{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-10-27T08:34:20Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "lwm2m-agent-v1021.11.46",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-GPL-2.0-with-oracle-classpath-exception",
    "extractedText" : "The GNU General Public License (GPL)\n\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.\n59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nEveryone is permitted to copy and distribute verbatim copies of this license\ndocument, but changing it is not allowed.\n\nPreamble\n\nThe licenses for most software are designed to take away your freedom to share\nand change it.  By contrast, the GNU General Public License is intended to\nguarantee your freedom to share and change free software--to make sure the\nsoftware is free for all its users.  This General Public License applies to\nmost of the Free Software Foundation's software and to any other program whose\nauthors commit to using it.  (Some other Free Software Foundation software is\ncovered by the GNU Library General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not price.  Our\nGeneral Public Licenses are designed to make sure that you have the freedom to\ndistribute copies of free software (and charge for this service if you wish),\nthat you receive source code or can get it if you want it, that you can change\nthe software or use pieces of it in new free programs; and that you know you\ncan do these things.\n\nTo protect your rights, we need to make restrictions that forbid anyone to deny\nyou these rights or to ask you to surrender the rights.  These restrictions\ntranslate to certain responsibilities for you if you distribute copies of the\nsoftware, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether gratis or for\na fee, you must give the recipients all the rights that you have.  You must\nmake sure that they, too, receive or can get the source code.  And you must\nshow them these terms so they know their rights.\n\nWe protect your rights with two steps: (1) copyright the software, and (2)\noffer you this license which gives you legal permission to copy, distribute\nand/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain that\neveryone understands that there is no warranty for this free software.  If the\nsoftware is modified by someone else and passed on, we want its recipients to\nknow that what they have is not the original, so that any problems introduced\nby others will not reflect on the original authors' reputations.\n\nFinally, any free program is threatened constantly by software patents.  We\nwish to avoid the danger that redistributors of a free program will\nindividually obtain patent licenses, in effect making the program proprietary.\nTo prevent this, we have made it clear that any patent must be licensed for\neveryone's free use or not licensed at all.\n\nThe precise terms and conditions for copying, distribution and modification\nfollow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a notice\nplaced by the copyright holder saying it may be distributed under the terms of\nthis General Public License.  The \"Program\", below, refers to any such program\nor work, and a \"work based on the Program\" means either the Program or any\nderivative work under copyright law: that is to say, a work containing the\nProgram or a portion of it, either verbatim or with modifications and/or\ntranslated into another language.  (Hereinafter, translation is included\nwithout limitation in the term \"modification\".) Each licensee is addressed as\n\"you\".\n\nActivities other than copying, distribution and modification are not covered by\nthis License; they are outside its scope.  The act of running the Program is\nnot restricted, and the output from the Program is covered only if its contents\nconstitute a work based on the Program (independent of having been made by\nrunning the Program).  Whether that is true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source code as\nyou receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice and\ndisclaimer of warranty; keep intact all the notices that refer to this License\nand to the absence of any warranty; and give any other recipients of the\nProgram a copy of this License along with the Program.\n\nYou may charge a fee for the physical act of transferring a copy, and you may\nat your option offer warranty protection in exchange for a fee.\n\n2. You may modify your copy or copies of the Program or any portion of it, thus\nforming a work based on the Program, and copy and distribute such modifications\nor work under the terms of Section 1 above, provided that you also meet all of\nthese conditions:\n\n    a) You must cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change.\n\n    b) You must cause any work that you distribute or publish, that in whole or\n    in part contains or is derived from the Program or any part thereof, to be\n    licensed as a whole at no charge to all third parties under the terms of\n    this License.\n\n    c) If the modified program normally reads commands interactively when run,\n    you must cause it, when started running for such interactive use in the\n    most ordinary way, to print or display an announcement including an\n    appropriate copyright notice and a notice that there is no warranty (or\n    else, saying that you provide a warranty) and that users may redistribute\n    the program under these conditions, and telling the user how to view a copy\n    of this License.  (Exception: if the Program itself is interactive but does\n    not normally print such an announcement, your work based on the Program is\n    not required to print an announcement.)\n\nThese requirements apply to the modified work as a whole.  If identifiable\nsections of that work are not derived from the Program, and can be reasonably\nconsidered independent and separate works in themselves, then this License, and\nits terms, do not apply to those sections when you distribute them as separate\nworks.  But when you distribute the same sections as part of a whole which is a\nwork based on the Program, the distribution of the whole must be on the terms\nof this License, whose permissions for other licensees extend to the entire\nwhole, and thus to each and every part regardless of who wrote it.\n\nThus, it is not the intent of this section to claim rights or contest your\nrights to work written entirely by you; rather, the intent is to exercise the\nright to control the distribution of derivative or collective works based on\nthe Program.\n\nIn addition, mere aggregation of another work not based on the Program with the\nProgram (or with a work based on the Program) on a volume of a storage or\ndistribution medium does not bring the other work under the scope of this\nLicense.\n\n3. You may copy and distribute the Program (or a work based on it, under\nSection 2) in object code or executable form under the terms of Sections 1 and\n2 above provided that you also do one of the following:\n\n    a) Accompany it with the complete corresponding machine-readable source\n    code, which must be distributed under the terms of Sections 1 and 2 above\n    on a medium customarily used for software interchange; or,\n\n    b) Accompany it with a written offer, valid for at least three years, to\n    give any third party, for a charge no more than your cost of physically\n    performing source distribution, a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of Sections 1\n    and 2 above on a medium customarily used for software interchange; or,\n\n    c) Accompany it with the information you received as to the offer to\n    distribute corresponding source code.  (This alternative is allowed only\n    for noncommercial distribution and only if you received the program in\n    object code or executable form with such an offer, in accord with\n    Subsection b above.)\n\nThe source code for a work means the preferred form of the work for making\nmodifications to it.  For an executable work, complete source code means all\nthe source code for all modules it contains, plus any associated interface\ndefinition files, plus the scripts used to control compilation and installation\nof the executable.  However, as a special exception, the source code\ndistributed need not include anything that is normally distributed (in either\nsource or binary form) with the major components (compiler, kernel, and so on)\nof the operating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering access to copy\nfrom a designated place, then offering equivalent access to copy the source\ncode from the same place counts as distribution of the source code, even though\nthird parties are not compelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program except as\nexpressly provided under this License.  Any attempt otherwise to copy, modify,\nsublicense or distribute the Program is void, and will automatically terminate\nyour rights under this License.  However, parties who have received copies, or\nrights, from you under this License will not have their licenses terminated so\nlong as such parties remain in full compliance.\n\n5. You are not required to accept this License, since you have not signed it.\nHowever, nothing else grants you permission to modify or distribute the Program\nor its derivative works.  These actions are prohibited by law if you do not\naccept this License.  Therefore, by modifying or distributing the Program (or\nany work based on the Program), you indicate your acceptance of this License to\ndo so, and all its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the Program),\nthe recipient automatically receives a license from the original licensor to\ncopy, distribute or modify the Program subject to these terms and conditions.\nYou may not impose any further restrictions on the recipients' exercise of the\nrights granted herein.  You are not responsible for enforcing compliance by\nthird parties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues), conditions\nare imposed on you (whether by court order, agreement or otherwise) that\ncontradict the conditions of this License, they do not excuse you from the\nconditions of this License.  If you cannot distribute so as to satisfy\nsimultaneously your obligations under this License and any other pertinent\nobligations, then as a consequence you may not distribute the Program at all.\nFor example, if a patent license would not permit royalty-free redistribution\nof the Program by all those who receive copies directly or indirectly through\nyou, then the only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under any\nparticular circumstance, the balance of the section is intended to apply and\nthe section as a whole is intended to apply in other circumstances.\n\nIt is not the purpose of this section to induce you to infringe any patents or\nother property right claims or to contest validity of any such claims; this\nsection has the sole purpose of protecting the integrity of the free software\ndistribution system, which is implemented by public license practices.  Many\npeople have made generous contributions to the wide range of software\ndistributed through that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing to\ndistribute software through any other system and a licensee cannot impose that\nchoice.\n\nThis section is intended to make thoroughly clear what is believed to be a\nconsequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in certain\ncountries either by patents or by copyrighted interfaces, the original\ncopyright holder who places the Program under this License may add an explicit\ngeographical distribution limitation excluding those countries, so that\ndistribution is permitted only in or among countries not thus excluded.  In\nsuch case, this License incorporates the limitation as if written in the body\nof this License.\n\n9. The Free Software Foundation may publish revised and/or new versions of the\nGeneral Public License from time to time.  Such new versions will be similar in\nspirit to the present version, but may differ in detail to address new problems\nor concerns.\n\nEach version is given a distinguishing version number.  If the Program\nspecifies a version number of this License which applies to it and \"any later\nversion\", you have the option of following the terms and conditions either of\nthat version or of any later version published by the Free Software Foundation.\nIf the Program does not specify a version number of this License, you may\nchoose any version ever published by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free programs\nwhose distribution conditions are different, write to the author to ask for\npermission.  For software which is copyrighted by the Free Software Foundation,\nwrite to the Free Software Foundation; we sometimes make exceptions for this.\nOur decision will be guided by the two goals of preserving the free status of\nall derivatives of our free software and of promoting the sharing and reuse of\nsoftware generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR\nTHE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN OTHERWISE\nSTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE\nPROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND\nPERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE,\nYOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL\nANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE\nPROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER\nOR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\nHow to Apply These Terms to Your New Programs\n\nIf you develop a new program, and you want it to be of the greatest possible\nuse to the public, the best way to achieve this is to make it free software\nwhich everyone can redistribute and change under these terms.\n\nTo do so, attach the following notices to the program.  It is safest to attach\nthem to the start of each source file to most effectively convey the exclusion\nof warranty; and each file should have at least the \"copyright\" line and a\npointer to where the full notice is found.\n\n    One line to give the program's name and a brief idea of what it does.\n\n    Copyright (C) <year> <name of author>\n\n    This program is free software; you can redistribute it and/or modify it\n    under the terms of the GNU General Public License as published by the Free\n    Software Foundation; either version 2 of the License, or (at your option)\n    any later version.\n\n    This program is distributed in the hope that it will be useful, but WITHOUT\n    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\n    FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for\n    more details.\n\n    You should have received a copy of the GNU General Public License along\n    with this program; if not, write to the Free Software Foundation, Inc., 59\n    Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nAlso add information on how to contact you by electronic and paper mail.\n\nIf the program is interactive, make it output a short notice like this when it\nstarts in an interactive mode:\n\n    Gnomovision version 69, Copyright (C) year name of author Gnomovision comes\n    with ABSOLUTELY NO WARRANTY; for details type 'show w'.  This is free\n    software, and you are welcome to redistribute it under certain conditions;\n    type 'show c' for details.