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1995-2022 Mark Adler\nCopyright 2003-2022 Masatake Yamato, Red Hat K.K., David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2004-2022 Masatake Yamato, Redhat K.K.\nCopyright 2001-2022 Michael Pfeiffer\nCopyright 2018-2022 Nikhil Ramakrishnan, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2009-2022 Oran Agra and Mickey Gabel\nCopyright 2007-2022 Rahul Bhalerao\nCopyright 2002-2022 Roberto Alameda\nCopyright 2004 Scott James Remnant <scott@netsplit.com>\nCopyright 2016-2018 Static Jobs LLC\nCopyright 2008 Steven G. Johnson 2011 Daniel Richard G. 2019 Marc Stevens\nCopyright 1991-2022 Stichting Mathematisch Centrum\nCopyright 1996-2022 Suzuki Toshiya, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2004-2022 Suzuki Toshiya, Masatake Yamato, Red Hat K.K., David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1999-2022 The FreeType Development Team\nCopyright The FreeType Project\nCopyright 1990, 1994, 1998 The Open Group\nCopyright 2008 Tim Toolan\nCopyright 2015-2022 Werner Lemberg\nCopyright 2005-2022 Werner Lemberg and Detlef Wurkner\nCopyright 1994 X Consortium\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2006-2022 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2019 nyorain\n2011 Daniel Richard G.\n2002-2022 David Turner\n2018-2022 David Turner, Robert Wilhelm, Dominik Röttsches and Werner Lemberg\n2021-2022 David Turner, Robert Wilhelm, Werner Lemberg and Anuj Verma\n1996-2022 David Turner, Robert Wilhelm, Werner Lemberg and Detlef Würkner\n2004-2022 David Turner, Robert Wilhelm, Werner Lemberg and George Williams\n2022 David Turner, Robert Wilhelm, Werner Lemberg and Moazin Khatti\n2008-2022 David Turner, Robert Wilhelm, Werner Lemberg and Suzuki Toshiya\n1996-2022 David Turner, Robert Wilhelm and Werner Lemberg\n2005-2022 David Turner, Robert Wilhelm and Werner Lemberg\nDavid Turner, Robert Wilhelm and Werner Lemberg\n2007-2022 Derek Clegg and Michael Toftdal\n2007 Dmitry Timoshkov for Codeweavers\n2009 Francesco Salvestrini\n2000-2014 Francesco Zappa Nardelli\n2001, 2002 Francesco Zappa Nardelli\n2001-2014 Francesco Zappa Nardelli\n2001-2015 Francesco Zappa Nardelli\n2005, 2007, 2008, 2013 George Williams\n2013 Google, Inc.\n2013-2022 Google, Inc.\n2018-2023 Hugh McMaster\n2003 Huw D M Davies for Codeweavers\n2012 Intel Corporation\n1995-2017 Jean-loup Gailly\n1995-2022 Jean-loup Gailly and Mark Adler\n2010-2019 Joel Klinghed\n2010-2022 Joel Klinghed\n1999-2022 Just van Rossum, Antoine Leca,\n1996-2022 Just van Rossum, David Turner, Robert Wilhelm and Werner Lemberg\n2019 Marc Stevens\n1995-2022 Mark Adler\n2003-2022 Masatake Yamato, Red Hat K.K.,\n2004-2022 Masatake Yamato, Redhat K.K.\n2001-2022 Michael Pfeiffer\n2018-2022 Nikhil Ramakrishnan, David Turner, Robert Wilhelm and Werner Lemberg\nNone\n2009-2022 Oran Agra and Mickey Gabel\n2007-2022 Rahul Bhalerao\n2002-2022 Roberto Alameda\n2004 Scott James Remnant <scott@netsplit.com>\n2019 Sony Interactive Entertainment Inc.\n2016-2018 Static Jobs LLC\n2008 Steven G. Johnson\n1991-2022 Stichting Mathematisch Centrum\n1996-2022 Suzuki Toshiya, David Turner, Robert Wilhelm and Werner Lemberg\n2004-2022 Suzuki Toshiya, Masatake Yamato, Red Hat K.K.,\n1999-2022 The FreeType Development Team\nThe FreeType Project\n1990, 1994, 1998 The Open Group\n2008 Tim Toolan\n2015-2022 Werner Lemberg\n2005-2022 Werner Lemberg and Detlef Würkner\n1994 X Consortium\ncopyright (c) The FreeType Project (www.freetype.org)\n2019 nyorain",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/freetype/libfreetype6_2.12.1+dfsg-5+deb12u4_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libfreetype6@2.12.1%2Bdfsg-5%2Bdeb12u4?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3vc5TLf3F6-RO2th510Vgjjk10-lFTJaV1iXoFb8xxg/libfreetype6_~%2Bdfsg-5%2Bdeb12u4_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://freetype.org",
    "licenseConcluded" : "(BSL-1.0 AND Zlib AND GPL-3.0-or-later AND MIT-open-group AND BSD-3-Clause AND FSFAP AND MIT AND GPL-2.0-or-later AND ICU AND LicenseRef-Public-Domain AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libfreetype6",
    "versionInfo" : "2.12.1+dfsg-5+deb12u4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libgcc-s1-12.2.0-14PLUSdeb12u1-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright (c) 1989-2023 Free Software Foundation, Inc.\nCopyright (c) 1991 by Pipeline Associates, Inc.\nCopyright (c) 1991 The Regents of the University of California\nCopyright (c) 1991-2023 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 1992-2023 Free Software Foundation, Inc.\nCopyright (c) 1993-2023 Free Software Foundation, Inc.\nCopyright (c) 1994-2023 Free Software Foundation, Inc.\nCopyright (c) 1995-2023 Free Software Foundation, Inc.\nCopyright (c) 1996-2023 Free Software Foundation, Inc.\nCopyright (c) 1997-2022 Free Software Foundation, Inc.\nCopyright (c) 1997-2023 Free Software Foundation, Inc.\nCopyright (c) 1998-2023 Free Software Foundation, Inc.\nCopyright (c) 1999-2022 Free Software Foundation, Inc.\nCopyright (c) 1999-2023 Free Software Foundation, Inc.\nCopyright (c) 2000-2023 Free Software Foundation, Inc.\nCopyright (c) 2001-2023 Free Software Foundation, Inc.\nCopyright (c) 2002-2023 Free Software Foundation, Inc.\nCopyright (c) 2003-2023 Free Software Foundation, Inc.\nCopyright (c) 2004-2023 Free Software Foundation, Inc.\nCopyright (c) 2005-2023 Free Software Foundation, Inc.\nCopyright (c) 2006-2022 Free Software Foundation, Inc.\nCopyright (c) 2006-2023 Free Software Foundation, Inc.\nCopyright (c) 2007-2022 Free Software Foundation, Inc.\nCopyright (c) 2007-2023 Free Software Foundation, Inc.\nCopyright (c) 2008-2023 Free Software Foundation, Inc.\nCopyright (c) 2009-2023 Free Software Foundation, Inc.\nCopyright (c) 2010-2023 Free Software Foundation, Inc.\nCopyright (c) 2011-2023 Free Software Foundation, Inc.\nCopyright (c) 2012 Free Software Foundation, Inc.\nCopyright (c) 2012-2023 Free Software Foundation, Inc.\nCopyright (c) 2013-2023 Free Software Foundation, Inc.\nCopyright (c) 2014-2023 Free Software Foundation, Inc.\nCopyright (c) 2015-2023 Free Software Foundation, Inc.\nCopyright (c) 2016-2023 Free Software Foundation, Inc.\nCopyright (c) 2017-2023 Free Software Foundation, Inc.\nCopyright (c) 2018-2023 Free Software Foundation, Inc.\nCopyright (c) 2019-2023 Free Software Foundation, Inc.\nCopyright (c) 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2021-2022 Free Software Foundation, Inc.\nCopyright (c) 2021-2023 Free Software Foundation, Inc.\nCopyright (c) 2022 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 Free Software Foundation, Inc.\nCopyright (c) 2023 Free Software Foundation, Inc.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/gcc-12/libgcc-s1_12.2.0-14+deb12u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YN4SzVcuvmZlJs_F93DjWrHx9dIjVG48vznb3AR1W2U/libgcc-s1_~-14%2Bdeb12u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND BSD-3-Clause AND GPL-2.0-only AND GPL-3.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libgcc-s1",
    "versionInfo" : "12.2.0-14+deb12u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libglib2.0-0-2.74.6-2PLUSdeb12u8-arch-amd64-distro-debian-12",
    "copyrightText" : "2014-2020 Руслан Ижбулатов\n1995 A.M. Kuchling\n2004-2005 Adam Weinberger\n2005-2006 Alexander Larsson\n2022 Alexander Shopov\n2021 Alexandros Theodotou\n2004 Anders Carlsson\n2001-2003 Andrew Lanoix\n2018 Arthur Demchenkov\n2001-2004 Behdad Esfahbod\n2006 Behdad Esfahbod\n2009 Benjamin Otte\n2015 Canonical Limited\n2005-2022 Canonical Ltd\n2012-2019 Canonical Ltd\n2009-2022 Christian Hergert\n2010 Christian Kellner\n2010 Christian Persch\n2014-2015 Chun-wei Fan\n2008 Claus Tondering\n2008 Clemens N. Buss\n2008-2014 Codethink Ltd\n2012-2013 Colin Walters\n2017-2018 Collabora Inc\n2008-2022 Collabora Ltd\n2017-2019 Collabora Ltd\nCopyright 1995 A.M. Kuchling 2006 Dave Benson\nCopyright 2004-2005 Adam Weinberger 2005-2006 Alexander Larsson 2022 Alexander Shopov 2021 Alexandros Theodotou\nCopyright 2002-2022 Debian contributors\nCopyright 2006-2008 Diego Petteno 2006-2008 xine project 2012 Lucas De Marchi\nCopyright 2011-2012 Dmitry Matveev 2015 Remko Troncon\nCopyright 1989-2001 Free Software Foundation, Inc 2001 Red Hat Software 1998-1999 Tom Tromey\nCopyright 2003-2004 Jonathan Blandford 2004-2005 Matthias Clasen 2003-2008 Red Hat, Inc\nCopyright 2000-2017, Julian Seward\nCopyright 2018, LLVM contributors\nCopyright 2019-2021 Red Hat, Inc\nCopyright 2021-2022 Unicode(r), Inc.\nCopyright 1997-2006 University of Cambridge 2012-2022\nCopyright (c) 2003 Lawrence E. Rosen\nCopyright (c) 1991-2022 Unicode, Inc.\n1999-2000 Craig Setera\nCroatiann team\n2006 Dave Benson\n2002-2022 Debian contributors as listed in debian/changelog\n2006-2008 Diego Pettenò\n2011-2012 Dmitry Matveev\n2000 Eazel, Inc\n2022 Emmanuel Fleury\n2005-2022 Emmanuele Bassi\n2007 Emmanuele Bassi\n2016-2020 Endless Mobile, Inc\n2017-2022 Endless OS Foundation, LLC\n2007 Francois Gouget\n2020-2021 Frederic Martinsons\n1989-2001 Free Software Foundation, Inc\n1991-2022 Free Software Foundation, Inc\n2001-2022 GLib contributors\n2019 GNOME\n2016 GNOME i18n Project for Vietnamese\n2015 Garrett Regier\n2011 Google, Inc\n2001-2008 Hans Breuer\n2001 Hidetoshi Tajima\n2021 Iain Lane\n2018-2021 Igalia S.L\n2018 Iñigo Martínez\n2005-2008 Imendio AB\n2010 Intel Corp\n2001 James Henstridge\n2018-2019 James Westman\n2014-2018 Jan-Michael Brummer\nJesse van den Kieboom\n2005-2007 John McCutchan\n2003-2004 Jonathan Blandford\n1995-1998 Josh MacDonald\n2007 Jürg Billeter\n2000-2017, Julian Seward\n2010 Karo Mkrtchyan\n2018, LLVM contributors\n2013-2015 Lars Uebernickel\n2012 Lucas De Marchi\n2006 Lukas Novotny\n2002 Manish Singh\n2005-2007 Marco Barisione\n2022 Marco Trevisan\nMatthew Waters\n2001-2013 Matthias Clasen\n2004-2005 Matthias Clasen\n2010 Mikhail Zabaluev\n2004-2005 Miloslav Trmac\n2014 NICE s.r.l\nNelson Benítez León\n2003 Noah Levitt\n2008-2011 Nokia Corporation\n2008-2010 Novell, Inc\n2021 Ole André Vadla Ravnås\n2007 Openismus GmbH\n1998-2001 Owen Taylor\n2014-2019 Patrick Griffis\n2007 Patrick Hulin\n2012 Pavel Vasin\n1995-2011 Peter Mattis\n1995-2011 Peter Mattis, Spencer Kimball, Josh MacDonald, Sebastian Wilhelmi and others\n2000-2022 Red Hat, Inc\n2003-2008 Red Hat, Inc\n2019-2021 Red Hat, Inc\n1999-2003 Red Hat Software\n2001 Red Hat Software\n2015 Remko Tronçon\n2001 Ron Steinke\n2020 Ruslan N. Marchenko\n2022 Ryan Hope\n2007-2015 Ryan Lortie\n2009-2010 Sam Thursfield\n2008 Samuel Cormier-Iijima\n1999-2000 Scott Wimer\n2007-2020 Sebastian Dröge\n2001-2003 Sebastian Wilhelmi\n1998-2001 Sebastian Wilhelmi; University of Karlsruhe\n2002-2006 Sharif FarsiWeb, Inc\n2012 Simon McVittie\n2016-2021 Simon McVittie\n2011 Sjoerd Simons\n2002-2007 Soeren Sandmann\n1995-1998 Spencer Kimball\n2011-2013 Stef Walter\n2006 Stefan Westerfeld\n2007-2010 Sven Herzberg\n2012 Swecha telugu localisation Team\n2006 The GNOME Foundation\n2007-2011 The GNOME Project\n2010 Thiago Santos\n1997-2007 Tim Janik\n1998-1999 Tom Tromey\n1999-2000 Tom Tromey\n2018 Tomasz Miąsko\n1998-2004 Tor Lillqvist\n1995-1997 Ulrich Drepper\n2021 Unicode®, Inc\n2021-2022 Unicode®, Inc.\n1997-2006 University of Cambridge\n2018 Will Thompson\n2011 William Hua\n2020 Xavier Claessens\n2021 Xavier Claessens\n2000-2004 Ximian Inc\n2018 pdknsk\n2011-2022 systemd contributors\n2002-2022 the author(s) of GLib\nunspecified\n2012-2022 unspecified GLib contributors\n2006-2008 xine project\n\nAuthors: A.M. Kuchling Dave Benson; Adam Weinberger Alexander Larsson Alexander Shopov Alexandros Theodotou; Colin Plumb; Debian contributors; Diego Petteno xine project Lucas De Marchi; Dmitry Matveev Remko Troncon; Free Software Foundation, Inc Red Hat Software Tom Tromey; GNOME i18n Project for Vietnamese; Jonathan Blandford Matthias Clasen Red Hat, Inc; Julian Seward; LLVM contributors; Lawrence E. Rosen; Red Hat, Inc; Unicode(r), Inc.; Unicode, Inc.; University of Cambridge",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/glib2.0/libglib2.0-0_2.74.6-2+deb12u8_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libglib2.0-0@2.74.6-2%2Bdeb12u8?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nZgk3i0Ye0sOQOILKXmpQgMLopK7mrkcLYu8RoLmMFk/libglib~-0_~-2%2Bdeb12u8_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/GLib",
    "licenseConcluded" : "(Unicode-DFS-2016 AND LGPL-2.1-only AND BSD-3-Clause AND GPL-2.0-or-later AND bzip2-1.0.6 AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND FSFULLR AND LGPL-2.0-only AND LGPL-3.0-only AND LGPL-2.1-or-later AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-or-later WITH Autoconf-exception-generic AND GPL-1.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libglib2.0-0",
    "versionInfo" : "2.74.6-2+deb12u8"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libgraphite2-3-1.3.14-1-arch-amd64-distro-debian-12",
    "copyrightText" : "(C) 2010-2011, SIL International\nCopyright (C) 2011 Simon Cozens <simon@cpan.org>\nCopyright (C) 2005 www.thanlwinsoft.org\nCopyright 2004-2010, Marcus Holland-Moritz <mhx-cpan@gmx.net> 2001, Paul Marquess <pmqs@cpan.org>\nCopyright 2010 Martin Hosken <martin_hosken@sil.org>\nCopyright 2010 Martin Hosken <martin_hosken@sil.org> 2011 Rene Engelhard <rene@debian.org> 2017 Mattia Rizzolo <mattia@debian.org>\nCopyright (c) 2010-2011, SIL International\nCopyright (c) 1996 - 2009 The Office of the High Commissioner for Human\n1999, Kenneth Albanowski <kjahds@kjahds.com> (Version 1.x)\n2004-2010, Marcus Holland-Moritz <mhx-cpan@gmx.net>\n2010 Martin Hosken <martin_hosken@sil.org>\n2017 Mattia Rizzolo <mattia@debian.org>\n2001, Paul Marquess <pmqs@cpan.org> (Version 2.x)\n2011 Rene Engelhard <rene@debian.org>\n© 1996 – 2009 The Office of the High Commissioner for Human Rights",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/graphite2/libgraphite2-3_1.3.14-1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libgraphite2-3@1.3.14-1?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mHhR8iKmxTrJ9RCyy-sN9I7aiCR5rKa3QjpLKIKAxyo/libgraphite2-3_~-1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://graphite.sil.org/",
    "licenseConcluded" : "(GPL-1.0-only AND LGPL-2.1-or-later AND MPL-1.1 AND GPL-2.0-or-later AND GPL-1.0-or-later AND Artistic-1.0 AND LicenseRef-Public-Domain AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libgraphite2-3",
    "versionInfo" : "1.3.14-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libharfbuzz0b-6.0.0PLUSdfsg-3-arch-amd64-distro-debian-12",
    "copyrightText" : "2018-2020, Adobe, Inc\n2000-2016, Adobe Systems Incorporated\n2002-2018, Adobe Systems Incorporated\n2002-2018, Adobe Systems Incorporated (http://www.adobe.com/)\n2012-2019, أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@users.sourceforge.net>\n2016, Alfredo Marco Pradil\n2017-2019, Amin Abedi (@aminabedi68)-www.fontamin.com\n2012, Andhrapradesh Society for Knowledge Networks (fonts.siliconandhra.org)\nAuthors <david@djr.com> 1993-2016\n2015, Bastien ROUCARIES\n2005-2023, Behdad Esfahbod\n2008, Benjamin Kosnik <bkoz@redhat.com>\n2015, Cadson Demak <info@cadsondemak.com>\n2011, Canonical Ltd.\n2007, Chris Wilson\n2012, Christian Persch\n2011, Codethink Limited\nCopyright 2018-2020, Adobe, Inc 2005-2023, Behdad Esfahbod 2007, Chris Wilson 2011, Codethink Limited\nCopyright 2000-2016, Adobe Systems Incorporated\nCopyright 2000-2016, Adobe Systems Incorporated 2016, Alfredo Marco Pradil 2018-2022, David Corbett 2010-2022, Google, Inc 2011-2012, Lohit Fonts Project contributors <https://pagure.io/lohit> 2013-2020, Microsoft Corporation 2018, SIL International (http://scripts.sil.org) 2010-2021, The Amiri Project\nCopyright 2002-2018, Adobe Systems Incorporated 2017-2019, Amin Abedi\nCopyright 2002-2018, Adobe Systems Incorporated (http://www.adobe.com/) 2012, Andhrapradesh Society for Knowledge Networks (fonts.siliconandhra.org) 2013, Danh Hong (khmertype.org)\nCopyright 2015, Bastien ROUCARIES 2012, Christian Persch 2012, Dan Winship\nCopyright 2008, Benjamin Kosnik <bkoz@redhat.com> 2014-2015, Google Inc.\nCopyright 2011, Canonical Ltd.\nCopyright 2004-2007, Damon Chaplin 2003, James Henstridge 2007-2017, Stefan Sauer\nCopyright 2013, Danh Hong (khmertype.org)\nCopyright 2011, Daniel Richard G <skunk@iSKUNK.ORG> 2008, Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright 2017, David Corbett\nCopyright 2015, FontTools\nCopyright 2020, Fredrick R. Brennan\nCopyright 1994-2016, Free Software\nCopyright 1992-2014, Free Software Foundation, Inc\nCopyright 1994-2018, Free Software Foundation, Inc 2004-2007, Damon Chaplin 2012-2015, Dan Nicholson <dbn.lists@gmail.com> 2003, James Henstridge 2009, Johan Dahlin\nCopyright 2010-2013, Google Corporation\nCopyright 2012, Grigori Goronzy <greg@kinoho.net>\nCopyright 2008, Guido U. Draheim <guidod@gmx.de> 2011, Maarten Bosmans <mkbosmans@gmail.com>\nCopyright 2012-2019, Hmd lmHmwdy (Ahmed El-Mahmoudy) <aelmahmoudy@users.sourceforge.net>\nCopyright 2003, James Henstridge 2007-2017, Stefan Sauer\nCopyright 2005, Mihail Bayaryn\nCopyright 2016, Monotype Hong Kong Ltd. and Monotype Imaging Inc\nCopyright 1992-2017, Thomas A. Rickner\nCopyright 2016, Unicode Inc\nCopyright 2022, Unicode(r), Inc\nCopyright 1994, X Consortium\nCopyright 2009-2010, Yoram Gnat (yoram.gnat@gmail.com) 2003-2007, Ralph Hancock & John Hudson\n2004-2007, Damon Chaplin\n2012-2015, Dan Nicholson <dbn.lists@gmail.com>\n2012, Dan Winship\n2013, Danh Hong (khmertype.org)\n2011, Daniel Richard G <skunk@iSKUNK.ORG>\n2017, David Corbett\n2018-2022, David Corbett\n2005, David Turner\n1998-2004, David Turner and Werner Lemberg\n2007, Denis Moyogo Jacquerye <moyogo@gmail.com>\n2015-2020, Ebrahim Byagowi\n2016, Elie Roux\n2019-2020, Facebook, Inc\n2015, FontTools\n2020, Fredrick R. Brennan\n1994-2016, Free Software\n1992-2014, Free Software Foundation, Inc\n1992-2018, Free Software Foundation, Inc\n1994-2018, Free Software Foundation, Inc\n1996-2015, Free Software Foundation, Inc\n1996-2018, Free Software Foundation, Inc\n2011-2012, George W. Nuss (http://www.fulbefouta.com)\n2010-2013, Google Corporation\n2010-2016, Google Inc\n2010-2022, Google, Inc\n2011-2020, Google Inc\n2014-2015, Google Inc.; contributed by Alexey Sokolov <sokolov@google.com>\n2012, Grigori Goronzy <greg@kinoho.net>\n2008, Guido U. Draheim <guidod@gmx.de>\n2011, Hjort Nidudsson\n2016, Igalia S.L\n2016, Igalia S.L. (http://igalia.com/)\n2019, Inter IKEA Systems B.V. (www.ikea.com)\n2003, James Henstridge\n2017, Jens Kutilek\n2009, Johan Dahlin\n2009, Keith Stribley\n2018-2021, Khaled Hosny\n2010-2017, Khaled Hosny <khaledhosny@eglug.org>\n2016, Krzesimir Nowak <qdlacz@gmail.com>\n2011-2012, Lohit Fonts Project contributors <https://pagure.io/lohit>\n2011, Maarten Bosmans <mkbosmans@gmail.com>\n2011, Martin Hosken and SIL International\n2022, Matthias Clasen\n2013-2020, Microsoft Corporation\n2005, Mihail Bayaryn\n2016, Monotype Hong Kong Ltd. and Monotype Imaging Inc\n2015, Moritz Klammler <moritz@klammler.eu>\n2012-2015, Mozilla Foundation\n2010, NHN Corporation\n2008-2010, Nokia Corporation and/or its subsidiary(-ies)\n2012, Paolo Borelli\n2015, Paul Norman <penorman@mac.com>\n2012-2016, Philip Withnall\n2003-2007, Ralph Hancock & John Hudson\n1998-2022, Red Hat, Inc\n2013, Roy Stogner <roystgnr@ices.utexas.edu>\n2018, SIL International (http://scripts.sil.org)\n2004-2020, SIL International (http://www.sil.org)\n2016, Sascha Brawer\n2004, Scott James Remnant <scott@netsplit.com>\n2010, Sebastian Kosch <sebastian@aldusleaf.org>\n2011-2012, Sorkin Type Co (www.sorkintype.com)\n2007-2017, Stefan Sauer\n2008, Steven G. Johnson <stevenj@alum.mit.edu>\n2013, The Alegreya Sans Project Authors (https://github.com/huertatipografica/Alegreya-Sans)\n2010-2020, The Amiri Project Authors (https://github.com/alif-type/amiri)\n2010-2021, The Amiri Project Authors (https://github.com/aliftype/amiri)\n2008, The Bungee Project Authors <david@djr.com>\n2007-2008, The C&MA Guinea Fulbe Team\n2011, The Comfortaa Project Authors (https://github.com/alexeiva/comfortaa)\n1993-2016, The Font Bureau, Inc\n2020, The Fraunces Project Authors (github.com/undercasetype/Fraunces)\n2021, The M+ FONTS Project Authors (https://github.com/coz-m/MPLUS_FONTS)\n2016, The M+ Project Authors\n2015-2021, The Mada Project Authors\n2019, The Noto Project Authors (github. com/googlei18n/noto-fonts)\n2021, The Qahiri Project Authors (github.com/aliftype/qahiri)\n2021, The Raqq Project Authors (github.com/aliftype/raqq)\n2017, The Roboto Flex Project Authors (https://github.com/TypeNetwork/Roboto-Flex)\n2001-2021, The STIX Fonts Project Authors (https://github.com/stipub/stixfonts)\n2017, The Spectral Project Authors (http://github.com/productiontype/spectral)\n1992-2017, Thomas A. Rickner\n2003-2005, Thomas Vander Stichele <thomas@apestaart.org>\n2016, Unicode Inc\n2016-2019, Unicode, Inc\n2018, Unicode, Inc\n2022, Unicode®, Inc\n1994, X Consortium\n2012, Xan Lopez\n2009-2010, Yoram Gnat (yoram.gnat@gmail.com)\n2012, Zack Weinberg <zackw@panix.com>\n2005, Zawgyi.net & Alpha Mandalay\n\nAuthors: (https://github.com/alexeiva/comfortaa) The Fraunces Project; (https://github.com/alif-type/amiri) The Bungee Project; (https://github.com/aliftype/amiri) The Mada Project; Adobe Systems Incorporated; Adobe Systems Incorporated Alfredo Marco Pradil David Corbett Google, Inc Lohit Fonts Project contributors Microsoft Corporation SIL International The Amiri Project; Adobe Systems Incorporated Amin Abedi; Adobe Systems Incorporated Andhrapradesh Society for Knowledge Networks Danh Hong; Adobe, Inc Behdad Esfahbod Chris Wilson Codethink Limited; Alexey Sokolov <sokolov@google.com>; Authors; Bastien ROUCARIES Christian Persch Dan Winship; Benjamin Kosnik Google Inc.; Canonical Ltd.; Damon Chaplin James Henstridge Stefan Sauer; Danh Hong; Daniel Richard G Steven G. Johnson; David Corbett; FontTools; Fredrick R. Brennan; Free Software; Free Software Foundation, Inc; Free Software Foundation, Inc Damon Chaplin Dan Nicholson James Henstridge Johan Dahlin; Google Corporation; Grigori Goronzy; Guido U. Draheim Maarten Bosmans; Hmd lmHmwdy (Ahmed El-Mahmoudy); James Henstridge Stefan Sauer; Mihail Bayaryn; Monotype Hong Kong Ltd. and Monotype Imaging Inc; The Qahiri Project; Thomas A. Rickner; Unicode Inc; Unicode(r), Inc; X Consortium; Yoram Gnat Ralph Hancock & John Hudson; http://github.com/productiontype/spectral",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz0b_6.0.0+dfsg-3_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libharfbuzz0b@6.0.0%2Bdfsg-3?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SaLBwy2gKJcDsrKUjbvYMp5YbpNo12ODR4PF2_C__Ic/libharfbuzz0b_~%2Bdfsg-3_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.freedesktop.org/wiki/Software/HarfBuzz",
    "licenseConcluded" : "(curl AND GPL-2.0-or-later WITH Libtool-exception AND GPL-2.0-or-later WITH Autoconf-exception-generic AND GPL-3.0-or-later AND LGPL-2.1-only AND MIT-Modern-Variant AND FSFAP AND FSFULLRWD AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND FSFULLR AND FSFUL AND LGPL-2.1-or-later AND LicenseRef-scancode-unicode AND Apache-2.0 AND ISC AND CC0-1.0 AND MIT AND ICU AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libharfbuzz0b",
    "versionInfo" : "6.0.0+dfsg-3"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libjpeg62-turbo-2.1.5-2-arch-amd64-distro-debian-12-epoch-1",
    "copyrightText" : "1996-1997, Agner Fog\n2011, Alex Neundorf\n2021, Alex Richardson.\n2015, Alex Turbov\n2019-2020, Arm Limited\n2020, Arm Limited\n2020-2021, Arm Limited\n2011-2012, Canonical Ltd.\nCopyright 2020, Arm Limited 2020-2021, Arm Limited\nCopyright 2020-2021, Arm Limited 2022, D. R. Commander 2022, Matthieu Darbois\nCopyright 2009-2019, 2021, D. R. Commander\nCopyright 2009-2023, D. R. Commander 2021, Alex Richardson\nCopyright 2020, 2022, D. R. Commander 2020, Arm Limited. 2020, D. R. Commander 2020-2021, Arm Limited\nCopyright 2010, 2020, D. R. Commander 2015, 2018, 2021-2022, D. R. Commander 2015, 2018, D. R. Commander 2015-2020, 2022, D. R. Commander 2017-2018, D. R. Commander\nCopyright 2009-2011, 2013, 2016, 2020, D. R. Commander 2009-2014, 2016-2019, 2021, 2023, D. R. Commander 2009-2014, 2017-2019, 2022-2023, D. R. Commander 2009-2015, 2017, 2020-2021, 2023, D. R. Commander 2009-2019, 2021-2023, D. R. Commander 2011, 2013, 2018, 2023, D. R. Commander 2011, 2013, 2023, D. R. Commander 2011, 2019, D. R. Commander 2011, 2022, D. R. Commander 2011, D. R. Commander 2011-2012, 2014-2015, 2017, 2019, 2021-2023, D. R. Commander 2011-2012, 2014-2015, 2017-2018, 2023, D. R. Commander 2011-2013, 2016, 2020, D. R. Commander 2011-2018, 2023, D. R. Commander 2011-2023, D. R. Commander 2013, 2016, D. R. Commander 2018, D. R. Commander 2021, D. R. Commander\nCopyright 2011, 2013-2015, 2023, D. R. Commander 2011, 2018, D. R. Commander 2011-2013, 2017-2018, 2020-2021, 2023, D. R. Commander 2011-2015, 2018, 2020, 2023, D. R. Commander 2011-2015, 2018, 2022-2023, D. R. Commander 2014, 2017, 2023, D. R. Commander 2015, Viktor Szathmary 2017-2018, D. R. Commander\nCopyright 2011, 2014, D. R. Commander 2011, 2015, D. R. Commander 2016-2017, Loongson Technology Corporation Limited, BeiJing 2016-2018, Loongson Technology Corporation Limited, BeiJing 2019, D. R. Commander\nCopyright 1990, David Koblas 1991-1997, Thomas G. Lane 2021-2022, D. R. Commander\nCopyright 1997-2020, Dimitri van Heesch\nCopyright 2005, Guido Vollbeding <guido@jpegclub.org>\nCopyright 2014, Jay Foad. 2014-2015, D. R. Commander\nCopyright 1988, Jef Poskanzer 1989, Jef Poskanzer 1991-1997, Thomas G. Lane 2015, 2017, 2022, D. R. Commander 2015-2017, 2020-2023, D. R. Commander\nCopyright 2011, John Resig\nCopyright 2011, 2013-2015, Kitware, Inc. 2011, Alex Neundorf 2011, Eric NOULARD\nCopyright 2016-2018, Loongson Technology Corporation Limited, BeiJing\nCopyright 2013-2014, MIPS Technologies, Inc., California. 2015, D. R. Commander\nCopyright 2013, MIPS Technologies, Inc., California. 2018, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2016, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru 2014, 2018, 2020, D. R. Commander 2014, 2018-2019, D. R. Commander 2014-2015, 2018, 2020, D. R. Commander 2014-2015, 2018-2019, D. R. Commander 2015, 2018-2019, D. R. Commander 2016-2017, Loongson Technology Corporation Limited, BeiJing 2016-2018, Loongson Technology Corporation Limited, BeiJing 2018-2019, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2015, Intel Corporation. 2016, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2015, Intel Corporation. 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009-2011, 2014-2016, 2019, 2021, D. R. Commander 2009-2011, 2014-2017, 2019, D. R. Commander 2015, Matthieu Darbois. 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2012, 2016, D. R. Commander 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, 2018, 2020, D. R. Commander 2009, 2016, 2020, D. R. Commander 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2012, 2016, D. R. Commander 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2015, Intel Corporation\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, 2018, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2016, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2016, 2018, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2013-2014, 2016, 2018, 2022, D. R. Commander 2009-2011, 2014, 2016, 2018, 2022, D. R. Commander 2009-2011, 2014-2016, 2018, 2022, D. R. Commander 2015-2016, 2018, 2022, Matthieu Darbois. 