\n\nThe hypothetical commands 'show w' and 'show c' should show the appropriate\nparts of the General Public License.  Of course, the commands you use may be\ncalled something other than 'show w' and 'show c'; they could even be\nmouse-clicks or menu items--whatever suits your program.\n\nYou should also get your employer (if you work as a programmer) or your school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.  Here\nis a sample; alter the names:\n\n    Yoyodyne, Inc., hereby disclaims all copyright interest in the program\n    'Gnomovision' (which makes passes at compilers) written by James Hacker.\n\n    signature of Ty Coon, 1 April 1989\n\n    Ty Coon, President of Vice\n\nThis General Public License does not permit incorporating your program into\nproprietary programs.  If your program is a subroutine library, you may\nconsider it more useful to permit linking proprietary applications with the\nlibrary.  If this is what you want to do, use the GNU Library General Public\nLicense instead of this License.\n\n\n\"CLASSPATH\" EXCEPTION TO THE GPL\n\nCertain source files distributed by Oracle America and/or its affiliates are\nsubject to the following clarification and special exception to the GPL, but\nonly where Oracle has expressly included in the particular source file's header\nthe words \"Oracle designates this particular file as subject to the \"Classpath\"\nexception as provided by Oracle in the LICENSE file that accompanied this code.\"\n\n    Linking this library statically or dynamically with other modules is making\n    a combined work based on this library.  Thus, the terms and conditions of\n    the GNU General Public License cover the whole combination.\n\n    As a special exception, the copyright holders of this library give you\n    permission to link this library with independent modules to produce an\n    executable, regardless of the license terms of these independent modules,\n    and to copy and distribute the resulting executable under terms of your\n    choice, provided that you also meet, for each linked independent module,\n    the terms and conditions of the license of that module.  An independent\n    module is a module which is not derived from or based on this library.  If\n    you modify this library, you may extend this exception to your version of\n    the library, but you are not obligated to do so.  If you do not wish to do\n    so, delete this exception statement from your version.\n\n\n\n\nADDITIONAL INFORMATION ABOUT LICENSING\n\nCertain files distributed by Oracle America, Inc. and/or its affiliates are\nsubject to the following clarification and special exception to the GPLv2,\nbased on the GNU Project exception for its Classpath libraries, known as the\nGNU Classpath Exception.\n\nNote that Oracle includes multiple, independent programs in this software\npackage.  Some of those programs are provided under licenses deemed\nincompatible with the GPLv2 by the Free Software Foundation and others.\nFor example, the package includes programs licensed under the Apache\nLicense, Version 2.0 and may include FreeType. Such programs are licensed\nto you under their original licenses.\n\nOracle facilitates your further distribution of this package by adding the\nClasspath Exception to the necessary parts of its GPLv2 code, which permits\nyou to use that code in combination with other independent modules not\nlicensed under the GPLv2. However, note that this would not permit you to\ncommingle code under an incompatible license with Oracle's GPLv2 licensed\ncode by, for example, cutting and pasting such code into a file also\ncontaining Oracle's GPLv2 licensed code and then distributing the result.\n\nAdditionally, if you were to remove the Classpath Exception from any of the\nfiles to which it applies and distribute the result, you would likely be\nrequired to license some or all of the other code in that distribution under\nthe GPLv2 as well, and since the GPLv2 is incompatible with the license terms\nof some items included in the distribution by Oracle, removing the Classpath\nException could therefore effectively compromise your ability to further\ndistribute the package.\n\nFailing to distribute notices associated with some files may also create\nunexpected legal consequences.\n\nProceed with caution and we recommend that you obtain the advice of a lawyer\nskilled in open source matters before removing the Classpath Exception or\nmaking modifications to this package which may subsequently be redistributed\nand/or involve the use of third party software.",
    "name" : "GPL 2.0 with oracle classpath exception"
  }, {
    "licenseId" : "LicenseRef-Inner-Net-2.0-GLIBC",
    "extractedText" : "The Inner Net License, Version 2.00\n\nThe author(s) grant permission for redistribution and use in source and\nbinary forms, with or without modification, of the software and documentation\nprovided that the following conditions are met:\n\n0. If you receive a version of the software that is specifically labelled\n   as not being for redistribution (check the version message and/or README),\n   you are not permitted to redistribute that version of the software in any\n   way or form.\n1. All terms of the all other applicable copyrights and licenses must be\n   followed.\n2. Redistributions of source code must retain the authors' copyright\n   notice(s), this list of conditions, and the following disclaimer.\n3. Redistributions in binary form must reproduce the authors' copyright\n   notice(s), this list of conditions, and the following disclaimer in the\n   documentation and/or other materials provided with the distribution.\n4. [The copyright holder has authorized the removal of this clause.]\n5. Neither the name(s) of the author(s) nor the names of its contributors\n   may be used to endorse or promote products derived from this software\n   without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY ITS AUTHORS AND CONTRIBUTORS ``AS IS'' AND ANY\nEXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE FOR ANY\nDIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\nANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n  If these license terms cause you a real problem, contact the author.",
    "name" : "Inner Net 2.0 GLIBC"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-scancode-bsla-no-advert",
    "extractedText" : "Redistribution and use in source and binary forms are permitted\nprovided that the above copyright notice and this paragraph are\nduplicated in all such forms and that any documentation,\nand other materials related to such\ndistribution and use acknowledge that the software was developed\nby the University of California, Berkeley. The name of the\nUniversity may not be used to endorse or promote products derived\nfrom this software without specific prior written permission.\nTHIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.",
    "name" : "LicenseRef-scancode-bsla-no-advert"
  }, {
    "licenseId" : "LicenseRef-scancode-d-zlib",
    "extractedText" : "This software is provided 'as-is', without any express or implied\nwarranty. In no event will the authors be held liable for any damages\narising from the use of this software.\n\nPermission is granted to anyone to use this software for any purpose,\nincluding commercial applications, and to alter it and redistribute it\nfreely, in both source and binary form, subject to the following\nrestrictions:\n\no  The origin of this software must not be misrepresented; you must not\n   claim that you wrote the original software. If you use this software\n   in a product, an acknowledgment in the product documentation would be\n   appreciated but is not required.\no  Altered source versions must be plainly marked as such, and must not\n   be misrepresented as being the original software.\no  This notice may not be removed or altered from any source\n   distribution.",