2016, 2018, D. R. Commander 2016, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, 2018, 2020, D. R. Commander 2009, 2016, 2020, D. R. Commander 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2011, 2016, D. R. Commander 2012, 2016, D. R. Commander 2016, 2020, D. R. Commander 2016, D. R. Commander 2018, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2014-2015, 2019, D. R. Commander. 2015, 2019, D. R. Commander. 2016-2018, Loongson Technology Corporation Limited, BeiJing\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2014, 2022, D. R. Commander 2011, 2014, 2022, D. R. Commander 2015-2016, 2018, 2022, Matthieu Darbois. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2011, 2014-2016, 2018, 2020, 2022, D. R. Commander 2013-2014, MIPS Technologies, Inc., California. 2014, Linaro Limited. 2015-2016, 2018, 2022, Matthieu Darbois. 2016-2018, Loongson Technology Corporation Limited, BeiJing. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2014, 2016, 2018, 2020, 2022, D. R. Commander 2013-2014, MIPS Technologies, Inc., California. 2015-2016, 2018, 2022, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2014, 2016, 2018, 2022, D. R. Commander 2013-2014, MIPS Technologies, Inc., California. 2015, 2018, 2022, Matthieu Darbois. 2016-2018, Loongson Technology Corporation Limited, BeiJing\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2010, 2016, 2018-2019, D. R. Commander 2018, Matthias Rancker. 2018, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2013-2014, 2016, 2018, 2020, 2022, D. R. Commander 2011, Nokia Corporation and/or its subsidiary(-ies). 2015-2016, 2018, Matthieu Darbois. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2013-2014, 2016, 2018, 2022, D. R. Commander 2011, Nokia Corporation and/or its subsidiary(-ies) 2015-2016, 2018, 2022, Matthieu Darbois 2019, Google LLC. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2012, 2016, D. R. Commander 2015, Intel Corporation. 2016, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2015, Intel Corporation\nCopyright 2020-2023, Mike Gabriel <mike.gabriel@das-netzwerkteam.de> 2014, Ondrej Sury <ondrej@debian.org> 2012-2013, Debian TigerVNC Packaging Team <pkg-tigervnc-devel@lists.alioth.debian.org> 2011-2012, Canonical Ltd. 2011-2012, Linaro Inc.\nCopyright 2009-2011, Nokia Corporation and/or its subsidiary(-ies). 2013-2014, Linaro Limited. 2014, Linaro Limited. 2014, Siarhei Siamashka. 2014-2016, 2020, D. R. Commander 2015, D. R. Commander 2015-2016, 2018, Matthieu Darbois. 2016, Siarhei Siamashka\nCopyright 2011, The Dojo Foundation\nCopyright 1994-1996, Thomas G. Lane\nCopyright 1991-1997, Thomas G. Lane 1996-1997, Agner Fog 2009-2011, 2014-2016, 2018-2022, D. R. Commander 2015, Matthieu Darbois 2018, Matthias Rancker\nCopyright 1991-1997, Thomas G. Lane. 2009-2011, 2016, 2018-2019, D. R. Commander 2010-2011, 2015-2016, 2021, D. R. Commander 2018, Matthias Rancker\nCopyright 1991-1997, Thomas G. Lane. 2009-2011, 2016, 2019, 2022, D. R. Commander 2013, Linaro Limited 2015, Google, Inc.\nCopyright 1991-1997, Thomas G. Lane. 2009, 2018, 2021, D. R. Commander 2018, Matthias Rancker 2020-2021, Arm Limited\nCopyright 1995-1997, Thomas G. Lane. 2011, 2015, 2018, 2021-2022, D. R. Commander 2016, 2018, 2022, Matthieu Darbois. 2020, Arm Limited. 2021, Alex Richardson\nCopyright 1991-1997, Thomas G. Lane. 2015, Google, Inc. 2015-2016, 2019, 2021, D. R. Commander 2021, Alex Richardson\nCopyright 1991-2012, Thomas G. Lane, Guido Vollbeding\nCopyright 1994-2013, Thomas G. Lane, Guido Vollbeding. 2010, 2014-2018, 2020, 2022, D. R. Commander 2015, Google, Inc.\nCopyright 1991-2020, Thomas G. Lane, Guido Vollbeding 1999-2006, MIYASAKA Masaru 2009-2023, D. R. Commander 2009-2011, Nokia Corporation and/or its subsidiary(-ies) 2009, 2012, Pierre Ossman for Cendio AB 2011-2016, Siarhei Siamashka 2013-2014, Linaro Limited 2013-2014, MIPS Technologies, Inc. 2015-2016, 2018 Matthieu Darbois 2015, 2020, Google, Inc. 2015, Intel Corporation 2019-2020, Arm Limited\nCopyright 1991-2020, Thomas G. Lane, Guido Vollbeding. 1995-2019, Thomas G. Lane, Guido Vollbeding. 1997-2019, Thomas G. Lane, Guido Vollbeding. 2010, 2012-2022, D. R. Commander 2010, 2014, 2017, 2019-2022, D. R. Commander 2010, 2017, 2021-2022, D. R. Commander 2017, 2021, D. R. Commander\nCopyright 1994-1996, Thomas G. Lane. 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2011, 2014-2015, D. R. Commander\nCopyright 1994-1997, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2010, 2015-2016, 2019-2020, 2022, D. R. Commander 2015, 2020, Google, Inc.\nCopyright 1991-1996, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2010, 2015-2016, D. R. Commander 2014, MIPS Technologies, Inc., California. 2015, Google, Inc. 2019-2020, Arm Limited\nCopyright 1994-1997, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2020, Google, Inc.\nCopyright 1991-1997, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2009, 2011, 2014-2015, 2020, D. R. Commander 2009, 2011-2012, 2014-2015, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2013, Linaro Limited\nCopyright 1991-1997, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2013, Linaro Limited. 2014-2015, 2017, 2019, 2022, D. R. Commander 2014-2015, 2018, 2020, D. R. Commander 2014-2015, D. R. Commander\nCopyright 1991-1996, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2012, 2015, 2022, D. R. Commander 2010, 2015, 2022, D. R. Commander 2013, MIPS Technologies, Inc., California. 2014, MIPS Technologies, Inc., California. 2015, 2019, D. R. Commander\nCopyright 1991-1997, Thomas G. Lane. 1991-1998, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2009-2011, 2013-2014, 2016-2017, 2020, D. R. Commander 2010, 2015-2020, 2022, D. R. Commander 2010, 2016, 2018, 2022, D. R. Commander 2010-2011, 2013-2017, 2019-2020, 2022, D. R. Commander 2015, Google, Inc.\nCopyright 1991-1994, Thomas G. Lane. 1991-1995, Thomas G. Lane. 1991-1996, Thomas G. Lane. 1992-1997, Thomas G. Lane. 1994-1996, Thomas G. Lane. 1994-1997, Thomas G. Lane\nCopyright 1991-1994, Thomas G. Lane. 1991-1996, Thomas G. Lane. 1991-1997, Thomas G. Lane. 1991-1998, Thomas G. Lane. 1992-1996, Thomas G. Lane. 1994-1996, Thomas G. Lane. 1994-1997, Thomas G. Lane. 1994-1998, Thomas G. Lane. 1995-1997, Thomas G. Lane. 1995-1998, Thomas G. Lane. 2009, 2011, 2014-2015, 2018, 2020, D. R. Commander 2009, 2011, 2015, 2023, D. R. Commander 2009, 2014-2015, 2020, D. R. Commander 2009, 2015, D. R. Commander 2009-2011, 2018, D. R. Commander 2009-2012, 2015, 2022, D. R. Commander 2009-2019, 2021, D. R. Commander 2010, 2013-2014, 2017, 2019-2022, D. R. Commander 2010, 2016, 2018, D. R. Commander 2010, 2016, D. R. Commander 2010, 2018, 2022, D. R. Commander 2010, D. R. Commander 2010, 2020, D. R. Commander 2011, 2014, 2016, 2019, 2022, D. R. Commander 2011, 2015, 2020, 2023, D. R. Commander 2011, 2016, 2019, D. R. Commander 2012, 2015, 2022, D. R. Commander 2013, 2016, 2022, D. R. Commander 2014, 2017, 2021-2022, D. R. Commander 2014, 2022, D. R. Commander 2014, D. R. Commander 2015, 2017-2018, 2021-2022, D. R. Commander 2015, 2020, D. R. Commander 2015, D. R. Commander 2015-2016, 2018-2022, D. R. Commander 2016, 2021-2022, D. R. Commander 2016, 2022, D. R. Commander 2017, 2019, 2021, D. R. Commander 2017, 2019, 2022, D. R. Commander 2017, 2019-2020, 2022, D. R. Commander 2017-2018, D. R. Commander 2018, 2021-2022, D. R. Commander 2019, 2022, D. R. Commander 2020, 2022, D. R. Commander 2021, D. R. Commander 2022, D. R. Commander\nCopyright 1997-1998, Thomas G. Lane, Todd Newman. 2017, D. R. Commander\nCopyright (c) 1991-2023 The libjpeg-turbo Project\nCopyright property of CompuServe Incorporated\n2009, 2011, 2014-2015, 2018, 2020, D. R. Commander\n2009, 2011, 2014-2015, 2020, D. R. Commander\n2009, 2011, 2015, 2023, D. R. Commander\n2009, 2011-2012, 2014-2015, D. R. Commander\n2009, 2012, 2016, D. R. Commander\n2009, 2014-2015, 2020, D. R. Commander\n2009, 2015, D. R. Commander\n2009, 2016, 2018, 2020, D. R. Commander\n2009, 2016, 2018, D. R. Commander\n2009, 2016, 2020, D. R. Commander\n2009, 2016, D. R. Commander\n2009, 2018, 2021, D. R. Commander\n2009-2011, 2013, 2016, 2020, D. R. Commander\n2009-2011, 2013-2014, 2016, 2018, 2020, 2022, D. R. Commander\n2009-2011, 2013-2014, 2016, 2018, 2022, D. R. Commander\n2009-2011, 2013-2014, 2016-2017, 2020, D. R. Commander\n2009-2011, 2014, 2016, 2018, 2020, 2022, D. R. Commander\n2009-2011, 2014, 2016, 2018, 2022, D. R. Commander\n2009-2011, 2014, 2022, D. R. Commander\n2009-2011, 2014-2016, 2018, 2022, D. R. Commander\n2009-2011, 2014-2016, 2018-2022, D. R. Commander\n2009-2011, 2014-2016, 2019, 2021, D. R. Commander\n2009-2011, 2014-2017, 2019, D. R. Commander\n2009-2011, 2016, 2018-2019, D. R. Commander\n2009-2011, 2016, 2019, 2022, D. R. Commander\n2009-2011, 2018, D. R. Commander\n2009-2012, 2015, 2022, D. R. Commander\n2009-2014, 2016-2019, 2021, 2023, D. R. Commander\n2009-2014, 2017-2019, 2022-2023, D. R. Commander\n2009-2015, 2017, 2020-2021, 2023, D. R. Commander\n2009-2019, 2021, D. R. Commander\n2009-2019, 2021-2023, D. R. Commander\n2009-2021, D. R. Commander\n2009-2023, D. R. Commander\n2010, 2012-2022, D. R. Commander\n2010, 2013-2014, 2017, 2019-2022, D. R. Commander\n2010, 2014, 2017, 2019-2022, D. R. Commander\n2010, 2014-2018, 2020, 2022, D. R. Commander\n2010, 2015, 2022, D. R. Commander\n2010, 2015-2016, 2019-2020, 2022, D. R. Commander\n2010, 2015-2016, D. R. Commander\n2010, 2015-2020, 2022, D. R. Commander\n2010, 2016, 2018, 2022, D. R. Commander\n2010, 2016, 2018, D. R. Commander\n2010, 2016, 2018-2019, D. R. Commander\n2010, 2016, D. R. Commander\n2010, 2017, 2021-2022, D. R. Commander\n2010, 2018, 2022, D. R. Commander\n2010, 2020, D. R. Commander\n2010, D. R. Commander\n2010-2011, 2013-2017, 2019-2020, 2022, D. R. Commander\n2010-2011, 2015-2016, 2021, D. R. Commander\n2011, 2013, 2018, 2023, D. R. Commander\n2011, 2013, 2023, D. R. Commander\n2011, 2013-2015, 2023, D. R. Commander\n2011, 2014, 2016, 2019, 2022, D. R. Commander\n2011, 2014, 2022, D. R. Commander\n2011, 2014, D. R. Commander\n2011, 2014-2015, D. R. Commander\n2011, 2014-2016, 2018, 2020, 2022, D. R. Commander\n2011, 2015, 2018, 2021-2022, D. R. Commander\n2011, 2015, 2020, 2023, D. R. Commander\n2011, 2015, D. R. Commander\n2011, 2016, 2019, D. R. Commander\n2011, 2016, D. R. Commander\n2011, 2018, D. R. Commander\n2011, 2019, D. R. Commander\n2011, 2022, D. R. Commander\n2011, D. R. Commander\n2011-2012, 2014-2015, 2017, 2019, 2021-2023, D. R. Commander\n2011-2012, 2014-2015, 2017-2018, 2023, D. R. Commander\n2011-2013, 2016, 2020, D. R. Commander\n2011-2013, 2017-2018, 2020-2021, 2023, D. R. Commander\n2011-2015, 2018, 2020, 2023, D. R. Commander\n2011-2015, 2018, 2022-2023, D. R. Commander\n2011-2018, 2023, D. R. Commander\n2011-2023, D. R. Commander\n2012, 2015, 2022, D. R. Commander\n2012, 2016, D. R. Commander\n2013, 2016, 2022, D. R. Commander\n2013, 2016, D. R. Commander\n2014, 2017, 2021-2022, D. R. Commander\n2014, 2017, 2023, D. R. Commander\n2014, 2018, 2020, D. R. Commander\n2014, 2018-2019, D. R. Commander\n2014, 2020, D. R. Commander\n2014, 2022, D. R. Commander\n2014, D. R. Commander\n2014-2015, 2017, 2019, 2022, D. R. Commander\n2014-2015, 2018, 2020, D. R. Commander\n2014-2015, 2018-2019, D. R. Commander\n2014-2015, 2019, D. R. Commander.\n2014-2015, 2020, D. R. Commander\n2014-2015, D. R. Commander\n2014-2016, 2020, D. R. Commander\n2015, 2017, 2022, D. R. Commander\n2015, 2017-2018, 2021-2022, D. R. Commander\n2015, 2018, 2021-2022, D. R. Commander\n2015, 2018, D. R. Commander\n2015, 2018-2019, D. R. Commander\n2015, 2019, D. R. Commander\n2015, 2020, D. R. Commander\n2015, D. R. Commander\n2015-2016, 2018-2022, D. R. Commander\n2015-2016, 2019, 2021, D. R. Commander\n2015-2017, 2020-2023, D. R. Commander\n2015-2020, 2022, D. R. Commander\n2016, 2018, D. R. Commander\n2016, 2018-2019, 2022, D. R. Commander\n2016, 2019, D. R. Commander\n2016, 2020, D. R. Commander\n2016, 2021-2022, D. R. Commander\n2016, 2022, D. R. Commander\n2016, D. R. Commander\n2017, 2019, 2021, D. R. Commander\n2017, 2019, 2022, D. R. Commander\n2017, 2019-2020, 2022, D. R. Commander\n2017, 2021, D. R. Commander\n2017, D. R. Commander\n2017-2018, D. R. Commander\n2018, 2021-2022, D. R. Commander\n2018, D. R. Commander\n2018-2019, D. R. Commander\n2019, 2022, D. R. Commander\n2019, D. R. Commander\n2020, 2022, D. R. Commander\n2020, D. R. Commander\n2021, D. R. Commander\n2021-2022, D. R. Commander\n2022, D. R. Commander\n2014, Daniele E. Domenichelli\n1990, David Koblas\n2012-2013, Debian TigerVNC Packaging Team <pkg-tigervnc-devel@lists.alioth.debian.org>\n2013, Dimitri John Ledkov\n1997-2020, Dimitri van Heesch\n2016, Dmitry Marakasov\n2011, Eric NOULARD\n2015, 2020, Google, Inc.\n2015, Google, Inc.\n2020, Google, Inc.\n2019, Google LLC.\n2005, Guido Vollbeding <guido@jpegclub.org>\n2015, Intel Corporation\n2014, Jay Foad.\n1988, Jef Poskanzer\n1989, Jef Poskanzer\n2011, 2013-2015, Kitware, Inc.\n2011-2012, Linaro Inc.\n2013, Linaro Limited\n2013-2014, Linaro Limited\n2014, Linaro Limited.\n2016-2017, Loongson Technology Corporation Limited, BeiJing\n2016-2018, Loongson Technology Corporation Limited, BeiJing\n2013-2014, MIPS Technologies, Inc.\n2013, MIPS Technologies, Inc., California.\n2013-2014, MIPS Technologies, Inc., California.\n2014, MIPS Technologies, Inc., California.\n1999-2006, MIYASAKA Masaru\n2018, Matthias Räncker\n2015, 2018, 2022, Matthieu Darbois.\n2015, Matthieu Darbois\n2015-2016, 2018 Matthieu Darbois\n2015-2016, 2018, 2022, Matthieu Darbois\n2015-2016, 2018, Matthieu Darbois.\n2016, 2018, 2022, Matthieu Darbois.\n2016, 2018, Matthieu Darbois\n2016, Matthieu Darbois.\n2018, Matthieu Darbois.\n2022, Matthieu Darbois\n2020-2023, Mike Gabriel <mike.gabriel@das-netzwerkteam.de>\n2011, Nikita Krupen'ko\n2009-2011, Nokia Corporation and/or its subsidiary(-ies)\n2011, Nokia Corporation and/or its subsidiary(-ies)\n2014, Ondřej Surý <ondrej@debian.org>\n2009, 2012, Pierre Ossman for Cendio AB\n2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB\n2009, Pierre Ossman <ossman@cendio.se> for Cendio AB\n2016, Roger Leigh\n2014, Rolf Eike Beer\n2011-2016, Siarhei Siamashka\n2014, Siarhei Siamashka.\n2016, Siarhei Siamashka.\n1991-1994, Thomas G. Lane.\n1991-1995, Thomas G. Lane.\n1991-1996, Thomas G. Lane.\n1991-1997, Thomas G. Lane\n1991-1998, Thomas G. Lane.\n1992-1996, Thomas G. Lane.\n1992-1997, Thomas G. Lane.\n1994-1996, Thomas G. Lane.\n1994-1997, Thomas G. Lane.\n1994-1998, Thomas G. Lane.\n1995-1997, Thomas G. Lane.\n1995-1998, Thomas G. Lane.\n1991-2012, Thomas G. Lane, Guido Vollbeding.\n1991-2020, Thomas G. Lane, Guido Vollbeding\n1994-2013, Thomas G. Lane, Guido Vollbeding.\n1995-2019, Thomas G. Lane, Guido Vollbeding.\n1997-2019, Thomas G. Lane, Guido Vollbeding.\n1997-1998, Thomas G. Lane, Todd Newman.\n2015, Viktor Szathmáry\ncopyright by X Consortium\ncopyright by the Free Software Foundation\ncopyright (c) 1991-2010, Thomas G. Lane, Guido Vollbeding\ncopyright holder, Aladdin Enterprises of Menlo Park",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/libj/libjpeg-turbo/libjpeg62-turbo_2.1.5-2_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/olNhRxLeWNUiQ2N649wytedGmhwfvpa7lZu8ZzM2bPI/libjpeg62-turbo_~-2_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libjpeg62-turbo@2.1.5-2?arch=amd64&distro=debian-12&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.libjpeg-turbo.org/",
    "licenseConcluded" : "(Zlib AND BSD-3-Clause AND IJG AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libjpeg62-turbo",
    "versionInfo" : "2.1.5-2"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-liblcms2-2-2.14-2-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright 1998-2022 Marti Maria Saguer <marti.maria@littlecms.com>\nCopyright 2011 Oleksandr Moskalenko <malex@debian.org> 2013-2023 Thomas Weber <tweber@debian.org>\nCopyright 1991-2013, Thomas G. Lane, Guido Vollbeding\n1998-2022 Marti Maria Saguer <marti.maria@littlecms.com>\n2011 Oleksandr Moskalenko <malex@debian.org>\n1991-2013, Thomas G. Lane, Guido Vollbeding.\n2013-2023 Thomas Weber <tweber@debian.org>\ncopyright (c) 1991-2013, Thomas G. Lane, Guido Vollbeding",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/l/lcms2/liblcms2-2_2.14-2_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TsXcxfESs-DqC89gt-gCXJJbAfuKdFJSNh6aVOvDmt4/liblcms2-2_~-2_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/liblcms2-2@2.14-2?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.littlecms.com/",
    "licenseConcluded" : "(GPL-3.0-or-later AND IJG AND MIT AND GPL-2.0-or-later AND GPL-3.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/liblcms2-2",
    "versionInfo" : "2.14-2"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libpcre2-8-0-10.42-1-arch-amd64-distro-debian-12",
    "copyrightText" : "(C) 1994 X Consortium\nCopyright KDE Community\nCopyright 1997-2022 University of Cambridge\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright (c) 1994 X Consortium\nKDE Community\nNone (public-domain)\n1997-2022 University of Cambridge.\nZoltan Herczeg (hzmester@freemail.hu). All rights reserved.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/p/pcre2/libpcre2-8-0_10.42-1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1LxXEngfTqqmk89be_PThDknyxMIR2FoBjv_9j92bAA/libpcre2-8-0_~-1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND ICU AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libpcre2-8-0",
    "versionInfo" : "10.42-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libpng16-16-1.6.39-2PLUSdeb12u3-arch-amd64-distro-debian-12",
    "copyrightText" : "2000-2008 Adam M. Costello and Cosmin Truta\n1996, 1997 Andreas Dilger\n2006-2009 Anibal Monsalve Salazar <anibal@debian.org>\n2017-2018 Arm Holdings. All rights reserved.\nCopyright 2000-2008 Adam M. Costello and Cosmin Truta 1998-2017 Greg Roelofs\nCopyright 1996, 1997 Andreas Dilger 1995, 1996 Guy Eric Schalnat, Group 42, Inc. 1998-2013 Glenn Randers-Pehrson 2018-2022 Cosmin Truta\nCopyright 2018-2019 Cosmin Truta 2017-2018 Arm Holdings\nCopyright 2017 Glenn Randers-Pehrson 2016 Google Inc.\nCopyright 2016 Google Inc.\nCopyright 2011-2013 John Cunningham Bowler 2021 Cosmin Truta\nCopyright 2013-2017 John Cunningham Bowler 2015 Glenn Randers-Pehrson\nCopyright 2001 Philippe Troin <phil@fifi.org> 2002 Junichi Uekawa <dancer@debian.org> 2003 Josselin Mouette <joss@debian.org> 2006-2009 Anibal Monsalve Salazar <anibal@debian.org> 2011-2014 Nobuhiro Iwamatsu <iwamatsu@debian.org> 2016-2022 Gianfranco Costamagna <locutusofborg@debian.org> 2016-2017 Tobias Frost <tobi@debian.org>\nCopyright 1995-2022 The\nCopyright 1999-2019 Willem van Schaik\nCopyright (c) 1996, 1997 Andreas Dilger\nCopyright (c) 1996, 1997 Andreas Dilger Distributed\nCopyright (c) 2006-11-28 Charles Poynton\nCopyright (c) 2018-2022 Cosmin Truta\nCopyright (c) 1995, 1996 Frank J. T. Wojcik\nCopyright (c) 1998, 1999 Glenn Randers-Pehrson\nCopyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.\n2018-2019 Cosmin Truta\n2018-2022 Cosmin Truta\n2021 Cosmin Truta\n2016-2022 Gianfranco Costamagna <locutusofborg@debian.org>\n1998-2013 Glenn Randers-Pehrson\n1998-2018 Glenn Randers-Pehrson\n2014,2016 Glenn Randers-Pehrson\n2015 Glenn Randers-Pehrson\n2017 Glenn Randers-Pehrson\n2016 Google Inc.\n1998-2017 Greg Roelofs\n1995, 1996 Guy Eric Schalnat, Group 42, Inc.\n2011-2013 John Cunningham Bowler\n2013-2017 John Cunningham Bowler\n2003 Josselin Mouette <joss@debian.org>\n2002 Junichi Uekawa <dancer@debian.org>\n2011-2014 Nobuhiro Iwamatsu <iwamatsu@debian.org>\n2001 Philippe Troin <phil@fifi.org>\n1995-2022 The PNG Reference Library Authors.\n2016-2017 Tobias Frost <tobi@debian.org>\n1999-2019 Willem van Schaik\n2000,2017 Willem van Schaik\n(c) Willem van Schaik, 1999, 2011\n\nAuthors: Adam M. Costello and Cosmin Truta Greg Roelofs; Andreas Dilger; Andreas Dilger Distributed; Andreas Dilger Guy Eric Schalnat, Group 42, Inc. Glenn Randers-Pehrson Cosmin Truta; Charles Poynton; Cosmin Truta; Cosmin Truta Arm Holdings; Frank J. T. Wojcik; Glenn Randers-Pehrson; Glenn Randers-Pehrson Abstract; Glenn Randers-Pehrson Google Inc.; Google Inc.; Greg Roelofs and contributors; Guy Eric Schalnat, Group 42, Inc.; John Cunningham Bowler Cosmin Truta; John Cunningham Bowler Glenn Randers-Pehrson; Philippe Troin Junichi Uekawa Josselin Mouette Anibal Monsalve Salazar Nobuhiro Iwamatsu Gianfranco Costamagna Tobias Frost; Willem van Schaik",
    "downloadLocation" : "http://security.debian.org/debian-security/pool/updates/main/libp/libpng1.6/libpng16-16_1.6.39-2+deb12u3_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/n9grlXDnd6tTWvOEEY_3c550sAy5EpKpD3FriJfRhHw/libpng16-16_~-2%2Bdeb12u3_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libpng16-16@1.6.39-2%2Bdeb12u3?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libpng.org/pub/png/libpng.html",
    "licenseConcluded" : "(Libpng AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libpng16-16",
    "versionInfo" : "1.6.39-2+deb12u3"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libstdcPLUSPLUS6-12.2.0-14PLUSdeb12u1-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright (c) 2008-2022 Free Software Foundation, Inc.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/gcc-12/libstdc++6_12.2.0-14+deb12u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zlTOf495axwuwA88xi-nS2sPH86R9PWraONil3UnRKc/libstdc%2B%2B6_~-14%2Bdeb12u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libstdc++6",
    "versionInfo" : "12.2.0-14+deb12u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libuuid1-2.38.1-5PLUSdeb12u3-arch-amd64-distro-debian-12",
    "copyrightText" : "1980, 1983, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994\n1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002,\n1995, 1995, 1996, 1997, 1999, 2000, 2001, 2002, 2003, 2004\n1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\n2005 Adrian Bunk\nAdrian Bunk <bunk@stusta.de>\nAiet Kolkhi <aietkolkhi@gmail.com>\n2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\n1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\n1999 Andreas Dilger\n2001 Andreas Dilger\n1999 Andreas Dilger (adilger@enel.ucalgary.ca)\n2009-2010 Andreas Dilger <adilger@sun.com>\n2001 Andreas Dilger (adilger@turbolinux.com)\n2014 Andreas Henriksson <andreas@fatal.se>\n2010 Andrew Nayenko <resver@gmail.com>\n1999, 2001 Andries Brouwer\n1995, 1999, 2000 Andries E. Brouwer <aeb@cwi.nl>\n2012 Andy Lutomirski <luto@amacapital.net>\nAnton Gladky <gladky.anton@gmail.com>\nArief S F (arief@gurame.fisika.ui.ac.id>\nArmin Beširović <armin@linux.org.ba>\nAxel Bojer <axelb@skolelinux.no>\nBart Cornelis <cobaco@skolelinux.no>\nBartosz Fe�ski <fenio@o2.pl>\nBasil Shubin <bashu@surgut.ru>\n2009 Bastian Friedrich <bastian.friedrich@collax.com>\nBaurzhan Muftakhidinov <baurthefirst@gmail.com>\nBjorn Steensrud <bjornst@powertech.no>\n2008 Cai Qian <qcai@redhat.com>\n2017-2020 Chris Hofstaedtler <zeha@debian.org>\nClaus Hindsgaul <claus_h@image.dk>\nClytie Siddall <clytie@riverland.net.au>\n2012 Cody Maloney <cmaloney@theoreticalchaos.com>\nCopyright Aiet Kolkhi <aietkolkhi@gmail.com> Anton Gladky <gladky.anton@gmail.com> Arief S\nCopyright 2001 Andreas Dilger\nCopyright 1999, 2001 Andries Brouwer 1995, 1995, 1996, 1997, 1999, 2000, 2001, 2002, 2003, 2004 Theodore Ts'o\nCopyright 2010, 2011 Davidlohr Bueso <dave@gnu.org>\nCopyright 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright 2009-2010 Free Software Foundation, Inc. 2010-2013 Karel Zak <kzak@redhat.com>\nCopyright 2000-2001 Gunnar Ritter\nCopyright Guy Maor <maor@debian.org> Sean Shaleh Perry <shaleh@debian.org> Adrian Bunk <bunk@stusta.de>\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2005 Jens Axboe <jens@axboe.dk>\nCopyright 2008 Karel Zak <kzak@redhat.com> 1999-2008\nCopyright 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright 2009-2014 Karel Zak <kzak@redhat.com> 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 2010 Lennart Poettering\nCopyright 1991, 1992 Linus Torvalds\nCopyright 1994 Martin Schulze <joey@infodrom.north.de> 1994 Salvatore Valente <svalente@mit.edu>\nCopyright Michal Luscon <mluscon@redhat.com> 1986 Gary S. Brown 1990 Gordon Irlam (gordoni@cs.ua.oz.au) 1991, 1992 Linus Torvalds 1991-2004 Miquel van Smoorenburg 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk) 1992-1997 Michael K. Johnson, johnsonm@redhat.com 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2008 Theodore Ts'o <tytso@mit.edu> 1994 Kevin E. Martin (martin@cs.unc.edu) 1994 Salvatore Valente <svalente@mit.edu> 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it) 1994-2005 Jeff Tranter (tranter@pobox.com) 1995, 1999, 2000 Andries E. Brouwer <aeb@cwi.nl> 1997-2005 Frodo Looijaard\nCopyright 2012 Ondrej Oprala <ooprala@redhat.com> 2012-2014 Karel Zak <kzak@redhat.com>\nCopyright 2013, Red Hat, Inc.\nCopyright 1999, 2000, Red Hat Software\nCopyright 2004 Robert Love <rml@tech9.net> 2010 Karel Zak <kzak@redhat.com>\nCopyright Steven M. Bellovin <smb@research.att.com> Unknown Authors\nCopyright 1980, 1987, 1988 The Regents of the University of California. 2011 Karel Zak <kzak@redhat.com>\nCopyright 1980, 1983, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994 The Regents of the University of California 2014 Sami Kerola <kerolasa@iki.fi>\nCopyright 1996, 1997, 1998, 1999, 2007 Theodore Ts'o. 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2003, 2004, 2005 Thorsten Kukuk\n2009 Corentin Chary <corentincj@iksaif.net>\nDafydd Tomos <l10n@da.fydd.org>\nDamyan Ivanov <dam@modsoftsys.com>\n1998 Danek Duvall <duvall@alumni.princeton.edu>\nDaniel Franganillo <dfranganillo@gmail.com>\nDaniel Nylander <po@danielnylander.se>\nDanishka Navin <danishka@gmail.com>\nDauren Sarsenov <daur88@inbox.ru>\n2010, 2011 Davidlohr Bueso <dave@gnu.org>\n2010, 2011, 2012 Davidlohr Bueso <dave@gnu.org>\n2012 Davidlohr Bueso <dave@gnu.org>\nDominik Zablotny <dominz@wp.pl>\nDr.T.Vasudevan <agnihot3@gmail.com>\nEddy Petrisor <eddy.petrisor@gmail.com>\nEder L. Marques <frolic@debian-ce.org>\nElian Myftiu <elian.myftiu@gmail.com>\nEmmanuel Galatoulas <galas@tee.gr>\n2012-2013 Eric Biederman <ebiederm@xmission.com>\n2013 Eric Sandeen <sandeen@redhat.com>\nEsko Arajärvi <edu@iki.fi>\n2008-2012 Frank Lichtenheld (djpig@debian.org)\nFrank Lichtenheld <djpig@debian.org>\nFrédéric Bothamy <frederic.bothamy@free.fr>\n2009-2010 Free Software Foundation, Inc.\n1997-2005 Frodo Looijaard <frodo@frodo.looijaard.name>\nGabor Burjan <buga@buvoshetes.hu>\n1986 Gary S. Brown\nGeorge Papamichelakis <george@step.gr>\n1990 Gordon Irlam (gordoni@cs.ua.oz.au)\n2000-2001 Gunnar Ritter\nGuy Maor <maor@debian.org>\n2003-2005 H. Peter Anvin\n2010 Hajime Taira <htaira@redhat.com>\nHans Fredrik Nordhaug <hans@nordhaug.priv.no>\n2008 Hayden A. James (hayden.james@gmail.com)\nHideki Yamane <henrich@samba.gr.jp>\nHleb Rubanau <g.rubanau@gmail.com>\nHåvard Korsvoll <korsvoll@gmail.com>\n2011 IBM Corp.\nI Gede Wijaya S <gwijayas@yahoo.com>\nIvan Masár <helix84@centrum.sk>\nJacobo Tarrio <jtarrio@debian.org>\n2008 James Youngman <jay@gnu.org>\nJamil Ahmed <jamil@ankur.org.bd>\nJanos Guljas <janos@resenje.org>\n2010 Jason Borden <jborden@bluehost.com>A\n1994-2005 Jeff Tranter (tranter@pobox.com)\n2005 Jens Axboe <jens@axboe.dk>\n2010 Jeroen Oortwijn <oortwijn@gmail.com>\n1990 Jim Berets <jberets@bbn.com>\n2010 Jiro SEKIBA <jir@unicus.jp>\nJordi Mallach <jordi@debian.org>\nJosip Rodin <joy+ditrans@linux.hr>\n2007-2013 Karel Zak <kzak@redhat.com>\n2007-2020 Karel Zak <kzak@redhat.com>\n2008 Karel Zak <kzak@redhat.com>\n2008-2009, 2010, 2011, 2012 Karel Zak <kzak@redhat.com>\n2008-2012 Karel Zak <kzak@redhat.com>\n2008-2013 Karel Zak <kzak@redhat.com>\n2009-2014 Karel Zak <kzak@redhat.com>\n2010 Karel Zak <kzak@redhat.com>\n2010-2013 Karel Zak <kzak@redhat.com>\n2011 Karel Zak <kzak@redhat.com>\n2012-2014 Karel Zak <kzak@redhat.com>\n2014 Karel Zak <kzak@redhat.com>\nKarolina Kalic <karolina@resenje.org>\nKartik Mistry <kartik.mistry@gmail.com>\n2004-2008 Kay Sievers <kay.sievers@vrfy.org>\n1994 Kevin E. Martin (martin@cs.unc.edu)\nKevin Scannell <kscanne@gmail.com>\nKhoem Sokhem <khoemsokhem@khmeros.info>\nKlaus Ade Johnstad <klaus@skolelinux.no>\nKnut Yrvin <knuty@skolelinux.no>\nKonstantinos Margaritis <markos@debian.org>\nKostas Papadimas <pkst@gnome.org>\nKęstutis Biliūnas <kebil@kaunas.init.lt>\nKumar Appaiah <a.kumar@alumni.iitm.ac.in>\nLaMont Jones <lamont@debian.org>\n2010 Lennart Poettering\n2012 Lennart Poettering\n1991, 1992 Linus Torvalds\nLior Kaplan <kaplan@debian.org>\nLuiz Portella <lfpor@lujz.org>\nMallikarjuna <Mallikarjunasj@gmail.com>\n1996-2003 Martin Mitchell (martin@debian.org)\n1994 Martin Schulze <joey@infodrom.north.de>\n2010 Masatake Yamato <yamato@redhat.com>\nMert Dirik <mertdirik@gmail.com>\n2017-2020 Michael Biebl <biebl@debian.org>\n2004-2006 Michael Holzt, kju -at- fqdn.org\n1992-1997 Michael K. Johnson, johnsonm@redhat.com\nMichal Luscon <mluscon@redhat.com>\n2009 Mike Hommey <mh@glandium.org>\n2009 Mikhail Gusarov <dottedmag@dottedmag.net>\n2012 Milan Broz <mbroz@redhat.com>\nMilo Casagrande <milo@ubuntu.com>\nMing Hua <minghua@ubuntu.com>\n1991-2004 Miquel van Smoorenburg\nMiroslav Kure <kurem@debian.cz>\nMouhamadou Mamoune Mbacke <mouhamadoumamoune@gmail.com>\nNabin Gautam <nabin@mpp.org.np>\n2012 Ondrej Oprala <ooprala@redhat.com>\n2013,2014 Ondrej Oprala <ooprala@redhat.com>\n2014 Ondrej Oprala <ooprala@redhat.com>\nOssama M. Khayat <okhayat@yahoo.com>\nOvidiu Damian <deelerious@gmail.com>\nParlin Imanuel Toh <parlin_i@yahoo.com>\n1999, 2004 Paul Eggert <eggert@twinsun.com>\nPavel Piatruk <berserker@neolocation.com>\n2019 Petter Reinholdtsen <pere@debian.org>\n2011 Philipp Marek <philipp.marek@linbit.com>\nPiarres Beobide <pi@beobide.net>\nPraveen|പ്രവീണ്‍ A|എ <pravi.a@gmail.com>\nRūdolfs Mazurs <rudolfs.mazurs@gmail.com>\n1999, 2000, 2002-2009, 2010, 2011, 2012, 2014 Red Hat, Inc.\n2009 Red Hat, Inc.\n2013, Red Hat, Inc.\n1999, 2000, Red Hat Software\n1990 Rich $alz <rsalz@bbn.com>\n2004 Robert Love <rml@tech9.net>\n2013 Rolf Fokkens <rolf@fokkens.nl>\n2008 Roy Peled, the.roy.peled -at- gmail.com\nSahran <Sahran.ug@gmail.com>\n1994 Salvatore Valente <svalente@mit.edu>\n2012 Sami Kerola <kerolasa@iki.fi>\n2014 Sami Kerola <kerolasa@iki.fi>\nSampada Nakhare <sampadanakhare@gmail.com>\nSean 'Shaleh' Perry <shaleh@debian.org>\nSetyo Nugroho <setyo@gmx.net>\nSimão Pedro Cardoso <pthell@gmail.com>\nStefano Melchior <stefano.melchior@openlabs.it>\nSteven M. Bellovin <smb@research.att.com>\n2007, 2011, 2012, 2016 SuSE LINUX Products GmbH\nSunjae Park <darehanl@gmail.com>\nSveinn í Felli <sveinki@nett.is>\nTetralet <tetralet@gmail.com>\n1980, 1987, 1988 The Regents of the University of California.\nThe Regents of the University of California\n1996, 1997, 1998, 1999, 2007 Theodore Ts'o.\nTheodore Ts'o.\n2003, 2004, 2005, 2008 Theodore Ts'o <tytso@mit.edu>\nTheppitak Karoonboonyanan <thep@linux.thai.net>\n2003, 2004, 2005 Thorsten Kukuk\n1999-2002 Transmeta Corporation\nTshewang Norbu <bumthap2006@hotmail.com>\nUnknown Authors on Usenet\nVahid Ghaderi <vahid_male1384@yahoo.com>\nVanja Cvelbar <cvelbar@gmail.com>\nVeeven <veeven@gmail.com>\nVikram Vincent <vincentvikram@gmail.com>\n2000 Werner Almesberger\n2012 Werner Fink <werner@suse.de>\nYoppy Hidayanto <yoppy.hidayanto@gmail.com>\n2013 Zeeshan Ali (Khattak) <zeeshanak@gnome.org>\nastur <malditoastur@gmail.com>\n1999-2008 by Theodore Ts'o\nn/a\n*unknown*\n\nAuthors: Aiet Kolkhi Anton Gladky Arief S; Andreas Dilger; Andries Brouwer Theodore Ts'o; Davidlohr Bueso; Eric Biederman; Free Software Foundation, Inc. Karel Zak; Gunnar Ritter; Guy Maor Sean Shaleh Perry Adrian Bunk; H. Peter Anvin; Jens Axboe; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak Davidlohr Bueso; Karel Zak Ondrej Oprala; Lennart Poettering; Linus Torvalds; Martin Schulze Salvatore Valente; Michal Luscon Gary S. Brown Gordon Irlam Linus Torvalds Miquel van Smoorenburg A. V. Le Blanc Michael K. Johnson, Theodore Ts'o Kevin E. Martin Salvatore Valente Alessandro Rubini Jeff Tranter Andries E. Brouwer Frodo Looijaard; Ondrej Oprala Karel Zak; Red Hat Software; Red Hat, Inc.; Robert Love Karel Zak; Steven M. Bellovin Unknown Authors; The Regents of the University of California Sami Kerola; The Regents of the University of California. Karel Zak; Theodore Ts'o. Andreas Dilger; Thorsten Kukuk; the University of California, Berkeley; the University of California, Berkeley and its contributors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/u/util-linux/libuuid1_2.38.1-5+deb12u3_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AgP0QZ7SsgeO4o8TebhWRGRtwAnt_dfCifd8TYdKoms/libuuid1_~-5%2Bdeb12u3_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.kernel.org/pub/linux/utils/util-linux/",
    "licenseConcluded" : "(BSD-4-Clause AND GPL-3.0-or-later AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND BSD-4.3TAHOE AND BSD-4-Clause-UC AND LGPL-2.1-or-later AND MIT AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libuuid1",
    "versionInfo" : "2.38.1-5+deb12u3"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-media-types-10.0.0-arch-all-distro-debian-12",
    "copyrightText" : "public-domain",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/m/media-types/media-types_10.0.0_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/media-types@10.0.0?arch=all&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0eMHhUG1GaDfOqHHDRnWUSiyC0tta7iAKmTWTCn5hSs/media-types_~_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/media-types",
    "versionInfo" : "10.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-netbase-6.4-arch-all-distro-debian-12",
    "copyrightText" : "Copyright (c) 1998-2001 Anthony Towns\nCopyright (c) 2002-2022 Marco d'Itri\nCopyright (c) 1994-1998 Peter Tobias",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/n/netbase/netbase_6.4_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/netbase@6.4?arch=all&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XTulgVlQDcMjHDwmFe14ZZt4rxE4OzPokjBBtfYRcrs/netbase_~_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/netbase",
    "versionInfo" : "6.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-openjdk-17-jre-headless-17.0.18PLUS8-1-deb12u1-arch-amd64-distro-debian-12",
    "copyrightText" : "Copyright 2006-2014 Adobe Systems Incorporated.\nCopyright © 2007-2023 Canonical Ltd.\nCopyright (C) 2014-2017 by Vitaly Puzrin and Andrei Tuputcyn.\nCopyright 2008, Google Inc.\nCopyright 1994-2011 Hewlett-Packard Co.\nCopyright 2012-2024 JP Aumasson\nCopyright OpenJS Foundation and other contributors, https://openjsf.org\nCopyright 2016, Red Hat and individual contributors\nCopyright 2016, Red Hat and individual contributors by the @authors\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 1996, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter\nCopyright (c) 2018-2019 Adobe Inc.\nCopyright (c) 2006-2014 Adobe Systems Incorporated\nCopyright (c) 2013-2015 Alexei Podtelezhnikov\nCopyright (c) 2021 Alibaba Group Holding Limited\nCopyright (c) 2020-2021 Amazon.com, Inc\nCopyright (c) 2021-2023, Arm Limited.\nCopyright (c) 2009-2013, Attila Szegedi\nCopyright (c) 2020-2021 Azul Systems, Inc.\nCopyright (c) 2021-2023 BELLSOFT\nCopyright (c) 2006-2025 Behdad Esfahbod\nCopyright (c) 1999-2007 Brian Paul.\nCopyright (c) 2007-2023 Canonical Ltd.\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Codethink Limited\nCopyright (c) 2021 Collabora Ltd.\nCopyright (c) 2000 Computing Research Labs, New Mexico State University\nCopyright (c) 1999 David Turner\nCopyright (c) 1998-2004 David Turner and Werner Lemberg\nCopyright (c) 2018-2020 Ebrahim Byagowi\nCopyright (c) 2016 Elie Roux <elie.roux@telecom-bretagne.eu>\nCopyright (c) 2019 Facebook, Inc.\nCopyright (c) 2000-2011 France Telecom\nCopyright (c) 2001-2015 Francesco Zappa Nardelli\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010-2024 Google, Inc.\nCopyright (c) 2009-2022 Google LLC\nCopyright (c) 2002 Graz University of Technology\nCopyright (c) 2012 Grigori Goronzy <greg@kinoho.net>\nCopyright (c) 2019-2021 Huawei Technologies Co. Ltd.\nCopyright (c) 2016 Igalia S.L.\nCopyright (c) 2017 Instituto de Pesquisas Eldorado.\nCopyright (c) 1995-2016 International Business Machines Corporation and others\nCopyright (c) 2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 2009 Keith Stribley\nCopyright (c) 2018 Khaled Hosny\nCopyright (c) 1998-2025 Marti Maria Saguer\nCopyright (c) 2022 Matthias Clasen\nCopyright (c) 2020-2021 Microsoft Corporation\nCopyright (c) 2015 Mozilla Foundation\nCopyright (c) 1998 National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government\nCopyright (c) OASIS Open 2023\nCopyright (c) 1996-2025 Oracle and/or its affiliates.\nCopyright (c) 2004-2015 Paul R. Holser, Jr\nCopyright (c) 2023 PipeWire authors\nCopyright (c) 2009-2012 Red Hat, Inc.\nCopyright (c) 2012-2022 SAP\nCopyright (c) 2012-2022 SAP SE.\nCopyright (c) 1996-2003 Sun Microsystems, Inc.\nCopyright (c) 2022-23 THL A29 Limited, a Tencent company.\nCopyright (c) 1999-2022 The Apache Software Foundation.\nCopyright (c) 1995-2005 The Cryptix Foundation Limited\nCopyright (c) 2008 - 2018 The Khronos Group Inc.\nCopyright (c) 1982 The Royal Institute, Thai Royal Government\nCopyright (c) 1991-2020 Unicode, Inc.\nCopyright (c) 2009 VMware, Inc.\nCopyright (c) 2005 Werner Lemberg\nCopyright (c) 2018-2023 Wim Taymans\nCopyright (c) 2004 World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2012 Zilong Tan (eric.zltan@gmail.com)\nCopyright (c) 2007-2024 by David Turner\nCopyright (c) 2018-2024 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams\nCopyright (c) 1996-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2007-2024 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2024 by Derek Clegg and Michael Toftdal\nCopyright (c) 2013-2024 by Google, Inc.\nCopyright (c) 1996-2024 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2024 by Masatake YAMATO, Red Hat K.K.\nCopyright (c) 2004-2024 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2019-2024 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2024 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2024 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2001, softSurfer (www.softsurfer.com)\nCopyright (c) 2002-2023, the original author or authors\nCopyright jQuery Foundation and other contributors, https://jquery.org\nPortions Copyright Eastman Kodak Company 1991-2003\nPortions Copyright (c) 1995 Colin Plumb\nPortions Copyright (c) 1997-2003 Eastman Kodak Company\nPortions Copyright (c) 2011-2014 IBM Corporation\nSee other third party notices under the License section\nat iClick, Inc., software copyright (c) 1999\n(c) 2024 Unicode(r), Inc.\n(c) 2009 by Remo Dentato (rdentato@gmail.com)\ncopyright (c) 1999, IBM Corporation., http://www.ibm.com\ncopyright (c) 2001, Institute\ncopyright (c) 1999-2002, Lotus Development Corporation., http://www.lotus.com\ncopyright (c) 1999, Sun Microsystems., http://www.sun.com\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\n\nAuthors: Adobe Inc.; Adobe Systems Incorporated; Alexei Podtelezhnikov; Alibaba Group Holding Limited; Amazon.com, Inc; Arm Limited; Attila Szegedi; Azul Systems, Inc.; BELLSOFT; Behdad Esfahbod; Brian Paul; Canonical Ltd.; Chris Wilson; Codethink Limited; Colin Plumb; Collabora Ltd.; Computing Research Labs, New Mexico State University; David Turner; David Turner and Werner Lemberg; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg, George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Eastman Kodak Company; Ebrahim Byagowi; Elie Roux; Facebook, Inc.; France Telecom; Francesco Zappa Nardelli; Free Software Foundation, Inc.; Google Inc.; Google LLC; Google, Inc.; Graz University of Technology; Grigori Goronzy; Hewlett-Packard Co.; Huawei Technologies Co. Ltd.; IBM Corporation; Igalia S.L.; Institute; Instituto de Pesquisas Eldorado; International Business Machines Corporation and others; JP Aumasson; Jean-Philippe Aumasson; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Keith Stribley; Khaled Hosny; Lotus Development Corporation; Marti Maria Saguer; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K.; Matthias Clasen; Microsoft Corporation; Mozilla Foundation; National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; OASIS Open; OpenJDK Oracle and/or its affiliates; OpenJS Foundation and other contributors; Oracle and/or its affiliates; Oran Agra and Mickey Gabel; Ovidiu Predescu (ovidiu@cup.hp.com); Paul R. Holser, Jr; PipeWire authors; Rahul Bhalerao; Red Hat and individual contributors; Red Hat and individual contributors by the @authors; Red Hat, Inc.; Remo Dentato; SAP; Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter; Sun Microsystems; Sun Microsystems, Inc.; THL A29 Limited, a Tencent company; The Apache Software Foundation; The Apache Software Foundation (http://www.apache.org/); The Cryptix Foundation Limited; The FreeType Project; The Khronos Group Inc.; The Open Group; The Royal Institute, Thai Royal Government; Unicode(r), Inc.; Unicode, Inc.; VMware, Inc.; Vitaly Puzrin and Andrei Tuputcyn; Werner Lemberg; Wim Taymans; World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University); Zilong Tan; iClick, Inc., software; jQuery Foundation and other contributors; softSurfer; the Free Software Foundation; the original author or authors",
    "downloadLocation" : "http://security.debian.org/debian-security/pool/updates/main/o/openjdk-17/openjdk-17-jre-headless_17.0.18+8-1~deb12u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/openjdk-17-jre-headless@17.0.18%2B8-1~deb12u1?arch=amd64&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uBhz3hSEWIKgMjKXS--7KMq74Jy3qIV4Ov7cKGMq9eA/openjdk-17-jre-headless_~%2B8-1~deb12u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.java.net/",
    "licenseConcluded" : "(LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND LGPL-2.0-or-later AND LicenseRef-scancode-freetype-patent AND LGPL-2.1-or-later AND Apache-2.0 AND ISC AND GPL-1.0-or-later AND LicenseRef-scancode-khronos AND SMLNJ AND BSD-2-Clause AND BSD-3-Clause AND MIT-Modern-Variant AND W3C-19980720 AND Unicode-TOU AND GPL-2.0-only AND softSurfer AND MIT-open-group AND LicenseRef-scancode-unicode AND MPL-2.0 AND CC0-1.0 AND MIT AND ICU AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/openjdk-17-jre-headless",
    "versionInfo" : "17.0.18+8-1~deb12u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-tzdata-2025b-0PLUSdeb12u2-arch-all-distro-debian-12",
    "copyrightText" : "The Internet Assigned Numbers Authority (IANA)\n\nAuthors: mistake. Australia/Currie",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/t/tzdata/tzdata_2025b-0+deb12u2_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/tzdata@2025b-0%2Bdeb12u2?arch=all&distro=debian-12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3BluJ-zu4DoLdutum6I0rosurG8FvfbVmJB0PDi-DtQ/tzdata_2025b-0%2Bdeb12u2_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/tzdata",
    "versionInfo" : "2025b-0+deb12u2"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-zlib1g-1.2.13.dfsg-1-arch-amd64-distro-debian-12-epoch-1",
    "copyrightText" : "Copyright 1998-2010 Gilles Vollant 2007-2008 Even Rouault 2009-2010 Mathias Svensson\nCopyright 1995-2013 Jean-loup Gailly and Mark Adler\nCopyright 1995-2022 Mark Adler\nCopyright 2000-2017 Mark Brown\nCopyright 1998 by Andreas R. Kleinert\n2007-2008 Even Rouault\n1998-2010 Gilles Vollant\n1995-2013 Jean-loup Gailly and Mark Adler\n2000-2017 Mark Brown\n2009-2010 Mathias Svensson\n1998 by Andreas R. Kleinert",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/z/zlib/zlib1g_1.2.13.dfsg-1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=amd64&distro=debian-12&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iaEbL-Gx7tL8bpp0umG8Tb_QV4Ygci7ppwaaHLeme8o/zlib1g_~.dfsg-1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://zlib.net/",
    "licenseConcluded" : "Zlib",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/zlib1g",
    "versionInfo" : "1.2.13.dfsg-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-org.eclipse.californium-californium-legal-3.7.0",
    "copyrightText" : "Copyright 2011-2019 The Bootstrap Authors\nCopyright 2011-2019 Twitter, Inc.\nCopyright 2018 University of Rostock, Institute of Applied Microelectronics and Computer Engineering\nCopyright (c) 2016\nCopyright (c) 2022 AVSystem and others\nCopyright (c) 2022 Achim Kraus and others\nCopyright (c) 2016 Amazon Web Services\nCopyright (c) 2016, 2017 Amazon Web Services and others\nCopyright (c) 2019 Andrei-Marius Longhin and others\nCopyright (c) 2016-2020 Bosch.IO GmbH and others\nCopyright (c) 2016 Bosch Software Innovations GmbH.\nCopyright (c) 2018, 2019 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2014 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2019 Lari Hotari and others\nCopyright (c) 2018, Ludwig Seitz, RISE\nCopyright (c) 2017 NTNU Gjovik and others\nCopyright (c) 2018 RISE SICS and others\nCopyright (c) 2022 RISE and others\nCopyright (c) 2018, Rikard Hoglund, RISE SICS\nCopyright (c) 2015, 2017 Robert Harder and others\nCopyright (c) 2015 Sierra Wireless\nCopyright (c) 2016 Sierra Wireless and others\nCopyright (c) 2020 Softech and others\nCopyright (c) 2018, Tobias Andersson, RISE\nCopyright (c) 2018 Vikram and others\nCopyright (c) 2019 Wajd Tohme, Ahmad Hussaein, Petr Kocian, Matias Carlander-Reuterfelt, Ismail Hilal, Tuna Gersil, and Zainab Alsaadi and others\nCopyright (c) 2015 Wireless Networks Group, UPC Barcelona\nCopyright (c) 2015, 2017 Wireless Networks Group, UPC Barcelona, i2CAT and others\nCopyright 2015 the original author or authors\n(c) 2017-2020, Bosch.IO GmbH and others\n(c) 2017, Bosch Software Innovations GmbH and others\n(c) 2014, Institute for Pervasive Computing, ETH Zurich\n(c) 2014-2022 Institute for Pervasive Computing, ETH Zurich and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: AVSystem and others; Achim Kraus and others; Amazon Web Services; Amazon Web Services and others; Andrei-Marius Longhin and others; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch Software Innovations GmbH.; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; Lari Hotari and others; Ludwig Seitz, RISE; NTNU Gjovik and others; RISE SICS and others; RISE and others; Rikard Hoglund, RISE SICS; Robert Harder; Robert Harder and others; Sierra Wireless; Sierra Wireless and others; Softech and others; The Bootstrap Authors; Tobias Andersson, RISE; Twitter, Inc.; University of Rostock, Institute of Applied Microelectronics and Computer Engineering; VeriSign, Inc.; Vikram and others; Wajd Tohme, Ahmad Hussaein, Petr Kocian, Matias Carlander-Reuterfelt, Ismail Hilal, Tuna Gersil, and Zainab Alsaadi and others; Wireless Networks Group, UPC Barcelona; Wireless Networks Group, UPC Barcelona, i2CAT and others; rob@iharder.net; the Eclipse Californium CoAP Framework project; the Free Software Foundation; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/californium-legal/3.7.0/californium-legal-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M2d0OHGmEn8pz7x6xb8Hg68fM9EU3XZQkgAAWoxgGb8/~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/org.eclipse.californium/californium-legal@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(CC-BY-4.0 AND BSD-2-Clause AND BSD-3-Clause AND CDDL-1.0 AND LicenseRef-Public-Domain AND EPL-1.0 AND CDDL-1.1 AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/org.eclipse.californium/californium-legal",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32",
    "copyrightText" : "Copyright (c) 1999-2026, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.32/logback-classic-1.5.32.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q9PRMpYiFT8L84aaMa6lJCbsoer7EdxBtlZqWdSvOSI/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.5.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32",
    "copyrightText" : "Copyright (c) 1999-2026, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.32/logback-core-1.5.32.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z7IQFM_OqVJCP-jfbDKSFaAb3MZqRAXKaQvdeOQSHoA/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND LGPL-2.1-or-later AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.5.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.19.4",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.19.4/jackson-annotations-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-vJDXNpDoHgt1RahXk0lTV5MqQjmGeIhHTDxGgl7w10/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.15.2",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. Apache\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.15.2/jackson-core-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4VANI1kypYJ1zmJFfd30dfvX7jyjaUzvbTs801yzBdg/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.19.4",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.19.4/jackson-core-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MFeNUOGVLanIYAa5nixe9Woe1oLtit5AoKVOT-3irQU/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.19.4",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.19.4/jackson-databind-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8-fE0xgTFfxLhbP-4c5oZNWnPjb9YngwUGDv1_l_IFs/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.19.4",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.19.4/jackson-dataformat-yaml-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.19.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ivfc4a4BVmO-MPS5KbNPCJihnjJhCGZFr3uKrwCpxL8/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.19.4",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.19.4/jackson-datatype-jdk8-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ioOjhwYF3ISIxow0NqztKSvrskJ-E7CkZfSSlxoLOW0/jackson-datatype-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.19.4",
    "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.19.4/jackson-datatype-joda-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.19.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dml_R072Ld1DOiPl6pfAF94p7pDSqZG035z_pHCSw9U/jackson-datatype-joda-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-datatype-joda",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.19.4",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.19.4/jackson-datatype-jsr310-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fPqjS5bVDPia_X7inyyNVE0P6k7zhtYQ0J9hYgPIDfU/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.19.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-annotation-support-2.15.2",
    "copyrightText" : "Copyright (c) 2014 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jr/jackson-jr-annotation-support/2.15.2/jackson-jr-annotation-support-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YPhG6ZycX_bltKECiMzWGD0uwtbgYt7mg3-k_5MFLoM/jackson-jr-annotation-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jr/jackson-jr-annotation-support@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jr",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jr/jackson-jr-annotation-support",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-objects-2.15.2",
    "copyrightText" : "Copyright (c) 2014 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jr/jackson-jr-objects/2.15.2/jackson-jr-objects-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jr/jackson-jr-objects@2.15.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OoW9NAG9GUz0RxRKbZvfHVel_Sl_haO8vStRjO_31lo/jackson-jr-objects-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jr",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jr/jackson-jr-objects",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.19.4",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.19.4/jackson-module-parameter-names-2.19.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vALV_fmMXzP8DxY_O7zgLMJHGKZ_tgAJW9Rq6MawEIw/jackson-module-parameter-names-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.19.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names",
    "versionInfo" : "2.19.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFfKHTGsG5wpfJo2-AKZfGBthRsboCCOy9rGo9Vo134/classmate-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/java-classmate",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml/classmate",
    "versionInfo" : "1.7.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.erosb-everit-json-schema-1.14.3",
    "copyrightText" : "Copyright (c) 2011 Everit Kft. (http://www.everit.org)\nCopyright (c) 2002 JSON.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/erosb/everit-json-schema/1.14.3/everit-json-schema-1.14.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yjSQAAxqnd-TRiXP_Lz2duRH5Iuh1uKk2bkDOtygQ1s/everit-json-schema-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.erosb/everit-json-schema@1.14.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/erosb/everit-json-schema",
    "licenseConcluded" : "(Apache-2.0 AND JSON)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.erosb/everit-json-schema",
    "versionInfo" : "1.14.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.peteroupc-numbers-1.8.2",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/peteroupc/numbers/1.8.2/numbers-1.8.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.peteroupc/numbers@1.8.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sWEbX8utTpw3b4de4FDK5yEPqAGF1jqF9ZT0bm9bha0/numbers-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/peteroupc/Numbers-Java",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.peteroupc/numbers",
    "versionInfo" : "1.8.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1",
    "copyrightText" : "Copyright 2013 Stephen Connolly",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T3RxVpunqiGuBA0KfR3vP5GJ-nvyG4QAHLDQwlAWMMk/jcip-annotations-~-1-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://stephenc.github.com/jcip-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.stephenc.jcip/jcip-annotations",
    "versionInfo" : "1.0-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-generator-4.37.0",
    "copyrightText" : "Copyright 2019 VicTools",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/victools/jsonschema-generator/4.37.0/jsonschema-generator-4.37.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.victools/jsonschema-generator@4.37.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ttc1LKzbRFpY90oWqZRP5bIsU16InBiYdqzsCWvAs2Q/jsonschema-generator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/victools/jsonschema-generator",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.victools/jsonschema-generator",
    "versionInfo" : "4.37.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jackson-4.37.0",
    "copyrightText" : "Copyright 2019-2024 VicTools",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/victools/jsonschema-module-jackson/4.37.0/jsonschema-module-jackson-4.37.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.victools/jsonschema-module-jackson@4.37.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A-smTb04z2mpqdn3AvtL3NyxCDUQ34k4YspvLEBk3ps/jsonschema-module-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/victools/jsonschema-generator",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.victools/jsonschema-module-jackson",
    "versionInfo" : "4.37.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jakarta-validation-4.37.0",