    "name" : "LicenseRef-scancode-d-zlib"
  }, {
    "licenseId" : "LicenseRef-scancode-gnu-emacs-gpl-1988",
    "extractedText" : "GNU EMACS GENERAL PUBLIC LICENSE\n\t\t    (Clarified 11 Feb 1988)\n\n Copyright (C) 1985, 1987, 1988 Richard M. Stallman\n Everyone is permitted to copy and distribute verbatim copies\n of this license, but changing it is not allowed.  You can also\n use this wording to make the terms for other programs.\n\n  The license agreements of most software companies keep you at the\nmercy of those companies.  By contrast, our general public license is\nintended to give everyone the right to share GNU Emacs.  To make\nsure that you get the rights we want you to have, we need to make\nrestrictions that forbid anyone to deny you these rights or to ask you\nto surrender the rights.  Hence this license agreement.\n\n  Specifically, we want to make sure that you have the right to give\naway copies of Emacs, that you receive source code or else can get it\nif you want it, that you can change Emacs or use pieces of it in new\nfree programs, and that you know you can do these things.\n\n  To make sure that everyone has such rights, we have to forbid you to\ndeprive anyone else of these rights.  For example, if you distribute\ncopies of Emacs, you must give the recipients all the rights that you\nhave.  You must make sure that they, too, receive or can get the\nsource code.  And you must tell them their rights.\n\n  Also, for our own protection, we must make certain that everyone\nfinds out that there is no warranty for GNU Emacs.  If Emacs is\nmodified by someone else and passed on, we want its recipients to know\nthat what they have is not what we distributed, so that any problems\nintroduced by others will not reflect on our reputation.\n\n  Therefore we (Richard Stallman and the Free Software Fundation,\nInc.) make the following terms which say what you must do to be\nallowed to distribute or change GNU Emacs.\n\n\t\t\tCOPYING POLICIES\n\n  1. You may copy and distribute verbatim copies of GNU Emacs source code\nas you receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy a valid copyright notice \"Copyright\n(C) 1988 Free Software Foundation, Inc.\" (or with whatever year is\nappropriate); keep intact the notices on all files that refer to this\nLicense Agreement and to the absence of any warranty; and give any\nother recipients of the GNU Emacs program a copy of this License\nAgreement along with the program.  You may charge a distribution fee\nfor the physical act of transferring a copy.\n\n  2. You may modify your copy or copies of GNU Emacs source code or\nany portion of it, and copy and distribute such modifications under\nthe terms of Paragraph 1 above, provided that you also do the following:\n\n    a) cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change; and\n\n    b) cause the whole of any work that you distribute or publish,\n    that in whole or in part contains or is a derivative of GNU Emacs\n    or any part thereof, to be licensed at no charge to all third\n    parties on terms identical to those contained in this License\n    Agreement (except that you may choose to grant more extensive\n    warranty protection to some or all third parties, at your option).\n\n    c) if the modified program serves as a text editor, cause it when\n    started running in the simplest and usual way, to print an\n    announcement including a valid copyright notice \"Copyright (C)\n    1988 Free Software Foundation, Inc.\" (or with the year that is\n    appropriate), saying that there is no warranty (or else, saying\n    that you provide a warranty) and that users may redistribute the\n    program under these conditions, and telling the user how to view a\n    copy of this License Agreement.\n\n    d) You may charge a distribution fee for the physical act of\n    transferring a copy, and you may at your option offer warranty\n    protection in exchange for a fee.\n\nMere aggregation of another unrelated program with this program (or its\nderivative) on a volume of a storage or distribution medium does not bring\nthe other program under the scope of these terms.\n\n  3. You may copy and distribute GNU Emacs (or a portion or derivative of it,\nunder Paragraph 2) in object code or executable form under the terms of\nParagraphs 1 and 2 above provided that you also do one of the following:\n\n    a) accompany it with the complete corresponding machine-readable\n    source code, which must be distributed under the terms of\n    Paragraphs 1 and 2 above; or,\n\n    b) accompany it with a written offer, valid for at least three\n    years, to give any third party free (except for a nominal\n    shipping charge) a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of\n    Paragraphs 1 and 2 above; or,\n\n    c) accompany it with the information you received as to where the\n    corresponding source code may be obtained.  (This alternative is\n    allowed only for noncommercial distribution and only if you\n    received the program in object code or executable form alone.)\n\nFor an executable file, complete source code means all the source code for\nall modules it contains; but, as a special exception, it need not include\nsource code for modules which are standard libraries that accompany the\noperating system on which the executable file runs.\n\n  4. You may not copy, sublicense, distribute or transfer GNU Emacs\nexcept as expressly provided under this License Agreement.  Any attempt\notherwise to copy, sublicense, distribute or transfer GNU Emacs is void and\nyour rights to use GNU Emacs under this License agreement shall be\nautomatically terminated.  However, parties who have received computer\nsoftware programs from you with this License Agreement will not have\ntheir licenses terminated so long as such parties remain in full compliance.\n\n  5. If you wish to incorporate parts of GNU Emacs into other free programs\nwhose distribution conditions are different, write to the Free Software\nFoundation.  We have not yet worked out a simple rule that can be stated\nhere, but we will often permit this.  We will be guided by the two goals of\npreserving the free status of all derivatives of our free software and of\npromoting the sharing and reuse of software.\n\nYour comments and suggestions about our licensing policies and our\nsoftware are welcome!  Please contact the Free Software Foundation, Inc.,\n675 Mass Ave, Cambridge, MA 02139, or call (617) 876-3296.\n\n\t\t\t   NO WARRANTY\n\n  BECAUSE GNU EMACS IS LICENSED FREE OF CHARGE, WE PROVIDE ABSOLUTELY\nNO WARRANTY, TO THE EXTENT PERMITTED BY APPLICABLE STATE LAW.  EXCEPT\nWHEN OTHERWISE STATED IN WRITING, FREE SOFTWARE FOUNDATION, INC,\nRICHARD M. STALLMAN AND/OR OTHER PARTIES PROVIDE GNU EMACS \"AS IS\"\nWITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING,\nBUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY\nAND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE GNU EMACS\nPROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY\nSERVICING, REPAIR OR CORRECTION.\n\n IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW WILL FREE SOFTWARE\nFOUNDATION, INC., RICHARD M. STALLMAN, AND/OR ANY OTHER PARTY WHO MAY\nMODIFY AND REDISTRIBUTE GNU EMACS AS PERMITTED ABOVE, BE LIABLE TO YOU\nFOR DAMAGES, INCLUDING ANY LOST PROFITS, LOST MONIES, OR OTHER\nSPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH PROGRAMS NOT DISTRIBUTED BY\nFREE SOFTWARE FOUNDATION, INC.) THE PROGRAM, EVEN IF YOU HAVE BEEN\nADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY ANY\nOTHER PARTY.",