    "copyrightText" : "Copyright 2020 VicTools & Sascha Kohlmann",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/victools/jsonschema-module-jakarta-validation/4.37.0/jsonschema-module-jakarta-validation-4.37.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.victools/jsonschema-module-jakarta-validation@4.37.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i8sqQjMWHKFKMfWmiLPXDL5k3v19H89cAVVk5URCn6g/jsonschema-module-jakarta-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.victools/jsonschema-module-jakarta-validation",
    "versionInfo" : "4.37.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.13.1/gson-2.13.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A_YJEqCXCoORGISt1zFe9oOoA9uSxQNVmTl22V2OiKo/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.13.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.13.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.2",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.13.2/gson-2.13.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.13.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CUZ_UWJtsGtkPqq4x6UDwCNbAALoHR23abRp3c_kojQ/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.13.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.41.0",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.41.0/error_prone_annotations-2.41.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/alzkQ-FVPqiotQ2w3vi3ywd1bt-ytOSQsgQbL08u5Xo/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.41.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3",
    "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.4.8-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-tpc-engine-5.3.5",
    "copyrightText" : "Copyright 2021 Hazelcast Inc.\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2008-2023, Hazelcast, Inc.\nCopyright (c) 2002 JSON.org\nCopyright (c) 2009 The Go Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Hazelcast Inc.; Hazelcast, Inc.; JSON.org; The Go Authors; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hazelcast/hazelcast-tpc-engine/5.3.5/hazelcast-tpc-engine-5.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hazelcast/hazelcast-tpc-engine@5.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7846ivOs7Ei-c_SVlkySyFVYwxgPtrODu9MZOqhK8YU/hazelcast-tpc-engine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.hazelcast.com/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hazelcast/hazelcast-tpc-engine",
    "versionInfo" : "5.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-5.3.5",
    "copyrightText" : "Copyright 2021 Hazelcast Inc.\nCopyright 2006-2022 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2018-2020 Raffaello Giulietti\nCopyright 2015 Real Logic Ltd.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2014, Appear Networks\nCopyright (c) 2013 Brett Wooldridge\nCopyright (c) 2022 Daniel Lemire. Apache\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 2013, 2014 EclipseSource\nCopyright (c) 2011 Everit Kft. (http://www.everit.org)\nCopyright (c) 2008 Google Inc.\nCopyright (c) 2017 Harith Elrufaie\nCopyright (c) 2008-2023, Hazelcast, Inc.\nCopyright (c) 2002 JSON.org\nCopyright (c) 2016 Johno Crawford\nCopyright (c) 2009-2017 Lightbend Inc. <http://www.lightbend.com>\nCopyright (c) 2019 Luke Hutchison\nCopyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c) 2018, SnakeYAML\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2009 The Go Authors\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2005-2021, by Ewgenij Proschak and Contributors\nCopyright (c) 2019 @jacobg, Luke Hutchison\nCopyright (c) 2019 @mcollovati\nCopyright 2006-2022 the original author or authors\nPortions Copyright 2014 Real Logic Ltd.\nPortions Copyright (c) 2020, MicroRaft\nPortions Copyright 2014 the original author or authors\n\nAuthors: Andreas Brenk; Appear Networks; Brett Wooldridge; Brett Wooldridge, Luca Burgazzoli; CP Subsystem Persistence; Daniel Lemire. Apache; Doug Lea; Eclipse Foundation, Inc.; EclipseSource; Everit Kft; Ewgenij Proschak and Contributors; Free Software Foundation, Inc.; Google Inc.; Harith Elrufaie; Hazelcast Inc.; Hazelcast, Inc.; Henri Tremblay; Ian Parkinson (Google Inc.); JSON.org; Jason T. Greene; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Johno Crawford; Johno Crawford (johno@sulake.com); Leonardo Mesquita; Lightbend Inc.; Luke Hutchison; Luke Hutchison (luke.hutch@gmail.com); Michael J. Simons; MicroRaft; Peter Veentjer; Piotr Qertoip Wlodarek; R. Kempees; Raffaello Giulietti; Real Logic Ltd.; Sergey Bespalov; SnakeYAML; Tatu Saloranta; Tatu Saloranta (tatu.saloranta@iki.fi); The Go Authors; Tim Buktu; Werner Randelshofer, Switzerland; a community of developers; code Json; https://github.com/franz1981; jacobg, Luke Hutchison; mcollovati; the Free Software Foundation; the Raft; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hazelcast/hazelcast/5.3.5/hazelcast-5.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hazelcast/hazelcast@5.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vNwW6M5yIZsgsVZxOwVum2DRZYcshBaClZjk4SrqqQ0/hazelcast-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.hazelcast.com/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hazelcast/hazelcast",
    "versionInfo" : "5.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.kstruct-gethostname4j-1.0.0",
    "copyrightText" : "Copyright (c) 2017 Matt Sheppard",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/kstruct/gethostname4j/1.0.0/gethostname4j-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.kstruct/gethostname4j@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fGiIe7vL_ZiqslYvOT5p-OOWqtI5LqYpD4WO2es_slg/gethostname4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/mattsheppard/gethostname4j",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.kstruct/gethostname4j",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.6/nimbus-jose-jwt-10.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s5CzC5UPQfCya0w6T9tVplJoiSuLf36E7C7Dc3SSZSs/nimbus-jose-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/nimbus-jose-jwt",
    "versionInfo" : "10.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.istack-istack-commons-runtime-4.1.2",
    "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/istack/istack-commons-runtime/4.1.2/istack-commons-runtime-4.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KBauXKqa_Cgtf7yk2wrU0-a8gB7hce0YlZOHaEKUiAk/istack-commons-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.istack/istack-commons-runtime",
    "versionInfo" : "4.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.upokecenter-cbor-4.5.2",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/upokecenter/cbor/4.5.2/cbor-4.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZjohzH5nttmbPR8LiktX2yBrGl55GCx2Lyyr8egJil4/cbor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.upokecenter/cbor@4.5.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/peteroupc/CBOR-Java",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.upokecenter/cbor",
    "versionInfo" : "4.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-4.0.3",
    "copyrightText" : "Copyright (c) 2013 Brett Wooldridge",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TrmLYcEwhyo6EHTL9iyRmyFF4bz908emywF4eKLV6oI/HikariCP-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/HikariCP@4.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/HikariCP",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/HikariCP",
    "versionInfo" : "4.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.13",
    "copyrightText" : "Copyright 2002-2019 The Apache Software Foundation\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2002 Kevin Atkinson (kevina@gnu.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.13/commons-codec-1.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ApNsXwYoZ1jsEM-hyGyk9kcnOzt2YmwgeGomfvaUpMc/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.21.0/commons-io-2.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AU79RM8_xf3CmPeGvp4-4u-2NlgOAhhLIM159CBDq_M/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6",
    "copyrightText" : "Copyright 2001-2011 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-lang/commons-lang@2.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xcmxx2ur1Z8EXrIzeYGnDv6NHJiK8KdtV-k6BBn2-9w/commons-lang-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-lang/commons-lang",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-dev.failsafe-failsafe-3.3.2",
    "copyrightText" : "Copyright 2011-2021 the original author or authors\n\nAuthors: Ben Manes; Jonathan Halterman",
    "downloadLocation" : "https://repo1.maven.org/maven2/dev/failsafe/failsafe/3.3.2/failsafe-3.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/dev.failsafe/failsafe@3.3.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/n_RnkUykYIWGuPDiQJ_4uMaDJnmyHAeiWYEbvERHJwk/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/dev.failsafe/failsafe",
    "versionInfo" : "3.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.classgraph-classgraph-4.8.158",
    "copyrightText" : "Copyright (c) 2017 Harith Elrufaie\nCopyright (c) 2016 Johno Crawford\nCopyright (c) 2019 Luke Hutchison\nCopyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c) 2019 @jacobg, Luke Hutchison\nCopyright (c) 2019 @mcollovati",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/classgraph/classgraph/4.8.158/classgraph-4.8.158.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0omXx5yW25DoL3J2tZ62Ip57ltmbQ2HaAL2UzHIda34/classgraph-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.classgraph/classgraph@4.8.158",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/classgraph/classgraph",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.classgraph/classgraph",
    "versionInfo" : "4.8.158"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.9",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.15.9/micrometer-commons-1.15.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D1v5MXiJDtSxqLGrAlaMNY3QkDWHXKJ1sdcNcnkIDfs/micrometer-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.15.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-commons",
    "versionInfo" : "1.15.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.9",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.15.9/micrometer-core-1.15.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7CVhD1Bvj6NLibw_APoDSmYBAR-1A7wuxqJiAOuP7k8/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.15.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.15.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.9",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.15.9/micrometer-jakarta9-1.15.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9nhEB5Z54e88WchPFhBG7C79xNH8YLBam6NhT4anQok/micrometer-jakarta9-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.15.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-jakarta9",
    "versionInfo" : "1.15.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.9",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Maksim Petelin; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.15.9/micrometer-observation-1.15.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YU0NOagUrLOQA_QxvHZUfX9fMRoe9rn0yC8WROG7p5M/micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.15.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-observation",
    "versionInfo" : "1.15.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.9",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.15.9/micrometer-registry-prometheus-1.15.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f3ausdTh43cpzoGvLQ9Uu_I0D0pqQIo9Lut5oO7FO-k/micrometer-registry-prometheus-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-registry-prometheus",
    "versionInfo" : "1.15.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.3.10/prometheus-metrics-config-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UHTzQ-XwDKf_cEWqR-cvpcQlcwU-pfvxbBTS_IAhu94/prometheus-metrics-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-config",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.3.10/prometheus-metrics-core-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I8gCRyk7q7mtrGouy3qx9_L_d9J22Q7fniMuGpQdoIA/prometheus-metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-core",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.3.10/prometheus-metrics-exposition-formats-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cBUYYlLazSiCq49QjFQGEv_0IoMLV1IgNZxx6wXDkhs/prometheus-metrics-exposition-formats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.3.10/prometheus-metrics-exposition-textformats-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uEL0F2qPRr2_DzJKJNPnpkMtK_rrhzF-Bo4Ja8Nn5U/prometheus-metrics-exposition-textformats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.3.10/prometheus-metrics-model-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6zzDlJBJZO1fyuySffEYb1Hs4jRARYm1_TBjE8L2pSs/prometheus-metrics-model-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-model",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.3.10/prometheus-metrics-tracer-common-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pmnxX5WNpK2YLcGxlRBkzm_zwzBqXlXjNJiqRVmC9tA/prometheus-metrics-tracer-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-tracer-common",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-jakarta-2.2.30",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-annotations-jakarta/2.2.30/swagger-annotations-jakarta-2.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/02gAl1gBwVmLNQqQFUu8aE2Dx6skGQ4T64ijY28KG0s/swagger-annotations-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-annotations-jakarta",
    "versionInfo" : "2.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-core-jakarta-2.2.30",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-core-jakarta/2.2.30/swagger-core-jakarta-2.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g1Q-6JHdKwVsSYHmjYBr_yKeutaACfgG1Bvejzq2LLE/swagger-core-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-core-jakarta",
    "versionInfo" : "2.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-models-jakarta-2.2.30",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-models-jakarta/2.2.30/swagger-models-jakarta-2.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t06qf7jYbaNmRwUo8vc9ZI2PHq57N2BdVEfaahQ5QqU/swagger-models-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-models-jakarta",
    "versionInfo" : "2.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vavr-vavr-match-0.9.0",
    "copyrightText" : "Copyright 2024 Vavr",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vavr/vavr-match/0.9.0/vavr-match-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2nG1aNVac0aEXkvOWEzzK46NxJ-hTYsNcIRd6zkK5ak/vavr-match-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vavr/vavr-match@0.9.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://vavr.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vavr/vavr-match",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vavr-vavr-0.9.0",
    "copyrightText" : "Copyright 2024 Vavr",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vavr/vavr/0.9.0/vavr-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EO8RlyjYrTsj6JNtpps3_2S9G-H3MBKeNogj1ubbh3o/vavr-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vavr/vavr@0.9.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://vavr.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vavr/vavr",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4",
    "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PRU62PFiEM2QmMRN3dinnHVhUbmo6H2GxaRvzrObX5g/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jakartaee/jaf-api",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "2.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1",
    "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.el-jakarta.el-api-5.0.0",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 2021 Contributors to the Eclipse Foundation\nCopyright (c) 2018, 2022 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997, 2022 Oracle and/or its affiliates and others\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to the Eclipse Foundation; Dongbin Nie; Eclipse Foundation; Free Software Foundation, Inc.; Kin-man Chung; Oracle and/or its affiliates; Oracle and/or its affiliates and others; The Apache Software Foundation; the Free Software Foundation; the Jakarta Expression Language project",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/el/jakarta.el-api/5.0.0/jakarta.el-api-5.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.el/jakarta.el-api@5.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jFV6KkE4si_gnLdwi4hiGID7mhBWpFVNbiB2vLhDKEM/jakarta.el-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.el",
    "licenseConcluded" : "(Apache-2.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.el/jakarta.el-api",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1",
    "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.inject/jakarta.inject-api",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.1.0",
    "copyrightText" : "Copyright (c) 2019,2023 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.1.0/jakarta.validation-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yMfcU2isIfMm-gBNn1hsPBt8st490a8Q6w3mAwOEKGc/jakarta.validation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0",
    "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.4",
    "copyrightText" : "Copyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2023 Oracle and/or its affiliates\nCopyright (c) 2018, 2024 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/4.0.4/jakarta.xml.bind-api-4.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RMlHZ4k01NrW_RTZl58d1v5GOkWhF71mLRmKvLJiIjw/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "4.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.activation-javax.activation-api-1.2.0",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1997-2016 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LjJYMFwpDj38_BmEPSzlrFrVXwz7RiIth_QYOzy8oPo/javax.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.activation/javax.activation-api@1.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.activation/javax.activation-api",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2009-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EsDiBfvenrC3SxvU0AYOhakhWVqJRn8aEg4kQMZwUTw/javax.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcp.org/en/jsr/detail?id=250",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.annotation/javax.annotation-api",
    "versionInfo" : "1.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.cache-cache-api-1.1.1",
    "copyrightText" : "Copyright 2011-2016 Oracle America Incorporated\nCopyright 2011-2016 Terracotta, Inc.\nCopyright (c) 2011-2013 Oracle and/or its affiliates\nCopyright (c) 2011-2013 Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/cache/cache-api/1.1.1/cache-api-1.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PNVkgVYSsIaPyY4vQzitdC-nC7be7k7otm4Qnr_tujc/cache-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.cache/cache-api@1.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsr107/jsr107spec",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.cache/cache-api",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.servlet-javax.servlet-api-4.0.1",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997-2017 Oracle and/or its affiliates\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nPortions Copyright (c) 1999-2002 The Apache Software Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/servlet/javax.servlet-api/4.0.1/javax.servlet-api-4.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wAvIlriWGyB8zK2_ImePF3cM-mIi9mus9JvFSzA1sQQ/javax.servlet-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.servlet/javax.servlet-api@4.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://javaee.github.io/servlet-spec/",
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.servlet/javax.servlet-api",
    "versionInfo" : "4.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2004-2017 Oracle\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017-2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CNpJdhH9y3bc9jEUmHT-DeW5wAhzb0WKAnGhbQ4q1gc/jaxb-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.xml.bind/jaxb-api",
    "versionInfo" : "2.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.10.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.7.0",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2017 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2010 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2020 Torbjorn Svensson\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.7.0/jna-platform-5.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6ZZcNOGyiLyIslfl_Q-Aur4GUc6odtBm3oAzYYmOMRo/jna-platform-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.7.0",
    "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.7.0/jna-5.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mv3bgQtu_U1L1Wwvf7KWgJYZ_0ggg5OdETIUymzBcT8/jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna",
    "versionInfo" : "5.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jodah-expiringmap-0.5.9",
    "copyrightText" : "Copyright 2009-2016 Jonathan Halterman",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jodah/expiringmap/0.5.9/expiringmap-0.5.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jodah/expiringmap@0.5.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H_976r3tF_Frmx8_AjRSKdI9fdFVs1NS67BnecaKeEs/expiringmap-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jhalterman/expiringmap/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jodah/expiringmap",
    "versionInfo" : "0.5.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.sourceforge.argparse4j-argparse4j-0.9.0",
    "copyrightText" : "Copyright (c) 2013 Adam Parkin\nCopyright (c) 2015 Andrew\nCopyright (c) 2011 Tatsuhiro Tsujikawa",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/sourceforge/argparse4j/argparse4j/0.9.0/argparse4j-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.sourceforge.argparse4j/argparse4j@0.9.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gkEDCiZjvCFRX2hh-TtzC2VlCnQcxSnsQYOffJWCO5U/argparse4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://argparse4j.github.io",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.sourceforge.argparse4j/argparse4j",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.1",
    "copyrightText" : "Copyright 2009-2025 The Apache Software Foundation\nCopyright 2006-2015 The Guava Authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Chris Beams; Colin Sampaleanu; Juergen Hoeller; Keith Donald; Rob Harrop; Rod Johnson; Sam Brannen; The Apache Software Foundation; The Guava Authors; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro/1.12.1/avro-1.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro@1.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEhl6MJsKkwa8nBQg-sx8O6YPMHRfI8k8Ou8HQFWA6U/avro-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://avro.apache.org",
    "licenseConcluded" : "(0BSD AND BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro",
    "versionInfo" : "1.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.1",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.1/commons-collections4-4.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PVKzsjI3F9MUuNVYbRFYEpRGAWOYzauqnQuRkfYtvQs/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.28.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GeAZl8zP9Io_wlCT9pgjRpi5nAJ3fDA-1s03Lh0SKSU/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.28.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0",
    "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.17.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-5.5.2",
    "copyrightText" : "Copyright 1999-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.5.2/httpclient5-5.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hM5fWGIwWRMsiuIGPdAnLhyiDj0hwSpHtr477k80qwU/httpclient5-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MPL-2.0 AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents.client5/httpclient5",
    "versionInfo" : "5.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-h2-5.3.6",
    "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/core5/httpcore5-h2/5.3.6/httpcore5-h2-5.3.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/52uUI8XPaFoLaddqiXDnI6W7A__vfgksCiT7FiNSiq4/httpcore5-h2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents.core5/httpcore5-h2",
    "versionInfo" : "5.3.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-5.3.6",
    "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/core5/httpcore5/5.3.6/httpcore5-5.3.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aCZWevGVF8EX5ikORwAMG3CGF5ifAiCPxVAKiC87pAA/httpcore5-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents.core5/httpcore5",
    "versionInfo" : "5.3.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/fluent-hc/4.5.14/fluent-hc-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Beykp52o_7Kq-JfqMiy3kjazjuggNjwoJIvwxGBTcVQ/fluent-hc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/fluent-hc",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.13",
    "copyrightText" : "Copyright 1999-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.13/httpclient-4.5.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WU0s2T_wlLNz-1vei88CzigYsnNzAzbEzyU9X_bfRhE/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpmime-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpmime/4.5.14/httpmime-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iDSBHV8O-4GMGB5Qi3lT-Wx5RyBkgmd1fw-9Bz6QwIY/httpmime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpmime",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.52",
    "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2026 The Apache Software Foundation\nCopyright (c) 1999-2026, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2026, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.52/tomcat-embed-core-10.1.52.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.52",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ngqyoGVkTTzcVaR2OSBTpLVGxV6XGsucs0Q47nB_cNI/tomcat-embed-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core",
    "versionInfo" : "10.1.52"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.52",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.52/tomcat-embed-el-10.1.52.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.52",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oGKVeIC5QdTLci6gG_9rcCEKFZ7XU3-Y80XhcK-jXkU/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "10.1.52"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.52",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.52/tomcat-embed-websocket-10.1.52.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.52",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_GzSzshI0U7bsLwsb04J3Q4_dat9ZQuwlpHEAHJL_Yg/tomcat-embed-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket",
    "versionInfo" : "10.1.52"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat-tomcat-annotations-api-10.1.52",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/tomcat-annotations-api/10.1.52/tomcat-annotations-api-10.1.52.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fcflD3AF27Hd7PPP5CF_7tnW9QJPZ4Mqevy43uflziY/tomcat-annotations-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@10.1.52",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat/tomcat-annotations-api",
    "versionInfo" : "10.1.52"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.8.13",