    "name" : "LicenseRef-scancode-gnu-emacs-gpl-1988"
  }, {
    "licenseId" : "LicenseRef-scancode-khronos",
    "extractedText" : "Permission is hereby granted, free of charge, to any person obtaining a\ncopy of this software and/or associated documentation files (the\n\"Materials\"), to deal in the Materials without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Materials, and to\npermit persons to whom the Materials are furnished to do so, subject\nto the following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Materials.\n\nTHE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\nIN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\nCLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\nTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\nMATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.",
    "name" : "LicenseRef-scancode-khronos"
  }, {
    "licenseId" : "LicenseRef-scancode-newlib-historical",
    "extractedText" : "The authors hereby grant permission to use, copy, modify, distribute,\nand license this software and its documentation for any purpose, provided\nthat existing copyright notices are retained in all copies and that this\nnotice is included verbatim in any distributions. No written agreement,\nlicense, or royalty fee is required for any of the authorized uses.\nModifications to this software may be copyrighted by their authors\nand need not follow the licensing terms described here, provided that\nthe new terms are clearly indicated on the first page of each file where\nthey apply.",
    "name" : "LicenseRef-scancode-newlib-historical"
  }, {
    "licenseId" : "LicenseRef-scancode-nilsson-historical",
    "extractedText" : "Permission to use, copy, modify, and distribute this software is\nfreely granted, provided that the above copyright notice, this notice\nand the following disclaimer are preserved with no changes.\n\nTHIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\nPURPOSE.",
    "name" : "LicenseRef-scancode-nilsson-historical"
  }, {
    "licenseId" : "LicenseRef-scancode-pcre",
    "extractedText" : "PCRE LICENCE \n------------ \n\nPCRE is a library of functions to support regular expressions whose\nsyntax and semantics are as close as possible to those of the Perl 5\nlanguage.\n\nWritten by: Philip Hazel <ph10@cam.ac.uk>\nUniversity of Cambridge Computing Service, Cambridge, England. \nPhone: +44 1223 334714.\nCopyright (c) 1997-2001 University of Cambridge\n\nPermission is granted to anyone to use this software for any purpose on\nany computer system, and to redistribute it freely, subject to the\nfollowing restrictions:\n\n1. This software is distributed in the hope that it will be useful, but\nWITHOUT ANY WARRANTY; without even the implied warranty of\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n\n2. The origin of this software must not be misrepresented, either by\nexplicit claim or by omission. In practice, this means that if you use\nPCRE in software which you distribute to others, commercially or\notherwise, you must put a sentence like this\n\"Regular expression support is provided by the PCRE library package,\nwhich is open source software, written by Philip Hazel, and copyright by\nthe University of Cambridge, England\" \n\nsomewhere reasonably visible in your documentation and in any relevant\nfiles or online help data or similar.\n\nA reference to the ftp site for the source, that is, to\nftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/ \nshould also be given in the documentation.\n\n3. Altered versions must be plainly marked as such, and must not be\nmisrepresented as being the original software.\n\n4. If PCRE is embedded in any software that is released under the GNU\nGeneral Purpose Licence (GPL), or Lesser General Purpose Licence (LGPL),\nthen the terms of that licence shall supersede any condition above with\nwhich it is incompatible.\n\nThe documentation for PCRE, supplied in the \"doc\" directory, is\ndistributed under the same terms as the software itself.\n\nEnd PCRE LICENCE",
    "name" : "LicenseRef-scancode-pcre"
  }, {
    "licenseId" : "LicenseRef-scancode-unicode",
    "extractedText" : "UNICODE, INC. LICENSE AGREEMENT - DATA FILES AND SOFTWARE\n\nUnicode Data Files include all data files under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/ . Unicode Software includes any source\ncode published in the Unicode Standard or under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/.\n\nNOTICE TO USER: Carefully read the following legal agreement. BY\nDOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING UNICODE INC.'S DATA\nFILES (\"DATA FILES\"), AND/OR SOFTWARE (\"SOFTWARE\"), YOU UNEQUIVOCALLY\nACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE TERMS AND CONDITIONS OF THIS\nAGREEMENT. IF YOU DO NOT AGREE, DO NOT DOWNLOAD, INSTALL, COPY, DISTRIBUTE\nOR USE THE DATA FILES OR SOFTWARE.\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright ©  Unicode, Inc. All rights reserved. Distributed under\nthe Terms of Use in http://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of the Unicode data files and any associated documentation (the\n\"Data Files\") or Unicode software and any associated documentation (the\n\"Software\") to deal in the Data Files or Software without restriction,\nincluding without limitation the rights to use, copy, modify, merge,\npublish, distribute, and/or sell copies of the Data Files or Software,\nand to permit persons to whom the Data Files or Software are furnished\nto do so, provided that\n\n(a) the above copyright notice(s) and this permission notice appear with\nall copies of the Data Files or Software,\n\n(b) both the above copyright notice(s) and this permission notice appear\nin associated documentation, and\n\n(c) there is clear notice in each modified Data File or in the Software\nas well as in the documentation associated with the Data File(s) or\nSoftware that the data or software has been modified.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR HOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR\nANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder shall\nnot be used in advertising or otherwise to promote the sale, use or\nother dealings in these Data Files or Software without prior written\nauthorization of the copyright holder.\n\nUnicode and the Unicode logo are trademarks of Unicode, Inc., and may be\nregistered in some jurisdictions. All other trademarks and registered\ntrademarks mentioned herein are the property of their respective owners.",
    "name" : "LicenseRef-scancode-unicode"
  }, {
    "licenseId" : "LicenseRef-scancode-x11-hanson",
    "extractedText" : "Permission to use, copy, modify, and distribute this software for any\npurpose, subject to the provisions described below, without fee is\nhereby granted, provided that this entire notice is included in all\ncopies of any software that is or includes a copy or modification of\nthis software and in all copies of the supporting documentation for\nsuch software.\n\nTHIS SOFTWARE IS BEING PROVIDED \"AS IS\", WITHOUT ANY EXPRESS OR IMPLIED\nWARRANTY. IN PARTICULAR, THE AUTHOR DOES MAKE ANY REPRESENTATION OR\nWARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY OF THIS SOFTWARE OR\nITS FITNESS FOR ANY PARTICULAR PURPOSE.",