    "copyrightText" : "Copyright (c) 1998-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2000, 2003 IBM Corporation and others\nCopyright (c) 2001 The Apache Software Foundation\nCopyright (c) 2002 Contributors\nCopyright (c) 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC). 2004 IBM Corporation\nCopyright (c) 2002, 2010 Contributors\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC) and others\nCopyright (c) 2002,2005 Contributors\nCopyright (c) 2002,2010\nCopyright (c) 2002-2006 Contributors\nCopyright (c) 2002-2009 Contributors\nCopyright (c) 2002-2010\nCopyright (c) 2002-2010 Contributors\nCopyright (c) 2003 Contributors\nCopyright (c) 2003 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2003,2010 Contributors\nCopyright (c) 2004 Contributors\nCopyright (c) 2004 IBM\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2004 IBM Corporation and others\nCopyright (c) 2004, 2013 IBM Corporation\nCopyright (c) 2004, 2013 IBM, VMware\nCopyright (c) 2004, 2017 Contributors\nCopyright (c) 2004,2010 Contributors\nCopyright (c) 2005 Contributors\nCopyright (c) 2005 IBM\nCopyright (c) 2005 IBM Corporation\nCopyright (c) 2005 IBM, Contributors\nCopyright (c) 2005, 2017 Contributors\nCopyright (c) 2005-2008 Contributors\nCopyright (c) 2005-2010 Contributors\nCopyright (c) 2005-2012 Contributors\nCopyright (c) 2005-2017 Contributors\nCopyright (c) 2006 Contributors\nCopyright (c) 2006 IBM\nCopyright (c) 2006 IBM Corporation and others\nCopyright (c) 2006-2008 Contributors\nCopyright (c) 2007 Contributors\nCopyright (c) 2008 Contributors\nCopyright (c) 2009 Contributors\nCopyright (c) 2010 Contributors\nCopyright (c) 2010 SpringSource, Contributors\nCopyright (c) 2011 Contributors\nCopyright (c) 2012 Contributors\nCopyright (c) 2012 VMware, Inc\nCopyright (c) 2013 Contributors\nCopyright (c) 2013 VMware\nCopyright (c) 2014 Contributors\n\nAuthors: Abraham Nevado; a ClassWriter; Adrian Colyer; <A HREF http://www.inf.fu-berlin.de/~ehaase'> E. Haase; <A HREF http://www.inf.fu-berlin.de/~ehaase'> Enver Haase; <A HREF http://www.vmeng.com/beard'> Patrick C. Beard; <A HREF markus.dahm@berlin.de'> M. Dahm; Alexander Kriegisch; Alexandre Vasseur; alex@gnilux.com Alexandre Vasseur; Andy Clement; Andy Clement, Abraham Nevado; A. Nevado; colyer Annotation; colyer Creates; colyer Facade; colyer Implementors; colyer Instances; colyer Marker; colyer Matches; Contributors; David Dixon-Peugh; David Knibb; Erik Hilsdale; IBM; IBM, Contributors; IBM Corporation; IBM Corporation and others; IBM, VMware; Jim Hugunin; Konstantin Shagin <konst@cs.technion.ac.il>; Kris De Volder; Lyor Goldstein; Mik Kersten; Palo Alto Research Center, Incorporated; Palo Alto Research Center, Incorporated (PARC); Palo Alto Research Center, Incorporated (PARC) and others; Palo Alto Research Center, Incorporated (PARC). IBM Corporation; Ron Bodkin; SpringSource, Contributors; The Apache Software Foundation; the Apache Software Foundation (http://www.apache.org/); the PatternParser; VMware; VMware, Inc.; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjweaver/1.8.13/aspectjweaver-1.8.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UMwJxf9uS8uGCgJq56XprR9QoZ0DGVXlods0gijl2Fo/aspectjweaver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aspectj/aspectjweaver@1.8.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.aspectj.org",
    "licenseConcluded" : "EPL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aspectj/aspectjweaver",
    "versionInfo" : "1.8.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.83/bcpkix-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.83",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.83/bcprov-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.83",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zE8V1-GtU4SiFszz3rR-PeuXrmkONULdAL_Juj_q9EQ/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.83/bcutil-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.83",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.angus-angus-activation-2.0.3",
    "copyrightText" : "Copyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021, 2023 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/angus/angus-activation/2.0.3/angus-activation-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.angus/angus-activation@2.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8C6vqEnhrViwmsXeJMFLXzdbeOMDoa6FklM3PoClGlE/angus-activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.angus/angus-activation",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-core-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2016 Amazon Web Services\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2016 Bosch Software Innovations GmbH.\nCopyright (c) 2015 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2014 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2019 Lari Hotari and others\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2016 Sierra Wireless and others\nCopyright (c) 2015 Wireless Networks Group, UPC Barcelona\nCopyright (c) 2015, 2017 Wireless Networks Group, UPC Barcelona, i2CAT and others\n(c) 2014-2022 Institute for Pervasive Computing, ETH Zurich and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: Amazon Web Services; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch Software Innovations GmbH.; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; Lari Hotari and others; QOS.ch; Sierra Wireless and others; VeriSign, Inc.; Wireless Networks Group, UPC Barcelona; Wireless Networks Group, UPC Barcelona, i2CAT and others; the Eclipse Californium CoAP Framework project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/californium-core/3.7.0/californium-core-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/californium-core@3.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RVj593DYB3fnhVW6ow26UICaY6OtmutMYeT_POJ3sAE/californium-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/californium-core",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-proxy2-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 2007, Eclipse Foundation, Inc. and its licensors.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2015 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2017 NTNU Gjovik and others\nCopyright (c) 2004-2017 QOS.ch\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/californium-proxy2/3.7.0/californium-proxy2-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AIWr20TPyBBmsYsz8wN-QUp03ZK9L-vzSwonHIFvT9M/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/californium-proxy2@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(EPL-1.0 AND CDDL-1.1 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/californium-proxy2",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-cf-oscore-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2018 Bosch Software Innovations GmbH and others\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2018, Ludwig Seitz, RISE\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2018 RISE SICS and others\nCopyright (c) 2022 RISE and others\nCopyright (c) 2018, Rikard Hoglund, RISE SICS\nCopyright (c) 2018, Tobias Andersson, RISE\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/cf-oscore/3.7.0/cf-oscore-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uKcRGvJo6QzmjEqIe-ftjkMety-WZqYa9U5t8r1CEss/cf-oscore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/cf-oscore@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/cf-oscore",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-element-connector-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2019 Andrei-Marius Longhin and others\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2015 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2015 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2015, 2017 Robert Harder and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: Andrei-Marius Longhin and others; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; QOS.ch; Robert Harder; Robert Harder and others; VeriSign, Inc.; rob@iharder.net; the Eclipse Californium CoAP Framework project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/element-connector/3.7.0/element-connector-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XD3hlY6mgwtP-TvKfr5p0nhtZq7MEecdGDRjSqVOQmA/element-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/element-connector@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/element-connector",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-scandium-3.7.0",
    "copyrightText" : "Copyright 2018 University of Rostock, Institute of Applied Microelectronics and Computer Engineering\nCopyright (c) 2016\nCopyright (c) 2022 AVSystem and others\nCopyright (c) 2022 Achim Kraus and others\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2019 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2015 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2015 Sierra Wireless\nCopyright (c) 2020 Sierra Wireless and others\nCopyright (c) 2020 Softech and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: AVSystem and others; Achim Kraus and others; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; QOS.ch; Sierra Wireless; Sierra Wireless and others; Softech and others; University of Rostock, Institute of Applied Microelectronics and Computer Engineering; VeriSign, Inc.; the Eclipse Californium CoAP Framework project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/scandium/3.7.0/scandium-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oR7gk0NJkxAh2tKaYgtYW6Jz-X-eDosiiky75GO1KeU/scandium-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/scandium@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/scandium",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.25/jetty-util-ajax-12.0.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MlBdgH06sFwFG34mdFmktMfqBaBZVME3axZ1TNJ5fec/jetty-util-ajax-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "12.0.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.25/jetty-util-12.0.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fyRe10si-Sp2CYEl8KFav6V6nFhhnN6Ii1XfzmRPsYw/jetty-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "12.0.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-cf-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2017 Bosch Software Innovations GmbH and others\nCopyright (c) 2013-2016 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-core-cf/2.0.0-M9/leshan-core-cf-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-core-cf@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YKDhWyMtlPzPhFaitcfZlTBG5VcblZ32stPuIjEnYIA/leshan-core-cf-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-core-cf",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-2.0.0-M9",
    "copyrightText" : "Copyright 2017 Open Mobile Alliance\nCopyright 2017 Open Mobile Alliance Ltd.\nCopyright (c) 2015 Bosch Software Innovations GmbH and others\nCopyright (c) Data Geekery GmbH (http://www.datageekery.com)\nCopyright (c) 2021 Orange\nCopyright (c) 2017 RISE SICS AB.\nCopyright (c) 2013-2015 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-core/2.0.0-M9/leshan-core-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-core@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/giL4KR_Oifv-jtDOE7805ftvr4AS9QpAQHMUhMrEcaU/leshan-core-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-core",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-cf-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2013-2015 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-server-cf/2.0.0-M9/leshan-server-cf-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-server-cf@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T_N6FFR-8OigukeofBPdwzDCWC7I3a8Ce8B3PpXO0X0/leshan-server-cf-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-server-cf",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-core-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2017 Bosch Software Innovations GmbH and others\nCopyright (c) 2018 NTELS and others\nCopyright (c) 2017 RISE SICS AB.\nCopyright (c) 2013-2015 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-server-core/2.0.0-M9/leshan-server-core-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-server-core@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sDB0UTX2lsFtrO2zlWVebQwqKBI6HqGMaTvCnnyRTYE/leshan-server-core-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-server-core",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-redis-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2017 Bosch Software Innovations GmbH and others\nCopyright (c) 2013-2016 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-server-redis/2.0.0-M9/leshan-server-redis-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-server-redis@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PWSeayvwpRv1wF-ypzqNCItqza1lrafcAnX0a7PjOVY/leshan-server-redis-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-server-redis",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-107-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-107/3.10.9/ehcache-107-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J3x8vsPMQozlY2-EA4SEdIWSSKqGAYH0r7n-3yFm6Ec/ehcache-107-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-107@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-107",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-api-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-api/3.10.9/ehcache-api-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KzQHNQNuCIrYi6ObDL_FMtmQC0Kp6Iseda9n65kTK04/ehcache-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-api@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-api",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-core-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-core/3.10.9/ehcache-core-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2gEsXxiPGdnH2D5W7EMOM-s_U6ffKCuCsNIQoeuThIg/ehcache-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-core@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-core",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-impl-3.10.9",
    "copyrightText" : "Copyright 2014-2023 Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-impl/3.10.9/ehcache-impl-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RA5Y3oozagHU1h2Xx_ZbNMPfSRpQlCOp3q21p8rK-BA/ehcache-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-impl@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-impl",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-spi-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-xml-spi/3.10.9/ehcache-xml-spi-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-xml-spi@3.10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l8xwenZ0V-CQFuo51zT5rTLDPwR0cM2j0yxLg2TzpnA/ehcache-xml-spi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-xml-spi",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-xml/3.10.9/ehcache-xml-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-xml@3.10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G3GP7ph3CqA8TIu8rIkkMN24ByvWgRuK1s_gqP2O0kQ/ehcache-xml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-xml",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache-ehcache-3.10.9",
    "copyrightText" : "Copyright 2015-2023 Terracotta, Inc., a Software AG company\nCopyright 2020 Terracotta, Inc., a Software AG company\nCopyright (c) 2012-2023 Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates\nCopyright (c) license.git.copyrightExistenceYears Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates\nCopyright license.git.copyrightExistenceYears Terracotta, Inc., a Software AG company\ncopyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/ehcache/3.10.9/ehcache-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache/ehcache@3.10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/28AjqGmRjOdsq9xQa3tABsRJFqBHyC0TaUk5LiKMm68/ehcache-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache/ehcache",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache-sizeof-0.4.3",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/sizeof/0.4.3/sizeof-0.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache/sizeof@0.4.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b_pz32gOqJWC2yTjITOXtfO0MmaLYeuKwxRbKegwXsE/sizeof-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ehcache/sizeof",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache/sizeof",
    "versionInfo" : "0.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.expressly-expressly-5.0.0",
    "copyrightText" : "Copyright (c) 2022 Contributors to Eclipse Foundation\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2018, 2022 Eclipse Foundation\nCopyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2021 Oracle and/or its affiliates and others\nCopyright (c) 2021 Payara Services Ltd.\n\nAuthors: Contributors to Eclipse Foundation; Contributors to the Eclipse Foundation; Eclipse Foundation; Jacob Hookom; Jacob Hookom jacob@hookom.net; Kin-man Chung; Oracle and/or its affiliates; Oracle and/or its affiliates and others; Payara Services Ltd.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/expressly/expressly/5.0.0/expressly-5.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.expressly/expressly@5.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WfF94qiKEcgQxR3suHQgagR2icIT1XSHFIyyxOzBylw/expressly-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.expressly",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.expressly/expressly",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6",
    "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-core-4.0.6",
    "copyrightText" : "Copyright (c) 2025 Contributors to the Eclipse Foundation\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2020, 2023 Oracle and/or its affiliates\n\nAuthors: Bhakti Mehta (bhakti.mehta@sun.com); Contributors to the Eclipse Foundation; David Megginson, david@megginson.com; Iaroslav Savytskyi; Kohsuke Kawaguchi; Kohsuke Kawaguchi (kk@kohsuke.org); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com), Martin Grebac (martin.grebac@oracle.com); Kohsuke Kawaguchi, Sun Microsystems, Inc.; Martin Grebac; Oracle and/or its affiliates; Philippe Marschall; Roman Grigoriadi (roman.grigoriadi@oracle.com); Vivek Pandey",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/jaxb-core/4.0.6/jaxb-core-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DWpjZgRvsdsGszniqw-ldsDg9m2Q2bXSs799I0rSRWA/jaxb-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND MIT AND SAX-PD AND xpp AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/jaxb-core",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-runtime-4.0.6",
    "copyrightText" : "Copyright (c) 2025 Contributors to the Eclipse Foundation\nCopyright (c) 2013, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\n\nAuthors: Bhakti Mehta; Bhakti Mehta (bhakti.mehta@sun.com); Contributors to the Eclipse Foundation; David Megginson; Kohsuke Kawaguchi; Kohsuke Kawaguchi (kk@kohsuke.org); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com); Kohsuke Kawaguchi, Martin Grebac; Martin Grebac; Oracle and/or its affiliates; Paul Sandoz; Paul.Sandoz@Sun.Com; Ryan Shoemaker; Ryan Shoemaker, Martin Grebac; Ryan.Shoemaker@Sun.COM; Vivek Pandey",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/jaxb-runtime/4.0.6/jaxb-runtime-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FovgkyX2PEnJlHxQ6Pj_tkrlbRL0THQ9EY_nF3NNP0o/jaxb-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND MIT AND SAX-PD AND xpp AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/jaxb-runtime",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-txw2-4.0.6",
    "copyrightText" : "Copyright (c) 2005, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/txw2/4.0.6/txw2-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/txw2@4.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XVDkOrsmPzUxnzx9M54ykW8Y2AMxtfcCrbMAB4qx2kI/txw2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND MIT AND SAX-PD AND xpp AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/txw2",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.11/jersey-apache-connector-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SQGAvKCLb_YeIGpdm5DjRAFzHDlA3HXaKH0uoJhOIE/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.11/jersey-client-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFjkdmYyZIHDOWs70Y5lX-e5ktE_v-nP68lBbE6IWc0/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.11/jersey-common-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3lGNO9mwu28Bux_-Nu4u-Z-oHnHcwzF4DrIghQIHeY/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.11/jersey-hk2-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TebQJATQdwGRUPpC7VduvmcqQ2dc1hXux_4MMMU9sA0/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.11/jersey-media-multipart-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l7JeW-thtrqp3-KRhvIyVi8fupF-HoJOx5jPiVp5Bv8/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final",
    "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.3.Final/hibernate-validator-8.0.3.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xGDFrb_wMfreSEhbwws_H9EC2UHSwbM5qieHyeehJ2U/hibernate-validator-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.3.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://hibernate.org/validator",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hibernate.validator/hibernate-validator",
    "versionInfo" : "8.0.3.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0",
    "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TooTallNate/Java-WebSocket",
    "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.java-websocket/Java-WebSocket",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.30.2-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.2.Final",
    "copyrightText" : "Copyright 2023 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.2.Final/jboss-logging-3.6.2.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUNqBJP1Shmy5aWx90UslGx5ePEL8XBXjV_XJbrzcVw/jboss-logging-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.jboss.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jboss.logging/jboss-logging",
    "versionInfo" : "3.6.2.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.json-json-20231013",
    "copyrightText" : "Copyright 2015 the original author or authors\n\nAuthors: JSON.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/json/json/20231013/json-20231013.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.json/json@20231013",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NDFvCDmzxJLiKl6rOTzRVQwIsTGQ4B39xCydCga2lyE/json-20231013-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/douglascrockford/JSON-java",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.json/json",
    "versionInfo" : "20231013"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.22.1",
    "copyrightText" : "Copyright (c) 2009-2025 Jonathan Hedley <https://jsoup.org/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jsoup/jsoup/1.22.1/jsoup-1.22.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jsoup/jsoup@1.22.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Greq1FYbl06EQ-a4G7E3DYfLbyMgYN8RLEv16_dIY2Q/jsoup-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jsoup.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jsoup/jsoup",
    "versionInfo" : "1.22.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0",
    "copyrightText" : "Copyright 2018-2020 The JSpecify",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jspecify.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jspecify/jspecify",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.30",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pqVVM-WoMp58kjcRiogntZJoEux-WQHghjS5Uh8QOTM/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "1.7.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-2.6",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2018, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/snakeyaml/snakeyaml-engine/2.6/snakeyaml-engine-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pF85xvhza3A0vgXufS8vsFmVjBSnHJqX-M1Esgrhq1c/snakeyaml-engine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml-engine",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.snakeyaml/snakeyaml-engine",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-common-2.8.9",
    "copyrightText" : "Copyright 2019-2023 the original author or authors\n\nAuthors: Anton Tkachenko tkachenkoas@gmail.com; Claudio Nave; Gibah Joseph; the original author or authors; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/OAuth2AuthorizationServerMetadata.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/http/converter/OAuth2TokenIntrospectionHttpMessageConverter.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/OidcClientRegistration.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/OidcProviderConfiguration.java; yuta.saito https://github.com/spring-projects/spring-security/blob/main/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/DefaultOAuth2AccessTokenResponseMapConverter.java",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-common/2.8.9/springdoc-openapi-starter-common-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qf71o1tOMGgeBrek0JHlRynN9l4rHAW8UOXb7rFDjjs/springdoc-openapi-starter-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-common@2.8.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-common",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-api-2.8.9",
    "copyrightText" : "Copyright 2019-2023 the original author or authors\n\nAuthors: bnasslahsen, Azige; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-webmvc-api/2.8.9/springdoc-openapi-starter-webmvc-api-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-webmvc-api@2.8.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rtFaValrsmS3nFMH84EOc8N5UMukokS0gLHAWGMJdcA/springdoc-openapi-starter-webmvc-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-webmvc-api",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-ui-2.8.9",
    "copyrightText" : "Copyright 2019-2023 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-webmvc-ui/2.8.9/springdoc-openapi-starter-webmvc-ui-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-webmvc-ui@2.8.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DuEyj7ezJq7KitgvVYcsc6kmwceW7kREr6rN640hYFY/springdoc-openapi-starter-webmvc-ui-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-webmvc-ui",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael Berry; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Wick Dynex; Yanming Zhou; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.5.11/spring-boot-actuator-autoconfigure-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UINvSFNYAHIi4OMM-gh9sMtnoJSK3ADKG37C0HLYaas/spring-boot-actuator-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nabil Fawwaz Elqayyim; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Tommy Karlsson; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Xiong Tang; Young Jae; Yulin Qin; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.5.11/spring-boot-actuator-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aLJdcJJADZnhhPOHaK8fTbTzhJ8CGoIGL7Cg40Gv-C4/spring-boot-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmitry Sulman; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Florian Lemaire; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Pedro Xavier Leite Cavadas; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.5.11/spring-boot-autoconfigure-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HjbJYfKTWcZym1rD2pQes3M1DlajUD6tH_glt9CYYfo/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/3.5.11/spring-boot-starter-actuator-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xCwRcOPRpfa1-Td1ytRDCsV_pkI7M_sifqYXDByw0vU/spring-boot-starter-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-actuator",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-cache-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-cache/3.5.11/spring-boot-starter-cache-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vA3SvwDytrEsBAqVkYkxMS7pjpcyiI-_NFeOok_3xXo/spring-boot-starter-cache-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-cache@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-cache",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/3.5.11/spring-boot-starter-json-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nU1nkdmrQJqhiwUVTG99omK9TWv7KJzBYJFkUs62Hu8/spring-boot-starter-json-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-json",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.5.11/spring-boot-starter-logging-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9IlIBiD6ah4VZM_xBDYoUje03LPneWvfi94soMQbbOY/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/3.5.11/spring-boot-starter-security-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/r2nvQkBB6DaxPhLgM1-AT2xJrcw7DGJGKhwiq2O-Uvo/spring-boot-starter-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-security",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/3.5.11/spring-boot-starter-tomcat-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mNR2CFpaQZ2_Q1YuGmpUAH1-JiZJ-Igk8isryohiNOg/spring-boot-starter-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.5.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-validation/3.5.11/spring-boot-starter-validation-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-validation@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M-iOaGZ8MdlecwtbsuEssGIfkhOnif9ONeoct1DNCNg/spring-boot-starter-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-validation",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/3.5.11/spring-boot-starter-web-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7Mpz6Xkx7bcDYZLcJhBVoIsetMIrsH6UQDYi90T65hg/spring-boot-starter-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-web",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.5.11/spring-boot-starter-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZmWL1-KtdMsTmZU7zfluxC_L5yCKFh4QC0hNSCFVHqs/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.11",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andrey Litvitski; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daeho Kwon; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.5.11/spring-boot-3.5.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.5.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lnyZow87snPe5oA_bR7njJ8OdntLGCElD5AJBYC2i0Y/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "3.5.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.8",
    "copyrightText" : "Copyright 2004-present the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ding Hao; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne <ch4mp@c4-soft.com>; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Pat McCusker; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/6.5.8/spring-security-config-6.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3mDvcNSSbgCdMPgaM5fL86Y72SBGtRYhdmKlFF93Tes/spring-security-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@6.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-config",
    "versionInfo" : "6.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.8",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/6.5.8/spring-security-core-6.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zMhCI_jlRbw3kJSBbslEhjwisDM1xQ7ZPE8feKCUmZQ/spring-security-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@6.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-core",
    "versionInfo" : "6.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.8",
    "copyrightText" : "Copyright (c) 2006 Damien Miller <djm@mindrot.org>\nCopyright 2004-present the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/6.5.8/spring-security-crypto-6.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G3laMnkTvJVymaWq19Pg85dcrWmM7mxyxwh7v8WwrkY/spring-security-crypto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@6.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-crypto",
    "versionInfo" : "6.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.8",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Claudenir Freitas; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Daeho Kwon; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Michal Okosy; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Nikita Konev; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sangyoon Jeong; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Yoobin Yoon; Zeeshan Adnan; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/6.5.8/spring-security-web-6.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x6dYJNUmUbUEAZusVaxldn_bfTBfaeGF6f53dPKU9C4/spring-security-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@6.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-web",
    "versionInfo" : "6.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.16/spring-aop-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SJ4HnX4curcCNimLbUT9UENuy8_V7Qh1j7JL5uNfe3o/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.16/spring-beans-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fCL0Ds6k2X5ELpHTeheYl7tqvu0a6VPXANWnBupj_BM/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2019 the original author or authors\n\nAuthors: Alef Arendsen; Ben Manes; Brian Clozel; Chris Beams; Darren Davison; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Rob Harrop; Sam Brannen; Sebastien Deleuze; Stas Volsky; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context-support/6.2.16/spring-context-support-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zTXtMr2MNNoSD2pNkQ9PzL2Q5dTMQYrwSb8YO7GFCfU/spring-context-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context-support@6.2.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context-support",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.16/spring-context-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uDYS3G0_lzgBVjScboJbGkg4uqwSi3FIKuMPjTKMkf0/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.16/spring-core-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WCHxHJwoXrLt8w1xu0Bg21NmDUfW1xZCFX8nEjzWOWM/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.16/spring-expression-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ig8gfm_KIlCvX_Ryvl9CthBDca0uuVNV7mRV1JU-KzQ/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.16/spring-jcl-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NKV17s_HqPgbFdfR9Q5x-KWVrIjqiDUAyysdXoNRlcs/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.16/spring-web-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0yc0Npcj3kstmdaoIxVayiKaZGr9IB78jthqlHJopS0/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.16",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Taeik Lim; Thomas Risberg; Vedran Pavic; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.16/spring-webmvc-6.2.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Zi36abWUbtJHg6eos8GxO6MklF1ZZ0hfm_uhdE-zQqw/spring-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-webmvc",
    "versionInfo" : "6.2.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-fast-restartable-store-1.6.10",
    "copyrightText" : "Copyright (c) 2012-2023 Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates\nCopyright (c) license.git.copyrightExistenceYears Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/fast-restartable-store/1.6.10/fast-restartable-store-1.6.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/fast-restartable-store@1.6.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WTkEMYKVveoQpY3y4BfS47HUP7p0zaSUe6LfNh5CA84/fast-restartable-store-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/fast-restartable-store",
    "versionInfo" : "1.6.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-offheap-store-2.5.5",
    "copyrightText" : "Copyright 2015-2023 Terracotta, Inc., a Software AG company\nCopyright license.git.copyrightExistenceYears Terracotta, Inc., a Software AG company\ncopyright (c) Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/offheap-store/2.5.5/offheap-store-2.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/offheap-store@2.5.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BPL72_eejnomVhyGSdsQwsQRgohgsF_w9OUkwHUAA9k/offheap-store-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Terracotta-OSS/offheap-store/",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/offheap-store",
    "versionInfo" : "2.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-statistics-2.1.2",
    "copyrightText" : "copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/statistics/2.1.2/statistics-2.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/statistics@2.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kP5J4FAqav6FbnoVylmgl5lDAmw4lXBLaheY0bE3h-I/statistics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Terracotta-OSS/statistics",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/statistics",
    "versionInfo" : "2.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-terracotta-utilities-tools-0.0.17",
    "copyrightText" : "Copyright 2020 Terracotta, Inc., a Software AG company",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/terracotta-utilities-tools/0.0.17/terracotta-utilities-tools-0.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nVoqFQoc4ElVy5dMJkpRMErjeghS9RGttX-4ft4ys6E/terracotta-utilities-tools-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/terracotta-utilities-tools@0.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Terracotta-OSS/terracotta-utilities/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/terracotta-utilities-tools",
    "versionInfo" : "0.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.webjars-swagger-ui-5.21.0",
    "copyrightText" : "Copyright Angel Marin, Paul Johnston 2000 - 2009. Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet\nCopyright Joyent, Inc. and other Node contributors\nCopyright Paul Johnston 2000 - 2002. Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet Distributed\nCopyright 2020-2021 SmartBear Software Inc.\nCopyright (c) 2013-2018 Viacheslav Lotsmanov\n(c) 2014-2025 Denis Pushkarev\n\nAuthors: Angel Marin, Paul Johnston - Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet; Denis Pushkarev; Feross Aboukhadijeh <https://feross.org>; Joyent, Inc. and other Node contributors; Paul Johnston - Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet Distributed; SmartBear Software Inc.; Viacheslav Lotsmanov; Viacheslav Lotsmanov <lotsmanov89@gmail.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/webjars/swagger-ui/5.21.0/swagger-ui-5.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4OA3cyCKfW8CpSV8F3UsTZnLzrYERgqSPHt1n2n2wmE/v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.webjars/swagger-ui@5.21.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.webjars.org",
    "licenseConcluded" : "(BlueOak-1.0.0 AND CC-BY-4.0 AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND Apache-2.0 AND ISC AND CC0-1.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.webjars/swagger-ui",
    "versionInfo" : "5.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.webjars-webjars-locator-lite-1.1.3",
    "copyrightText" : "Copyright (c) 2013 James Ward",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/webjars/webjars-locator-lite/1.1.3/webjars-locator-lite-1.1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.webjars/webjars-locator-lite@1.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1p-P7JhYazV4D5b6TR45farOK0Q1A7VM_vd4W7gguPE/webjars-locator-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://webjars.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.webjars/webjars-locator-lite",
    "versionInfo" : "1.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO38iEj-NCzAqI21sz6Ktwg7iVuQ5IRLxSB8qyAgRHA/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-animations-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/animations/-/animations-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/animations@20.3.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SC3Fa_w6DQFlYkD-ZFnp5Ma0FbW0TuZYV4IchIgVvXA/angular-animations-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/animations",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-cdk-20.2.14",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2025 Google LLC.",
    "downloadLocation" : "https://registry.npmjs.org/@angular/cdk/-/cdk-20.2.14.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/cdk@20.2.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YCuc5lPxxPlTem9Sxne0zwTvjk2JFVGXGruO796NlKA/angular-cdk-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/components#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/cdk",
    "versionInfo" : "20.2.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-common-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/common/-/common-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/common@20.3.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/91cI90evMTzKksIkIrm_g0Dy_pfGcSV2HzJf12ubfDE/angular-common-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/common",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-compiler-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/compiler/-/compiler-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/compiler@20.3.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KxUeo4DyQrQlT-fpXOUq6VptJVS9yJapIWqhqgaJIPw/angular-compiler-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/compiler",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-core-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev\n(c) 2010-2025 Google LLC. https://angular.io",
    "downloadLocation" : "https://registry.npmjs.org/@angular/core/-/core-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/core@20.3.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RQeQduBJxWXfSfn40x53HPA3DHy_U1YRxnTYL9_emu8/angular-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/core",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-forms-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/forms/-/forms-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/forms@20.3.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FaNnR89fsVOZBD9GA5ymif2fMCeg62U3USgRoEgROC8/angular-forms-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/forms",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-platform-browser-dynamic-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/platform-browser-dynamic@20.3.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AkK7XV1FzkV5RNvn1eDUpnuotySVLvhoUJ8crscCmDM/angular-platform-browser-dynamic-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/platform-browser-dynamic",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-platform-browser-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JNrJJ1V0E7YaBZDb5rPrdRWrC0NN6Xtk5cymDAPo_tA/angular-platform-browser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/platform-browser@20.3.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/platform-browser",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-router-20.3.16",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/router/-/router-20.3.16.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HJWeH4qXNFv5Od6lypHbLasichjQFaYDXL_TVASKS4k/angular-router-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/router@20.3.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular/tree/main/packages/router",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/router",
    "versionInfo" : "20.3.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fontsource-public-sans-5.2.7",
    "copyrightText" : "Copyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans)\nCopyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans) OFL-1.1 (https://openfontlicense.org)\nCopyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans) PublicSans-Italic\n\nAuthors: Google Inc , license' OFL-1.1 homepage' https://fontsource.org/fonts/public-sans; The Public Sans Project Authors; The Public Sans Project Authors OFL-1.1; The Public Sans Project Authors PublicSans-Italic",
    "downloadLocation" : "https://registry.npmjs.org/@fontsource/public-sans/-/public-sans-5.2.7.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40fontsource/public-sans@5.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kku5wD27cHouzwxJIZzboVW3Aj_QvCpCZ1dOFgkxtSU/fontsource-public-sans-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://fontsource.org/fonts/public-sans",
    "licenseConcluded" : "OFL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@fontsource/public-sans",
    "versionInfo" : "5.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-formly-core-6.1.3",
    "copyrightText" : "(c) Zeno Rocha\nCopyright (c) 2016 FormlyJS\nCopyright 2021 Formly\nCopyright Google LLC",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-formly/core/-/core-6.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-formly/core@6.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1K0C-6gCcy-8Zgrr632HBIx1JJYEqb9RMdXWbC5s3fg/ngx-formly-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-formly/ngx-formly#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-formly/core",
    "versionInfo" : "6.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-formly-core-6.3.5",
    "copyrightText" : "Copyright 2021 Formly\nCopyright Google LLC\nCopyright (c) 2016 FormlyJS\n(c) Zeno Rocha",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-formly/core/-/core-6.3.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-formly/core@6.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i66S2FdVTiePUSNyQb6peVuc8cyQMSRr3n5pIUd9B7g/ngx-formly-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-formly/ngx-formly#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-formly/core",
    "versionInfo" : "6.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-translate-core-15.0.0",
    "copyrightText" : "Copyright (c) 2023 Olivier Combe",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-translate/core/-/core-15.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-translate/core@15.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ea26UV37U3nkCDv2Wq2bNvw0shkBuLoy3SXUARb44Us/ngx-translate-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-translate/core",
    "versionInfo" : "15.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-translate-core-17.0.0",
    "copyrightText" : "Copyright (c) 2024 Andreas Low / CodeAndWeb GmbH\nCopyright (c) 2018 Olivier Combe",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-translate/core/-/core-17.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-translate/core@17.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ravQZBc9oH3aBtP6-CR-q5VCYoanECa1EiKKtBBv0Fg/ngx-translate-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-translate/core#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-translate/core",
    "versionInfo" : "17.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-cometd-4.0.8",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/@types/cometd/-/cometd-4.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/cometd@4.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jQ8uwmzCbSW9kj5DJ73srKG6XYQ24-6KfNpebDopTz4/types-cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cometd",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/cometd",
    "versionInfo" : "4.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-node-20.19.31",
    "copyrightText" : "Copyright Node.js contributors\nCopyright (c) Microsoft Corporation\n\nAuthors: (https://github.com/NodeJS), Linus Unneback (https://github.com/LinusU); Microsoft Corporation; Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias); Node.js contributors",
    "downloadLocation" : "https://registry.npmjs.org/@types/node/-/node-20.19.31.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/node@20.19.31",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eR889CLEcqgEJkyotJEvxbgMxKnBfje-uhRLDdSKF6w/types-node-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/node",
    "versionInfo" : "20.19.31"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-trusted-types-1.0.6",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-1.0.6.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/trusted-types@1.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1eM6bgi9CNkqbiAAM9S-S9EFFlxaA_0GJIXZa7dSPzY/types-trusted-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/trusted-types",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/trusted-types",
    "versionInfo" : "1.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zip.js-zip.js-2.7.71",
    "copyrightText" : "Copyright (c) 2023, Gildas Lormeau\n(c) Emily Stark, Mike Hamburg, Dan Boneh, Stanford University 2008-2010",
    "downloadLocation" : "https://registry.npmjs.org/@zip.js/zip.js/-/zip.js-2.7.71.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LFfHtwBBUtRxt7xa14YLGv9bfIBRxWtmo78zk-MqWcE/zip.js-zip.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40zip.js/zip.js@2.7.71",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gildas-lormeau.github.io/zip.js",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@zip.js/zip.js",
    "versionInfo" : "2.7.71"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-formats-3.0.1",
    "copyrightText" : "Copyright (c) 2020 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DA7YDThbNVa2NueC5SlUxf2wZxEqzgCFJkYmxcQV9ho/ajv-formats-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv-formats@3.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ajv-validator/ajv-formats#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv-formats",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-8.17.1",
    "copyrightText" : "Copyright (c) 2015-2021 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3Em8VcngcPBvHBIWDbvz-taXGVT6haMnnJGJBy1Xn_E/ajv-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv@8.17.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://ajv.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv",
    "versionInfo" : "8.17.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angularx-qrcode-20.0.0",
    "copyrightText" : "Copyright (c) 2018 - present Andreas Jacob\nCopyright (c) 2018 - present Andreas Jacob (Cordobo.com) (http://cordobo.com/)",
    "downloadLocation" : "https://registry.npmjs.org/angularx-qrcode/-/angularx-qrcode-20.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/angularx-qrcode@20.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Dpw4A8QNH0t4oTt8fkPr6UrS_D-VXecsGPtYyMi3H0g/angularx-qrcode-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/cordobo/angularx-qrcode#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/angularx-qrcode",
    "versionInfo" : "20.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ansi-regex-5.0.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ansi-regex@5.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pryCB1Os7QkXhh2Ow-Gcz_C2n0kWpF-wb_6j31zTc3Q/ansi-regex-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/ansi-regex#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ansi-regex",
    "versionInfo" : "5.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ansi-styles-4.3.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ansi-styles@4.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KsPzv9KezZT9s8gmvV44kKHdUD4ru2WLwdc0edbm8Gg/ansi-styles-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/ansi-styles#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ansi-styles",
    "versionInfo" : "4.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-asynckit-0.4.0",
    "copyrightText" : "Copyright (c) 2016 Alex Indigo",
    "downloadLocation" : "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/asynckit@0.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/S-GhWAct26Jqh6jXnKET6TV6iZkmZfM_Ay35-0Y2XrA/asynckit-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/alexindigo/asynckit#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/asynckit",
    "versionInfo" : "0.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-b2a-1.1.2",
    "copyrightText" : "Copyright (c) 2013 kaelzhang <i@kael.me> , contributors http://kael.me\n\nAuthors: kaelzhang , contributors",
    "downloadLocation" : "https://registry.npmjs.org/b2a/-/b2a-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/b2a@1.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6qECBYfF22Wx8lhj3VtD3EPPeqZJmddgsEnENsdRh7Y/b2a-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/kaelzhang/b2a#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/b2a",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-call-bind-apply-helpers-1.0.2",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/call-bind-apply-helpers@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RfyP9Rvdq1I1dVEo5pEORTIOoG1WWWHu7sDBgPQCq-I/call-bind-apply-helpers-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/call-bind-apply-helpers#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/call-bind-apply-helpers",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-camelcase-5.3.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/camelcase@5.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BJ845nXQzKTSGf7-MlouHsZxnC7ZUo5rUaI5g8GkHEY/camelcase-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/camelcase#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/camelcase",
    "versionInfo" : "5.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-chroma-js-3.1.2",
    "copyrightText" : "Copyright (c) 2002 Cynthia Brewer, Mark Harrower, and The Pennsylvania State University\nCopyright (c) 2011-2024, Gregor Aisch",
    "downloadLocation" : "https://registry.npmjs.org/chroma-js/-/chroma-js-3.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lcN95vTjxsUhZnt_SJUbkplgDoVRCMdwY2rJwbaOMiw/chroma-js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/chroma-js@3.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/gka/chroma.js",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/chroma-js",
    "versionInfo" : "3.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cliui-6.0.0",
    "copyrightText" : "Copyright (c) 2015, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lcKmc1rYLHdt_-RVZTP7ma5e-Vfwk_yOROxv9yJ2oUA/cliui-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cliui@6.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/cliui#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cliui",
    "versionInfo" : "6.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-color-convert-2.0.1",
    "copyrightText" : "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\nCopyright (c) 2011-2016, Heather Arthur and Josh Junon",
    "downloadLocation" : "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/REHQuu8ZG_MV0PNqyGYtSM-JzA9Rx0PCvu791qee-UQ/color-convert-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/color-convert@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Qix-/color-convert#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/color-convert",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-color-name-1.1.4",
    "copyrightText" : "Copyright (c) 2015 Dmitry Ivanov",
    "downloadLocation" : "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vqFwittjJcGQSn5lTjNKvvmt9SvKLdXRlcYtHEvmr_U/color-name-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/color-name@1.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/colorjs/color-name",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/color-name",