    "name" : "LicenseRef-scancode-x11-hanson"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-lwm2m-agent-v1021.11.46-fc01d018-c4e6-44ca-9ec7-cd3ab6b0295e",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/lwm2m-agent@1021.11.46",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "lwm2m-agent",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "1021.11.46"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-base-files-13.8PLUSdeb13u7-arch-amd64-distro-debian-13",
    "copyrightText" : "(C) 1995-2011 Software in the Public Interest\nCopyright 1989-2008 Free Software Foundation, Inc.\nCopyright 2000-2006, The Perl Foundation\nCopyright (c) 1989 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1995-2011 Software in the Public Interest\nCopyright (c) 2000-2006, The Perl Foundation\nCopyright (c) The Regents of the University of California\n1989-2008 Free Software Foundation, Inc.\n2000-2006, The Perl Foundation.\ncopyrighted by the Free Software Foundation\ncopyrighted by the Free Software Foundation, Inc.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/b/base-files/base-files_13.8+deb13u7_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Jv-A-yC7wNgh5jxNoznTezTxPxktPU-KQXMwSAWs9RQ/base-files_~%2Bdeb13u7_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/base-files@13.8%2Bdeb13u7?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-or-later AND GPL-1.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/base-files",
    "versionInfo" : "13.8+deb13u7"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-ca-certificates-20250419PLUSdeb13u1-arch-all-distro-debian-13",
    "copyrightText" : "Copyright 2003 Fumitoshi UKAI <ukai@debian.or.jp> 2009 Philipp Kern <pkern@debian.org> 2011 Michael Shuler <michael@pbandjelly.org>\nCopyright Mozilla Contributors\nCopyright 1994-2000 Netscape Communications Corporation\nCopyright 2013 System Administrator\nCopyright (c) 2003 Fumitoshi UKAI <ukai@debian.or.jp>\nCopyright (c) 2009 Philipp Kern <pkern@debian.org>\n2003 Fumitoshi UKAI <ukai@debian.or.jp>\n2011 Michael Shuler <michael@pbandjelly.org>\nMozilla Contributors\n2009 Philipp Kern <pkern@debian.org>\n2013 System Administrator <root@localhost.localdomain>\nVarious Debian Contributors\n\nAuthors: Fumitoshi UKAI; Fumitoshi UKAI <ukai@debian.or.jp> , for the Debian project; Fumitoshi UKAI Philipp Kern Michael Shuler; Mozilla Contributors; Netscape Communications Corporation; Philipp Kern; System Administrator",
    "downloadLocation" : "http://security.debian.org/debian-security/pool/main/c/ca-certificates/ca-certificates_20250419+deb13u1_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dQSfLv7N8LFlG7-bTkEeJJ0bVaz-JzFd_k5rgC-JVMY/ca-certificates_20250419%2Bdeb13u1_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/ca-certificates@20250419%2Bdeb13u1?arch=all&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MPL-2.0 AND GPL-2.0-or-later AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/ca-certificates",
    "versionInfo" : "20250419+deb13u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-fontconfig-config-2.15.0-2.3-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright (c) 2001,2003 Keith Packard\nCopyright (c) 2005 Sharif FarsiWeb, Inc. <license@farsiweb.info>",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/fontconfig/fontconfig-config_2.15.0-2.3_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1G-lpF04oheKCp0EIC7YsD5ae0Ggy4BnZmQIm3AFHk0/fontconfig-config_~-~_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/fontconfig-config@2.15.0-2.3?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.freedesktop.org/wiki/Software/fontconfig/",
    "licenseConcluded" : "HPND-sell-variant",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/fontconfig-config",
    "versionInfo" : "2.15.0-2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-fonts-dejavu-core-2.37-8-arch-all-distro-debian-13",
    "copyrightText" : "Bitstream Vera is a trademark of Bitstream, Inc.\n(C) 2011-2013 Christian Perrier <bubulle@debian.org>\n(C) 2006-2011 Davide Viti <zinosat@tiscali.it>\n(C) 2013 Fabian Greffrath <fabian+debian@greffrath.com>\n(C) 2005-2006 Peter Cernak <pce@users.sourceforge.net>\nCopyright (c) 2005-2006 Peter Cernak <pce@users.sourceforge.net>\nCopyright (c) 2003 by Bitstream, Inc.\nCopyright (c) 2003 by Bitstream, Inc. All Rights Reserved.\nCopyright (c) 2006 by Tavmjong Bah\nDejaVu changes are in public domain.\n(c) 2004-2016 DejaVu fonts team\n(c) 2006-2008 Nicolas Mailhot at laposte.net\n(c) Tavmjung Bah",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/fonts-dejavu/fonts-dejavu-core_2.37-8_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ho2ZwIuJnH9Kkuk3PjOC1t9--Ux83pqRGR102rai4SI/fonts-dejavu-core_~-8_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/fonts-dejavu-core@2.37-8?arch=all&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://dejavu-fonts.github.io/",
    "licenseConcluded" : "(Bitstream-Vera AND GPL-2.0-or-later AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/fonts-dejavu-core",
    "versionInfo" : "2.37-8"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-gcc-14-base-14.2.0-19-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright 1989, 1990 Advanced Micro Devices, Inc.\nCopyright 1992, 1993, 1994 Henry Spencer\nCopyright ISO/IEC (International Organization for Standardization and International Electrotechnical Commission) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010\nCopyright 2001 Red Hat, Inc.\nCopyright 2002 SuperH, Inc.\nCopyright 1984, 1991 by Stephen L. Moshier Adapted\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright (c) 2000, 2001 Alexey Zelkin <phantom@FreeBSD.org>\nCopyright (c) 2003, Artem B. Bityuckiy, SoftMine Corporation\nCopyright (c) 1993 C.W. Sandmann\nCopyright (c) 2001 Christopher G. Demetriou\nCopyright (c) 1999 Citrus Project\nCopyright (c) 1991 DJ Delorie\nCopyright (c) 2004-2007 David Friedman\nCopyright (c) 1997-2002 FreeBSD Project\nCopyright (c) 1986-2024 Free Software Foundation, Inc.\nCopyright (c) 1990-1999, 2000, 2001 Free Software Foundation, Inc.\nCopyright (c) 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 1997, 1999, 2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 2000-2024 Free Software Foundation, Inc.\nCopyright (c) 2001-2019 Free Software Foundation, Inc.\nCopyright (c) 2001-2024 Free Software Foundation, Inc.\nCopyright (c) 2002-2024 Free Software Foundation, Inc.\nCopyright (c) 2014-2019 Free Software Foundation, Inc.\nCopyright (c) 2015-2024 Free Software Foundation, Inc.\nCopyright (c) 2001-2019 Free Software Foundation, Inc. Mix\nCopyright (c) 2005-2024 Free Software Foundation, Inc. Mix\nCopyright (c) 2009 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2001 Hans-Peter Nilsson\nCopyright (c) 1993 Intel Corporation\nCopyright (c) 1999, 2000 Konstantin Chuguev\nCopyright (c) 1999 Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 1996-2011 Red Hat, Inc.\nCopyright (c) 1994, 1997, 2001, 2002, 2003, 2004 Red Hat Incorporated\nCopyright (c) 1987, 1988, 2000 Regents of the University of California\nCopyright (c) 1988, 1990, 1993 Regents of the University of California\nCopyright (c) 1984,2000 S.L. Moshier\nCopyright (c) 1999, 2000, 2001, 2002 Stephane Carrez (stcarrez@nerim.fr)\nCopyright (c) 2001 Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright (c) 2018-2023, The D Language Foundation\nCopyright (c) 2009-2023 The Go Authors\nCopyright (c) 1981, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California\nCopyright (c) 1982, 1986, 1989, 1991, 1993, 1994 The Regents of the University of California\nCopyright (c) 1990 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1991-2013 Unicode, Inc.\nCopyright (c) 1996 Xavier Leroy (Xavier.Leroy@inria.fr)\nCopyright (c) 1991 by AT&T.\nCopyright (c) 1997 by Andrey A. Chernov, Moscow, Russia\nCopyright (c) 2004-2022 by Digital Mars, www.digitalmars.com\nCopyright (c) 1993 by Sun Microsystems, Inc.\nCopyright (c) 1999-2023 by The D Language Foundation\nCopyright (c) 2009-2019 by the LLVM contributors\nVincenzo Ampolo, Michael Parrot, Iain Buclaw, (c) 2009, 2010\n(c) Copyright 1992 Eric Backus\n(c) Copyright 1986 HEWLETT-PACKARD COMPANY\n(c) 1995-2016 Jean-loup Gailly and Mark Adler\n(c) UNIX System Laboratories, Inc.\n\nAuthors: AT&T; Advanced Micro Devices, Inc.; Alexey Zelkin; Andrey A. Chernov, Moscow, Russia; Artem B. Bityuckiy, SoftMine Corporation; C.W. Sandmann; Christopher G. Demetriou; Citrus Project; DJ Delorie; David Friedman; Digital Mars, www.digitalmars.com; Eric Backus; Francois-Xavier Coudert <fxcoudert@gcc.gnu.org>; Free Software Foundation, Inc.; Free Software Foundation, Inc. Mix; FreeBSD Project; Gaius Mulley <gaius@glam.ac.uk>; HEWLETT-PACKARD COMPANY; Hans-Peter Nilsson; Henry Spencer; ISO/IEC (International Organization for Standardization and International Electrotechnical Commission); Intel Corporation; J.T. Conklin <jtc@netbsd.org>; Jakub Jelinek <jj@ultra.linux.cz>; Jean-loup Gailly and Mark Adler; Konstantin Chuguev; Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden); LLVM Team; Mark Kettenis <kettenis@phys.uva.nl>; Mike Barcroft; Red Hat Incorporated; Red Hat, Inc.; Regents of the University of California; S. L. Moshier; S.L. Moshier; Stephane Carrez; Stephen L. Moshier; Stephen L. Moshier Adapted; Sun Microsystems, Inc.; SuperH, Inc.; The D Language Foundation; The Go Authors; The Regents of the University of California; Tobias Burnus <burnus@net-b.de>; Todd C. Miller; UNIX System Laboratories, Inc.; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Unicode, Inc.; Vincenzo Ampolo, Michael Parrot, Iain Buclaw; Walter Bright; Walter Bright http://www.digitalmars.com; Xavier Leroy; newlib@sources.redhat.com Jeff Johnston <jjohnstn@redhat.com>; the LLVM contributors; the University of California, Berkeley; the University of California, Berkeley and its contributors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/gcc-14/gcc-14-base_14.2.0-19_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1ETjOuQLeiAvOReJBRkqJzN3LzLUVQzZm3YCiMiEpsY/gcc-14-base_~-19_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org/",
    "licenseConcluded" : "(Zlib AND GFDL-1.3-or-later AND AMD-newlib AND GPL-3.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-d-zlib AND LicenseRef-scancode-nilsson-historical AND LGPL-2.0-or-later AND LicenseRef-Public-Domain AND dtoa AND LicenseRef-scancode-bsla-no-advert AND LGPL-2.0-only AND LGPL-3.0-only AND BSD-4-Clause-UC AND LGPL-2.1-or-later AND GPL-1.0-or-later AND HP-1989 AND LicenseRef-scancode-newlib-historical AND GFDL-1.2-only AND LicenseRef-scancode-gnu-emacs-gpl-1988 AND Artistic-1.0-Perl AND BSD-2-Clause AND BSD-3-Clause AND GPL-3.0-or-later WITH GCC-exception-3.1 AND NCSA AND SunPro AND Spencer-94 AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-2.0-only AND BSD-3-Clause-flex AND BSD-4.3TAHOE AND LicenseRef-scancode-x11-hanson AND HPND-Intel AND LicenseRef-scancode-unicode AND MIT AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/gcc-14-base",
    "versionInfo" : "14.2.0-19"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libbrotli1-1.1.0-2PLUSb7-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright 2015 Tomasz Buchert <tomasz@debian.org>\nCopyright 2009, 2010, 2013-2015 by the Brotli Authors\n2015 Tomasz Buchert <tomasz@debian.org>\n2009, 2010, 2013-2015 by the Brotli Authors\n\nAuthors: Tomasz Buchert; the Brotli Authors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/b/brotli/libbrotli1_1.1.0-2+b7_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libbrotli1@1.1.0-2%2Bb7?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TU2O6Bt3FldigRg5gOk1enhtETZbS4xhCTqxL3TtwmM/libbrotli1_~-2%2Bb7_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/brotli",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libbrotli1",
    "versionInfo" : "1.1.0-2+b7"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libbz2-1.0-1.0.8-6-arch-amd64-distro-debian-13",
    "copyrightText" : "2004-2011 Anibal Monsalve Salazar <anibal@debian.org>\n1997-1999 Anthony Fok <foka@debian.org>\n2014 Canonical Ltd.\nCopyright 1996-2010 Julian R Seward <jseward@bzip.org>\nCopyright 2018 Nicolas Boulenguez <nicolas.boulenguez@free.fr> 2012-2015 Santiago Ruano Rincon <santiago@debian.org> 2014 Canonical Ltd. 2004-2011 Anibal Monsalve Salazar <anibal@debian.org> 1999-2002 Philippe Troin <phil@fifi.org> 1997-1999 Anthony Fok <foka@debian.org>\nCopyright (c) 1996-2019 Julian Seward <jseward@acm.org>\n1996-2010 Julian R Seward <jseward@bzip.org>\n2018 Nicolas Boulenguez <nicolas.boulenguez@free.fr>\n1999-2002 Philippe Troin <phil@fifi.org>\n2012-2015 Santiago Ruano Rincón <santiago@debian.org>",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/b/bzip2/libbz2-1.0_1.0.8-6_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libbz2-1.0@1.0.8-6?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Nd6D27fzP5zORTx68guwiAQnYdWRDt_X91MUnikYG8k/libbz2-~_~-6_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://sourceware.org/bzip2/",
    "licenseConcluded" : "(BSD-3-Clause AND GPL-2.0-or-later AND bzip2-1.0.6)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libbz2-1.0",
    "versionInfo" : "1.0.8-6"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libc-bin-2.41-12PLUSdeb13u4-arch-amd64-distro-debian-13",
    "attributionTexts" : [ "From: debian/copyright\nFile: posix/runtests.c\nFeel free to copy, use and distribute this software provided:\n\n1. you do not pretend that you wrote it\n2. you leave this copyright notice intact.\n\nPermission to use, copy, modify, and distribute this software and its\ndocumentation for any purpose and without fee is hereby granted,\nprovided that the above copyright notice appear in all copies and that\nboth that copyright notice and this permission notice appear in\nsupporting documentation, and that the name of the copyright holder not be\nused in advertising or publicity pertaining to distribution of the\nsoftware without specific, written prior permission.\n\nTom Lord DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,\nINCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO\nEVENT SHALL TOM LORD BE LIABLE FOR ANY SPECIAL, INDIRECT OR\nCONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF\nUSE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR\nOTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\nPERFORMANCE OF THIS SOFTWARE." ],
    "copyrightText" : "2012-2019 Adam Conrad <adconrad@0c3.net>\n2022-2024 Alexei Sibidanov and Paul Zimmermann\n2006-2025 Aurelien Jarno <aurel32@debian.org>\n2000-2004 Ben Collins <bcollins@debian.org>\n1993 Carlos Leandro and Rui Salgueiro Dep. Matematica Universidade de Coimbra, Portugal, Europe\n1987-1982 Carnegie Mellon University\n1989 Carnegie Mellon University\n1991,1990,1989 Carnegie Mellon University\n2010-2013 Clint Adams <clint@debian.org>\nCopyright 2022-2024 Alexei Sibidanov and Paul Zimmermann\nCopyright 2000-2004 Ben Collins <bcollins@debian.org> 2002-2004 Jeff Bailey <jbailey@debian.org> 2002-2005 Philip Blundell <pb@debian.org> 2002-2006 Daniel Jacobowitz <dan@debian.org> 2002-2006 GOTO Masanori <gotom@debian.org> 2006 Denis Barbier <barbier@debian.org> 2006-2025 Aurelien Jarno <aurel32@debian.org> 2007-2008 Pierre Habouzit <madcoder@debian.org> 2010-2013 Clint Adams <clint@debian.org> 2012-2019 Adam Conrad <adconrad@0c3.net> 2016-2025 Samuel Thibault <sthibault@debian.org>\nCopyright 1993 Carlos Leandro and Rui Salgueiro Dep. Matematica Universidade de Coimbra, Portugal, Europe 1983, 1993 The Regents of the University of California 1996-2025 Free Software Foundation, Inc.