    "versionInfo" : "1.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-combined-stream-1.0.8",
    "copyrightText" : "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>",
    "downloadLocation" : "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/combined-stream@1.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sb98i_QpOB4KjfYDZeF2HN-Qz8pViO9Dt9-3xpzJWE8/combined-stream-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/felixge/node-combined-stream",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/combined-stream",
    "versionInfo" : "1.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cometd-nodejs-client-1.0.2",
    "copyrightText" : "Copyright (c) 2020 the original author or authors.\nCopyright (c) 2017 the original author or authors.",
    "downloadLocation" : "https://registry.npmjs.org/cometd-nodejs-client/-/cometd-nodejs-client-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cometd-nodejs-client@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KXPwysygtyexHGYee7YJHoCBTXL2tBOIpyex10XR1zM/cometd-nodejs-client-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cometd.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cometd-nodejs-client",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cometd-4.0.8",
    "copyrightText" : "Copyright (c) 2008-2020 the original author or authors",
    "downloadLocation" : "https://registry.npmjs.org/cometd/-/cometd-4.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cometd@4.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w_UUc94DVWCl3lQXfg6tnRL9AnHdCtrK_N0MQS7ZKq4/cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cometd.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cometd",
    "versionInfo" : "4.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cross-fetch-4.1.0",
    "copyrightText" : "Copyright (c) 2017 Leonardo Quixada\nCopyright (c) 2010 Thomas Fuchs (http://script.aculo.us/thomas)\n(c) Leonardo Quixada (https://twitter.com/lquixada/)",
    "downloadLocation" : "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cross-fetch@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cSgzTunjfUQTmxzZ6v8wYpPDq-Cm1UM4O08V9xm4kTk/cross-fetch-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lquixada/cross-fetch",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cross-fetch",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-decamelize-1.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/decamelize@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7hPNmksJGGUVNjqK4-xmM2ycsJ34XR6gA32AWLlWy0o/decamelize-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/decamelize#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/decamelize",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-delayed-stream-1.0.0",
    "copyrightText" : "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>",
    "downloadLocation" : "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/delayed-stream@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i91dPg39ZMhRC3k2m_QtfJoyGRRDbuXC2-tGtQVOdeQ/delayed-stream-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/felixge/node-delayed-stream",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/delayed-stream",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dijkstrajs-1.0.3",
    "copyrightText" : "Copyright (c) 2008 Wyatt Baldwin <self@wyattbaldwin.com>",
    "downloadLocation" : "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dijkstrajs@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mzVd8sQORR6Yo202Tar_VRn42ox_CoryGR1_WKr5Sqs/dijkstrajs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/tcort/dijkstrajs",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dijkstrajs",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dunder-proto-1.0.1",
    "copyrightText" : "Copyright (c) 2024 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1QNTY6EwzDIuCxOBW7dMBbOBcmGN3TAY5erMzjq4EkY/dunder-proto-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dunder-proto@1.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/dunder-proto#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dunder-proto",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-echarts-6.0.0",
    "copyrightText" : "Copyright 2010-2016 Mike Bostock\nCopyright 2017-2025 The Apache Software Foundation",
    "downloadLocation" : "https://registry.npmjs.org/echarts/-/echarts-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8H81PNeZQckZZbsk3lFdWIA1uQtP1RhIM8xNQ3uTwk8/echarts-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/echarts@6.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://echarts.apache.org",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/echarts",
    "versionInfo" : "6.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-emoji-regex-8.0.0",
    "copyrightText" : "Copyright Mathias Bynens <https://mathiasbynens.be/>",
    "downloadLocation" : "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HrkmCoNKzCLs5PUK4Hy3ZAm6kBWIRObcx4ObE5b7k2s/emoji-regex-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/emoji-regex@8.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mths.be/emoji-regex",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/emoji-regex",
    "versionInfo" : "8.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-entities-6.0.1",
    "copyrightText" : "Copyright (c) Felix Bohm",
    "downloadLocation" : "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VfvBcwhXTiV8-Bm5im38643kDY0h7xjIbzPWqgO3YAE/entities-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/entities@6.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fb55/entities#readme",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/entities",
    "versionInfo" : "6.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-define-property-1.0.1",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-define-property@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PFZe90PGr0WHQK30ILi-715OUn2ecHkxbM33to9pY4g/es-define-property-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-define-property#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-define-property",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-errors-1.3.0",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-errors@1.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cz3mtFM70O79cu1F-3AFge82G5tlmelH5WzY0yijCf0/es-errors-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-errors#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-errors",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-object-atoms-1.1.1",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-object-atoms@1.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vPY6CXI4fmgocHOyolWNUG0qD28fVn04tmZgWkcp7SI/es-object-atoms-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-object-atoms#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-object-atoms",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-set-tostringtag-2.1.0",
    "copyrightText" : "Copyright (c) 2022 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-set-tostringtag@2.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yi0UGdnXxdCeOPweR4bIsry9I9ssBUoHqGIB6Rf0iN8/es-set-tostringtag-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/es-set-tostringtag#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-set-tostringtag",
    "versionInfo" : "2.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fast-deep-equal-3.1.3",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fast-deep-equal@3.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tBpQ2NyVbSqoaOhBAL5hEAWFi6OWxdq98Rb28UGwQgg/fast-deep-equal-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/fast-deep-equal#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fast-deep-equal",
    "versionInfo" : "3.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fast-uri-3.1.0",
    "copyrightText" : "Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae\nCopyright (c) 2021-present The Fastify team",
    "downloadLocation" : "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eKDd6tBp4BxcgigY1Ul2y2Di8bimUnpc-txI_KHxxbQ/fast-uri-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fast-uri@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fastify/fast-uri",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fast-uri",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-file-saver-2.0.5",
    "copyrightText" : "Copyright (c) 2016 Eli Grey",
    "downloadLocation" : "https://registry.npmjs.org/file-saver/-/file-saver-2.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c0wLlWRB4xRJCohCwLA1laadNw86wENbfecPYezKOBA/file-saver-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/file-saver@2.0.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eligrey/FileSaver.js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/file-saver",
    "versionInfo" : "2.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-find-up-4.1.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5KG9yfYrcV5fBCNkQ_9Tb9cbN3dCpVGQA1mAJr9r5fM/find-up-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/find-up@4.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/find-up#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/find-up",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-form-data-4.0.4",
    "copyrightText" : "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and contributors\n\nAuthors: Felix Geisendorfer <felix@debuggable.com> (http://debuggable.com/); Felix Geisendorfer and contributors",
    "downloadLocation" : "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kqmBOHi1aEf5D3u4I55yHG-mIMko9QqJWZYlSsofq_M/form-data-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/form-data@4.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/form-data/form-data#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/form-data",
    "versionInfo" : "4.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-function-bind-1.1.2",
    "copyrightText" : "Copyright (c) 2013 Raynos",
    "downloadLocation" : "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gw_r-x56GGR_iCQSAKX196LkSvzy_mxTaqZp-tIrTI8/function-bind-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/function-bind@1.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Raynos/function-bind",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/function-bind",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-caller-file-2.0.5",
    "copyrightText" : "Copyright 2018 Stefan Penner",
    "downloadLocation" : "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F4Rz8imZq-ZwesGtnC4vb-532H3QelMVZGeFvqBmeTg/get-caller-file-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-caller-file@2.0.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/stefanpenner/get-caller-file#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-caller-file",
    "versionInfo" : "2.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-intrinsic-1.3.0",
    "copyrightText" : "Copyright (c) 2020 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-intrinsic@1.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f7RZbQOg1FvJoXz0OVQlc3-keWPdNdJFMQPGy-w8OIw/get-intrinsic-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/get-intrinsic#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-intrinsic",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-proto-1.0.1",
    "copyrightText" : "Copyright (c) 2025 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-proto@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/U1iOG9iZsOafGaXrer6Nedo2yhHwsulXp1jflPiiT9U/get-proto-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/get-proto#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-proto",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-gopd-1.2.0",
    "copyrightText" : "Copyright (c) 2022 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/gopd@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AUkGxPD6_kY4CcR-QkLG0c_uQEaC6nBqtvRgGuiwzsM/gopd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/gopd#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/gopd",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-has-symbols-1.1.0",
    "copyrightText" : "Copyright (c) 2016 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/has-symbols@1.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bQLPFOOAkaqfEgly0Tyl_5GNyskFH2_vHfldPyJQ0xE/has-symbols-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/has-symbols#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/has-symbols",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-has-tostringtag-1.0.2",
    "copyrightText" : "Copyright (c) 2021 Inspect JS",
    "downloadLocation" : "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/has-tostringtag@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sjgHGehg5OUbkFAWfkfd_ghyl8lAcmMaSqr90KPrnxw/has-tostringtag-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/inspect-js/has-tostringtag#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/has-tostringtag",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-hasown-2.0.2",
    "copyrightText" : "Copyright (c) Jordan Harband and contributors\n\nAuthors: Jordan Harband <ljharb@gmail.com>; Jordan Harband and contributors",
    "downloadLocation" : "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tj3nN_poRtXTZNNGB5TALtb1Bv46F2VZMsSUPaWTRRI/hasown-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/hasown@2.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/inspect-js/hasOwn#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/hasown",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-is-fullwidth-code-point-3.0.0",
    "copyrightText" : "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kXs44MvKbWXpriYUVCC4C-hV7rATfN85z7h3l3P1jGo/is-fullwidth-code-point-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/is-fullwidth-code-point@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/is-fullwidth-code-point",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-isomorphic-cometd-1.1.0",
    "copyrightText" : "No copyright message found; known authors and contributors are: Jan Hommes",
    "downloadLocation" : "https://registry.npmjs.org/isomorphic-cometd/-/isomorphic-cometd-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zR7Y6JAQbCiJHt2YiGuVDj9BiOQ6259H4fX0YJt9DXw/isomorphic-cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/isomorphic-cometd@1.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/isomorphic-cometd",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-json-schema-traverse-1.0.0",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GPH99ihjNbG6hhbEUATG2v76RrAZY1KvppTSpPw5Ou8/json-schema-traverse-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/json-schema-traverse@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/json-schema-traverse#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/json-schema-traverse",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-libphonenumber-js-1.12.10",
    "copyrightText" : "Copyright (c) 2016 @catamphetamine <purecatamphetamine@gmail.com>",
    "downloadLocation" : "https://registry.npmjs.org/libphonenumber-js/-/libphonenumber-js-1.12.10.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t0v0ElsJQ65tY3VW0Gm-kfJxw7qTBdsEKp1KM6vA9O0/libphonenumber-js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/libphonenumber-js@1.12.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/catamphetamine/libphonenumber-js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/libphonenumber-js",
    "versionInfo" : "1.12.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-locate-path-5.0.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mcBu2daI6skkEbs5FYlH5IrhJvFvTjG-B4e640IwOKk/locate-path-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/locate-path@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/locate-path#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/locate-path",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-lodash-es-4.17.23",
    "copyrightText" : "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\nAuthors: Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors; John-David Dalton <john.david.dalton@gmail.com>; OpenJS Foundation and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.23.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/lodash-es@4.17.23",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EPmhK5pEKQJ-kT4q5eSC19AvDYbicWlwbcd8aLDB7g8/lodash-es-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lodash.com/custom-builds",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/lodash-es",
    "versionInfo" : "4.17.23"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-lodash-4.17.23",
    "copyrightText" : "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\nAuthors: Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors; John-David Dalton <john.david.dalton@gmail.com>; OpenJS Foundation and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/lodash@4.17.23",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ec_QXeNaQ9pYHbdsJzpZ9c4DYyXnI0ZAKZwS6p_GISI/lodash-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lodash.com/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/lodash",
    "versionInfo" : "4.17.23"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-marked-16.3.0",
    "copyrightText" : "Copyright (c) 2011-2022, Christopher Jeffrey\nCopyright (c) 2011-2025, Christopher Jeffrey. (MIT Licensed) https://github.com/markedjs/marked\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2004, John Gruber http://daringfireball.net\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)",
    "downloadLocation" : "https://registry.npmjs.org/marked/-/marked-16.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/marked@16.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9dSTAQ9jQlTYu--7TXO4dRdD9E94n6pFTw2S9FdZZHk/marked-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://marked.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/marked",
    "versionInfo" : "16.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-math-intrinsics-1.1.0",
    "copyrightText" : "Copyright (c) 2024 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/math-intrinsics@1.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Y2VBWKony1SYYg4uJVBUGcNaLjI56LXm5-jSvOa80yA/math-intrinsics-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/math-intrinsics#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/math-intrinsics",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-mime-db-1.52.0",
    "copyrightText" : "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015-2022 Douglas Christopher Wilson\nCopyright (c) 2015-2022 Douglas Christopher Wilson <doug@somethingdoug.com>",
    "downloadLocation" : "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fd5ykVcP7_FHdgw-uLZkE-dFCxVOw3HD-VYb0gtpstQ/mime-db-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/mime-db@1.52.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jshttp/mime-db#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/mime-db",
    "versionInfo" : "1.52.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-mime-types-2.1.35",
    "copyrightText" : "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>",
    "downloadLocation" : "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BoNR1JDeSvAHz0ic9MmzYP4Mqj642ofEydT5y0ohymA/mime-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/mime-types@2.1.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jshttp/mime-types#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/mime-types",
    "versionInfo" : "2.1.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-monaco-editor-0.53.0",
    "copyrightText" : "Copyright Drifty Co. http://drifty.com/\nCopyright Joyent, Inc. and other Node contributors\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2015 David Owens II\nCopyright (c) 2007-2017 Einar Lielmanis, Liam Newman, and contributors\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)\nCopyright (c) Microsoft Corporation\nCopyright (c) 2018 The Khronos Group Inc.\nCopyright (c) 1991-2017 Unicode, Inc.\nCopyright (c) 2015 W3C(r) (MIT, ERCIM, Keio, Beihang)\nCopyright (c) 2018 WHATWG\nCopyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang) Disclaimers\nCopyright (c) 2016 - present Microsoft Corporation\n(c) by W3C\n\nAuthors: Christopher Jeffrey; David Owens II; Drifty Co.; Einar Lielmanis, Liam Newman, and contributors; Joyent, Inc. and other Node contributors; MarkedJS; Microsoft Corporation; The Khronos Group Inc.; Unicode, Inc.; W3C; W3C(r) (MIT, ERCIM, Keio, Beihang); W3C(r) (MIT, ERCIM, Keio, Beihang) Disclaimers; WHATWG; the Project",
    "downloadLocation" : "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.53.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jgsERscFZgwZ1w7wjAAqc5OaHfo3_GuC-yjvYvtKVKk/monaco-editor-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/monaco-editor@0.53.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoft/monaco-editor",
    "licenseConcluded" : "(CC-BY-4.0 AND LicenseRef-scancode-unicode AND Apache-2.0 AND MIT AND LicenseRef-scancode-khronos)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/monaco-editor",
    "versionInfo" : "0.53.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-bootstrap-20.0.2",
    "copyrightText" : "Copyright Google Inc.\nCopyright Google LLC\nCopyright (c) 2015-2020 Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) JS Foundation and other contributors\nCopyright (c) 2015-2020 Valor Software\nCopyright (c) Valor Software\ncopyright Angular ng-bootstrap team\ncopyright Federico Zivolo and contributors\ncopyright Valor Software\n\nAuthors: Abdel Said https://github.com/abdelsaid; Adam Brunner https://github.com/adambrunner; Agon Cecelia https://github.com/agoncecelia; Ahmed Elkhatib; Ali Hasan https://github.com/alihasan00; Angular ng-bootstrap team; Caio Ribeiro Pereira https://github.com/caio-ribeiro-pereira; Chris Gedrim https://github.com/a90machado; Chris Gedrim https://github.com/chrisgedrim; Danijel Grmec https://github.com/cobaltsis; Dario Beiro https://github.com/quinobravo; Dmitriy Shekhovtsov; Dmitriy Shekhovtsov <valorkin@gmail.com>; Erhan Gundogan https://github.com/erhangundogan; Espen Hovlandsdal https://github.com/rexxars; Federico Zivolo and contributors; Google Inc.; Google LLC; Irakli Janiashvili https://github.com/irakli-janiashvili; Isaac Cambron https://github.com/icambron; Iskren Ivov Chernev https://github.com/ichernev; JS Foundation and other contributors; Jacob Middag https://github.com/middagj; Javkhlantugs Nyamdorj https://github.com/javkhaanj7; Jeeeyul Lee <jeeeyul@gmail.com>; Jens Alm https://github.com/ulmus; John Fischer https://github.com/jfroffice; Joris Roling https://github.com/jorisroling; Jozef Pazin https://github.com/atiris; Julio Napuri https://github.com/julionc; Korenberg Mark https://github.com/socketpair; Kunal Marwaha https://github.com/marwahaha; Kyungwook, Park https://github.com/kyungw00k; LI Long https://github.com/baryon; Levan Tskipuri https://github.com/tskipa; Lorenzo https://github.com/aliem; Matiss Janis Aboltins https://github.com/matissjanis; Matt Grande https://github.com/mattgrande; Mattia Larentis https://github.com/nostalgiaz; Mayank Singhal https://github.com/mayanksinghal; Menelion Elensule https://github.com/Oire; Meysam Bahadori https://github.com/MeysamBahadori; Mikolaj Dadela https://github.com/mik01aj; Moshe Simantov https://github.com/DevelopmentIL; Nurlan Rakhimzhanov https://github.com/nurlan; Per Hansen https://github.com/perhp; Rafal Hirsz https://github.com/evoL; Romy Kusuma https://github.com/rkusuma; Romy Kusuma https://github.com/rkusuma ! reference https://github.com/moment/moment/blob/develop/locale/id.js; Stanislavas Guk https://github.com/ixoster; Tal Ater https://github.com/TalAter; Tim Wood, Iskren Chernev; Tomer Cohen https://github.com/tomer; Valentin Agachi https://github.com/avaly; Valor Software; Venelin Manchev https://github.com/vmanchev; Viktorminator https://github.com/Viktorminator; Vlad Gurdiga https://github.com/gurdiga; Watcharapol Sanitwong https://github.com/tumit; Xavier Arbat https://github.com/XavisaurusRex; Zeno Zeng https://github.com/zenozeng; bustta https://github.com/bustta; forabi https://github.com/forabi; lluchs https://github.com/lluchs; mihan https://github.com/mihan; petrbela https://github.com/petrbela; suupic https://github.com/suupic; zemlanin https://github.com/zemlanin",
    "downloadLocation" : "https://registry.npmjs.org/ngx-bootstrap/-/ngx-bootstrap-20.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_sV50YFC9ewdACjvfrpPqQ06UQ5eE2pHiFSCKrGs1Xs/ngx-bootstrap-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-bootstrap@20.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/valor-software/ngx-bootstrap#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-bootstrap",
    "versionInfo" : "20.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-echarts-20.0.2",
    "copyrightText" : "Copyright (c) 2025 Xie, Ziyu",
    "downloadLocation" : "https://registry.npmjs.org/ngx-echarts/-/ngx-echarts-20.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nhuUMFhF0EjNLmtmkplclA2GIJ443KSg-JMwM7-GGpI/ngx-echarts-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-echarts@20.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://xieziyu.github.io/ngx-echarts",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-echarts",
    "versionInfo" : "20.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-node-fetch-2.7.0",
    "copyrightText" : "Copyright (c) 2016 David Frank",
    "downloadLocation" : "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kzqQGMX5X_0CUqeS2pORNCTeMit5nxqHkwlHDM0Q0vI/node-fetch-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/node-fetch@2.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/bitinn/node-fetch",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/node-fetch",
    "versionInfo" : "2.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-limit-2.3.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wLs3QJGAmPkLvvyEQpgvoLANaa5jEDcIkTHGSrEkkz8/p-limit-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-limit@2.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-limit#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-limit",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-locate-4.1.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-locate@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/syjTyWlfsYCoToyZodbpqdLtosK4O9Cd7qqB3DQCH6w/p-locate-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-locate#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-locate",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-try-2.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-try@2.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lp63hYL0oKqQ8jSAJOlL9E3pD2-_zQC3SpD3Ed3xY1w/p-try-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-try#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-try",
    "versionInfo" : "2.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-parse5-8.0.0",
    "copyrightText" : "Copyright (c) 2013-2019 Ivan Nikulin (ifaaan@gmail.com, https://github.com/inikulin)",
    "downloadLocation" : "https://registry.npmjs.org/parse5/-/parse5-8.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/parse5@8.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d2nCAvfpFTIawAMaiCYV7VKknN-I7buY7J-UvAdPatY/parse5-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://parse5.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/parse5",
    "versionInfo" : "8.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-path-exists-4.0.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/path-exists@4.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C7r66BXJOEPh19AqRa8fw7nhiiAef3HObD6DvSaqjdA/path-exists-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/path-exists#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/path-exists",
    "versionInfo" : "4.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-pngjs-5.0.0",
    "copyrightText" : "(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 2014-2017 Vitaly Puzrin and Andrey Tupitsin\nCopyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c) 2012 Kuba Niegowski\nCopyright (c) 2015 Luke Page & Original Contributors\nCopyright Joyent, Inc. and other Node contributors\n\nAuthors: Feross Aboukhadijeh <feross@feross.org> <http://feross.org>; Feross Aboukhadijeh <https://feross.org>; Jean-loup Gailly and Mark Adler; Joyent, Inc. and other Node contributors; Kuba Niegowski; Luke Page & Original Contributors; Thomas Robinson; Vitaly Puzrin and Andrey Tupitsin",
    "downloadLocation" : "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vEkC7M5nP6XDPyn9IS8TK-U_v12OOzTjqQTVYkwOo34/pngjs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/pngjs@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lukeapage/pngjs",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/pngjs",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-qrcode-1.5.4",
    "copyrightText" : "Copyright (c) 2009 Kazuhiko Arase\nCopyright (c) 2012 Ryan Day\ncopyright Ryan Day 2012",
    "downloadLocation" : "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NpwQp6yRMBvCBd8bZSZnaQfSwMyLpEySe6WM2Ya4vC0/qrcode-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/qrcode@1.5.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/soldair/node-qrcode",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/qrcode",
    "versionInfo" : "1.5.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-directory-2.1.1",
    "copyrightText" : "Copyright (c) 2011 Troy Goode <troygoode@gmail.com>",
    "downloadLocation" : "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DAJ4a-DMEyDNrzJULU3q6ySfg3AI1NlA-pDU9Xu90hE/require-directory-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-directory@2.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/troygoode/node-require-directory/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-directory",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-from-string-2.0.2",
    "copyrightText" : "Copyright (c) Vsevolod Strukchinsky <floatdrop@gmail.com>\n(c) Vsevolod Strukchinsky (http://github.com/floatdrop)",
    "downloadLocation" : "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cQtf5Zgn9qZfx_92S7ti2FKoNI5lybyu4_QVUFh5Iq0/require-from-string-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-from-string@2.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/floatdrop/require-from-string#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-from-string",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-main-filename-2.0.0",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bgDO-b4BOJ6Z0YUw0jAcEYU4QoH7-pddhAfaMoJnlMU/require-main-filename-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-main-filename@2.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/require-main-filename#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-main-filename",
    "versionInfo" : "2.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-rxjs-7.8.2",
    "copyrightText" : "Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors\nCopyright (c) Microsoft Corporation\n\nAuthors: Ben Lesh <ben@benlesh.com>; Google, Inc., Netflix, Inc., Microsoft Corp. and contributors; Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BEsdYpvPKAEf0JgUwcp8y_sPn-3yC3HKDY6POQPP-90/rxjs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/rxjs@7.8.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rxjs.dev",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/rxjs",
    "versionInfo" : "7.8.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-semver-7.7.3",
    "copyrightText" : "Copyright Isaac Z. Schlueter\nCopyright (c) Isaac Z. Schlueter and Contributors\n\nAuthors: GitHub Inc; Isaac Z. Schlueter; Isaac Z. Schlueter and Contributors",
    "downloadLocation" : "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FX8zsVlNUE9FK0leQyzOvIVCf27c-KK0d7u2zjafq2E/semver-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/semver@7.7.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/npm/node-semver#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/semver",
    "versionInfo" : "7.7.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-set-blocking-2.0.0",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/set-blocking@2.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/95osy2eui_wslCftAi-3_B1ROMmuOZdlo14wsmRHV64/set-blocking-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/set-blocking#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/set-blocking",
    "versionInfo" : "2.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-string-width-4.2.3",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/string-width@4.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aOe6nFolINz9X6dNdifzm2b26iL8va3DDIvEb2hqloQ/string-width-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/string-width#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/string-width",
    "versionInfo" : "4.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-strip-ansi-6.0.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/strip-ansi@6.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E_u39o5xvLJiX-8V-_oxZ4a43ud2_HUJX7w-TxQzt4Y/strip-ansi-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/strip-ansi#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/strip-ansi",
    "versionInfo" : "6.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-three-0.173.0",
    "copyrightText" : "Copyright 2014 David Bau\nCopyright 2010-2025 Three.js Authors\nCopyright @ 2004 by MAGENTA Ltd.\nCopyright (c) 2002, Industrial Light & Magic\nCopyright (c) Magenta ltd\nCopyright (c) 2018, Mapbox\nCopyright (c) SIL International, 2003-2008\nCopyright (c) 2003-2008, SIL International (http://www.sil.org/)\nCopyright (c) 2014 - 2017, Syoyo Fujita\nCopyright (c) 2005-2008, The Android Open Source Project\nCopyright (c) 2008 The Android Open Source Project\nCopyright (c) 2016-2022, by Arseny Kapoulkine (arseny.kapoulkine@gmail.com)\nCopyright (c) 2004 by MAGENTA Ltd.\nCopyright (c) 2010-2025 three.js authors\nMikola Lysenko (c) 2012\n(c) 2017 Axel Kittenberger\n(c) 2005 Elsevier Inc.\n(c) Epistemex 2014-2015 www.epistemex.com By Ken Fyrstenberg\n(c) Frederik De Bleser and other contributors\n(c) 2018 bryc (github.com/bryc)\ncopyright (c) 2006, Google Corporation\n\nAuthors: Arseny Kapoulkine; Axel Kittenberger; David Bau; Elsevier Inc.; Epistemex www.epistemex.com By Ken Fyrstenberg; Frederik De Bleser and other contributors; George Michael Brower; Google Corporation; Industrial Light & Magic; MAGENTA Ltd.; Mapbox; Mikola Lysenko; Nell Waliczek; SIL International; Syoyo Fujita; The Android Open Source Project; bryc (github.com/bryc); three.js authors",
    "downloadLocation" : "https://registry.npmjs.org/three/-/three-0.173.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/three@0.173.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G4udhu_DnpHUg119frSq-D4_wT9Ktf6SqA1nFckUlIQ/three-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://threejs.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/three",
    "versionInfo" : "0.173.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tr46-0.0.3",
    "copyrightText" : "Copyright (c) Sebastian Mayr",
    "downloadLocation" : "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tr46@0.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xF4JHg7USKF9wyhePcPCl8rx7-gbaI9ja3AHVvWjWNE/tr46-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Sebmaster/tr46.js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tr46",
    "versionInfo" : "0.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tslib-2.3.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/tslib/-/tslib-2.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tslib@2.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBBVGTAaGwmsT77KIhX32aCs04VvG_f2HvutSidXTE0/tslib-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.typescriptlang.org/",
    "licenseConcluded" : "0BSD",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tslib",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tslib-2.8.1",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tslib@2.8.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XByM4fNNo8NgMDAw84f7GqemGiog0TGZ_DTpJ8ENT2o/tslib-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.typescriptlang.org/",
    "licenseConcluded" : "0BSD",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tslib",
    "versionInfo" : "2.8.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-undici-types-6.21.0",
    "copyrightText" : "Copyright (c) Matteo Collina and Undici contributors\n\nAuthors: Matteo Collina and Undici contributors",
    "downloadLocation" : "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/undici-types@6.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xQx_ww8uQYEtf0oXaIgPZerbciig0h76NvibTNkYugo/undici-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://undici.nodejs.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/undici-types",
    "versionInfo" : "6.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-webidl-conversions-3.0.1",
    "copyrightText" : "Copyright (c) 2014, Domenic Denicola",
    "downloadLocation" : "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/webidl-conversions@3.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/91QuK6uggISIHalBOm_Evv8Kz3fkwfUquWy0SCrEpTs/webidl-conversions-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsdom/webidl-conversions#readme",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/webidl-conversions",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-whatwg-url-5.0.0",
    "copyrightText" : "Copyright (c) 2015-2016 Sebastian Mayr",
    "downloadLocation" : "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0uF9VagijOPXB6Fe7UjmtIam9cacVfeVYzBkuaiLOBY/whatwg-url-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/whatwg-url@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsdom/whatwg-url#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/whatwg-url",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-which-module-2.0.1",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Contributors",
    "downloadLocation" : "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dDMT1nCOXogL3FBC8irfivv8B9XwW4OSZu8CIRpt6Nw/which-module-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/which-module@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/nexdrew/which-module#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/which-module",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-wrap-ansi-6.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HnEGWBdLrV9Df4kmXdde4HqfamvAwS3plkZL5nI0UqY/wrap-ansi-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/wrap-ansi@6.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/wrap-ansi#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/wrap-ansi",
    "versionInfo" : "6.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-y18n-4.0.3",
    "copyrightText" : "Copyright (c) 2015, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/y18n@4.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F0_8sGgf4psegyPRoZbAK7BwETiDyzRSR7iopYpMCxo/y18n-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/y18n",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/y18n",
    "versionInfo" : "4.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-yargs-parser-18.1.3",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/yargs-parser@18.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GOKQTIHNCyE7dWqFM8Jrkrii-QbzItcYTaJL5Qdh68U/yargs-parser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/yargs-parser#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/yargs-parser",
    "versionInfo" : "18.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-yargs-15.4.1",
    "copyrightText" : "Copyright 2014 Contributors (ben@npmjs.com)\nCopyright 2010 James Halliday (mail@substack.net)\nCopyright (c) 2011 Andrei Mackenzie\n\nAuthors: Andrei Mackenzie; Contributors; James Halliday",
    "downloadLocation" : "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/yargs@15.4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WtKoC0kqqpbc62yn9HPnb2159NAh1IvI-nloxIFlQpM/yargs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://yargs.js.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/yargs",
    "versionInfo" : "15.4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zone.js-0.15.1",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.io",
    "downloadLocation" : "https://registry.npmjs.org/zone.js/-/zone.js-0.15.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/zone.js@0.15.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vV1UlclM71sfi7B_NEGT3EE18Zq8BV1WCVlezAe51bY/zone.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/zone.js",
    "versionInfo" : "0.15.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zrender-6.0.0",
    "copyrightText" : "Copyright (c) 2017, Baidu Inc.\nCopyright (c) Microsoft Corporation\n(c) 2010-2013 Thomas Fuchs",
    "downloadLocation" : "https://registry.npmjs.org/zrender/-/zrender-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/zrender@6.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iU7ROiGPAfGvGA0FcUU2-Ezf08Uf-IuO8HOIdfvjd9Q/zrender-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ecomfe/zrender#readme",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/zrender",
    "versionInfo" : "6.0.0"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-5.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-trusted-types-1.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-h2-5.3.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zip.js-zip.js-2.7.71"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-cometd-4.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-node-20.19.31"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.cache-cache-api-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-translate-core-15.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.servlet-javax.servlet-api-4.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-translate-core-17.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jodah-expiringmap-0.5.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.activation-javax.activation-api-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-formly-core-6.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.sourceforge.argparse4j-argparse4j-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-formly-core-6.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-router-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fontsource-public-sans-5.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-5.3.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.52"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-chroma-js-3.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat-tomcat-annotations-api-10.1.52"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.52"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-call-bind-apply-helpers-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.52"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-camelcase-5.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-asynckit-0.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-b2a-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ansi-regex-5.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpmime-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ansi-styles-4.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-8.17.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angularx-qrcode-20.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-formats-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-offheap-store-2.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-statistics-2.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-fast-restartable-store-1.6.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-terracotta-utilities-tools-0.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.webjars-swagger-ui-5.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-forms-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-platform-browser-dynamic-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-compiler-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-core-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-cdk-20.2.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-common-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-animations-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.webjars-webjars-locator-lite-1.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-platform-browser-20.3.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache-sizeof-0.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-has-symbols-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.expressly-expressly-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-has-tostringtag-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-proto-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache-ehcache-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-gopd-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-impl-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-caller-file-2.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-spi-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-intrinsic-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-api-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-form-data-4.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-core-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-function-bind-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-file-saver-2.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-107-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-find-up-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-base-files-12.4PLUSdeb12u13-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-math-intrinsics-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-txw2-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-lodash-4.17.23"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-marked-16.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-core-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-locate-path-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-runtime-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-lodash-es-4.17.23"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-json-schema-traverse-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-libphonenumber-js-1.12.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-is-fullwidth-code-point-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-isomorphic-cometd-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-hasown-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-proxy2-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.angus-angus-activation-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-delayed-stream-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-core-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dijkstrajs-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cross-fetch-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-decamelize-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cometd-nodejs-client-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cometd-4.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-color-name-1.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-combined-stream-1.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cliui-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.8.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-color-convert-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-core-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fast-uri-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-redis-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-set-tostringtag-2.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-cf-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fast-deep-equal-3.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-errors-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-cf-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-object-atoms-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-scandium-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-entities-6.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-define-property-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-cf-oscore-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-echarts-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-element-connector-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-emoji-regex-8.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dunder-proto-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libgcc-s1-12.2.0-14PLUSdeb12u1-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libglib2.0-0-2.74.6-2PLUSdeb12u8-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libfreetype6-2.12.1PLUSdfsg-5PLUSdeb12u4-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libjpeg62-turbo-2.1.5-2-arch-amd64-distro-debian-12-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-cache-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-liblcms2-2-2.14-2-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libgraphite2-3-1.3.14-1-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libharfbuzz0b-6.0.0PLUSdfsg-3-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libstdcPLUSPLUS6-12.2.0-14PLUSdeb12u1-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libpcre2-8-0-10.42-1-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libpng16-16-1.6.39-2PLUSdeb12u3-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-netbase-6.4-arch-all-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-openjdk-17-jre-headless-17.0.18PLUS8-1-deb12u1-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libuuid1-2.38.1-5PLUSdeb12u3-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-media-types-10.0.0-arch-all-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-org.eclipse.californium-californium-legal-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-tzdata-2025b-0PLUSdeb12u2-arch-all-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-zlib1g-1.2.13.dfsg-1-arch-amd64-distro-debian-12-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.json-json-20231013"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-try-2.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.22.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-parse5-8.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-limit-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.2.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-locate-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-echarts-20.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-node-fetch-2.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-monaco-editor-0.53.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-annotation-support-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-bootstrap-20.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-mime-db-1.52.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-mime-types-2.1.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-path-exists-4.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-objects-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.19.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-ui-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-string-width-4.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-common-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-semver-7.7.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-generator-4.37.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-api-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-set-blocking-2.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.erosb-everit-json-schema-1.14.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-main-filename-2.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.peteroupc-numbers-1.8.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-rxjs-7.8.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-directory-2.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-from-string-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jackson-4.37.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-pngjs-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jakarta-validation-4.37.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-qrcode-1.5.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libc6-2.36-9PLUSdeb12u13-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-undici-types-6.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libcrypt1-4.4.33-2-arch-amd64-distro-debian-12-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-webidl-conversions-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libexpat1-2.5.0-1PLUSdeb12u2-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tslib-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libfontconfig1-2.14.1-4-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tslib-2.8.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-fontconfig-config-2.14.1-4-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.41.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-three-0.173.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-fonts-dejavu-core-2.37-6-arch-all-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tr46-0.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-gcc-12-base-12.2.0-14PLUSdeb12u1-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libbrotli1-1.0.9-2PLUSb6-arch-amd64-distro-debian-12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-strip-ansi-6.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-tpc-engine-5.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-5.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.kstruct-gethostname4j-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-wrap-ansi-6.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-whatwg-url-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-which-module-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zrender-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-4.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-yargs-15.4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zone.js-0.15.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.istack-istack-commons-runtime-4.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-y18n-4.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.upokecenter-cbor-4.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-yargs-parser-18.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-dev.failsafe-failsafe-3.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.classgraph-classgraph-4.8.158"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-jakarta-2.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vavr-vavr-match-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vavr-vavr-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-core-jakarta-2.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-models-jakarta-2.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.el-jakarta.el-api-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.31",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1"
  } ]
}