\nCopyright 1987-1982 Carnegie Mellon University\nCopyright 1991,1990,1989 Carnegie Mellon University 1993-2025 Free Software Foundation, Inc.\nCopyright 2018 Free Software Foundation\nCopyright 1991-2025 Free Software Foundation, Inc.\nCopyright 1996-2025 Free Software Foundation, Inc. 1985, 1988, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation\nCopyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 1995 IBM Corporation 1996-1999\nCopyright 2004 John Maddock\nCopyright 1998 Marcus Brinkmann (brinkmd@debian.org)\nCopyright 1998 Marcus Brinkmann <brinkmd@debian.org>\nCopyright 2001-2007 Miklos Szeredi\nCopyright 2010, Oracle America, Inc.\nCopyright 1980-2011 Regents of the University of California\nCopyright 1982-1994 Regents of the University of California 1991-2025 Free Software Foundation, Inc. 1988 Stephen Deering\nCopyright 1985, 1988, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation\nCopyright 1983, 1985, 1988, 1989, 1990, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation. 1995-2025 Free Software Foundation, Inc.\nCopyright 1985 The Regents of the University of California 1993 by Digital Equipment Corporation 1995 IBM Corporation\nCopyright 1988, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation 1996-1999 by Internet Software Consortium\nCopyright 1983, 1987, 1989, 1993 The Regents of the University of California 1996-1999 by Internet Software Consortium. 2004 by Internet Systems Consortium, Inc.\nCopyright 1991-2024 Unicode, Inc.\nCopyright 1997-2003 University of Cambridge\nCopyright 1998 WIDE Project 1983, 1993, 1994 The Regents of the University of California\nCopyright 1996 by Craig Metz 1997-2025 Free Software Foundation, Inc.\nCopyright 1995-1999 by Internet Software Consortium. 2004 by Internet Systems Consortium, Inc.\nCopyright 1995, 1999 by Ralf Baechle 2002-2025 Free Software Foundation\nCopyright 1993 by Sun Microsystems, Inc.\nCopyright 1993 by Sun Microsystems, Inc. 1984, 1991, 2001 by Stephen L. Moshier 2011-2025 Free Software Foundation, Inc. 2012-2025 Free Software Foundation, Inc.\nCopyright 1995 by Tom Lord\nCopyright (c) Free Software Foundation, Inc.\nCopyright (c) 1991-2024 Unicoe, Inc.\nCopyright (c) 1997-2003 University of Cambridge\n2002-2006 Daniel Jacobowitz <dan@debian.org>\n2006 Denis Barbier <barbier@debian.org>\n2002-2025 Free Software Foundation\n2018 Free Software Foundation\n1991-2025 Free Software Foundation, Inc.\n1993-2025 Free Software Foundation, Inc.\n1995-2025 Free Software Foundation, Inc.\n1996-2025 Free Software Foundation, Inc.\n1997-2025 Free Software Foundation, Inc.\n2002-2022 Free Software Foundation, Inc.\n2003-2025 Free Software Foundation, Inc.\n2008-2025 Free Software Foundation, Inc.\n2011-2025 Free Software Foundation, Inc.\n2012-2025 Free Software Foundation, Inc.\n2002-2006 GOTO Masanori <gotom@debian.org>\n1992, 1993, 1994, 1997 Henry Spencer\n1995 IBM Corporation\n2002-2004 Jeff Bailey <jbailey@debian.org>\n2004 John Maddock\n2001-2007 Miklos Szeredi\nNone\n2010, Oracle America, Inc.\n2002-2005 Philip Blundell <pb@debian.org>\n2007-2008 Pierre Habouzit <madcoder@debian.org>\n1980-2011 Regents of the University of California\n1982-1994 Regents of the University of California\n2016-2025 Samuel Thibault <sthibault@debian.org>\n1988 Stephen Deering\nThe Internet Assigned Numbers Authority (IANA)\n1983, 1985, 1988, 1989, 1990, 1993 The Regents of the University of California\n1983, 1987, 1989, 1993 The Regents of the University of California\n1983, 1993 The Regents of the University of California\n1983, 1993, 1994 The Regents of the University of California\n1985 The Regents of the University of California\n1985, 1988, 1993 The Regents of the University of California\n1988, 1993 The Regents of the University of California\n1991-2024 Unicode, Inc.\n1997-2003 University of Cambridge\n1998 WIDE Project\n1996 by Craig Metz\n1993 by Digital Equipment Corporation\n1995-1999 by Internet Software Consortium\n1996-1999 by Internet Software Consortium\n2004 by Internet Systems Consortium, Inc. (\"ISC\")\n1995, 1999 by Ralf Baechle\n1984, 1991, 2001 by Stephen L. Moshier\n1993 by Sun Microsystems, Inc.\n1995 by Tom Lord\ncopyright by the University of Cambridge, England\n\nAuthors: Alexei Sibidanov and Paul Zimmermann; Ben Collins <bcollins@debian.org>; Ben Collins Jeff Bailey Philip Blundell Daniel Jacobowitz GOTO Masanori Denis Barbier Aurelien Jarno Pierre Habouzit Clint Adams Adam Conrad Samuel Thibault; Carlos Leandro and Rui Salgueiro Dep. Matematica Universidade de Coimbra, Portugal, Europe The Regents of the University of California Free Software Foundation, Inc.; Carnegie Mellon University; Carnegie Mellon University Free Software Foundation, Inc.; Craig Metz Free Software Foundation, Inc.; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. The Regents of the University of California by Digital Equipment Corporation; Henry Spencer; IBM Corporation; Internet Software Consortium. by Internet Systems Consortium, Inc.; John Maddock; Marcus Brinkmann; Marcus Brinkmann (brinkmd@debian.org); Miklos Szeredi; Oracle America, Inc.; Philip Hazel; Ralf Baechle Free Software Foundation; Regents of the University of California; Regents of the University of California Free Software Foundation, Inc. Stephen Deering; Roland McGrath; Sun Microsystems, Inc.; Sun Microsystems, Inc. by Stephen L. Moshier Free Software Foundation, Inc. Free Software Foundation, Inc.; The Regents of the University of California by Digital Equipment Corporation; The Regents of the University of California by Digital Equipment Corporation IBM Corporation; The Regents of the University of California by Digital Equipment Corporation by Internet Software Consortium; The Regents of the University of California by Digital Equipment Corporation. Free Software Foundation, Inc.; The Regents of the University of California by Internet Software Consortium. by Internet Systems Consortium, Inc.; Tom Lord; Unicode, Inc.; Unicoe, Inc.; University of Cambridge; WIDE Project The Regents of the University of California; s. Andreas Jaeger <http://www.debian.org/Bugs/>; s. Roland McGrath; s. Thorsten Kukuk; s. Ulrich Drepper; s. Ulrich Drepper <http://www.debian.org/Bugs/>; the University of Cambridge, England",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/glibc/libc-bin_2.41-12+deb13u4_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libc-bin@2.41-12%2Bdeb13u4?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KzzC3wxj5pTJBxI1UBl9zmJZ4LJ4ACNLr9oJHzgH3Ro/libc-bin_~-12%2Bdeb13u4_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libc/libc.html",
    "licenseConcluded" : "(BSL-1.0 AND Unicode-DFS-2016 AND GPL-3.0-or-later AND LGPL-2.1-only AND FSFAP AND LGPL-2.0-or-later AND LicenseRef-Public-Domain AND LGPL-2.0-only AND LGPL-3.0-only AND LGPL-2.1-or-later AND ISC AND GPL-1.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND HPND AND CMU-Mach AND BSD-2-Clause AND BSD-3-Clause AND SunPro AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-2.0-only AND MIT AND LicenseRef-scancode-pcre AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libc-bin",
    "versionInfo" : "2.41-12+deb13u4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libc6-2.41-12PLUSdeb13u4-arch-amd64-distro-debian-13",
    "copyrightText" : "2012-2019 Adam Conrad <adconrad@0c3.net>\n2022-2024 Alexei Sibidanov and Paul Zimmermann\n2006-2025 Aurelien Jarno <aurel32@debian.org>\n2000-2004 Ben Collins <bcollins@debian.org>\n1993 Carlos Leandro and Rui Salgueiro Dep. Matematica Universidade de Coimbra, Portugal, Europe\n1987-1982 Carnegie Mellon University\n1989 Carnegie Mellon University\n1991,1990,1989 Carnegie Mellon University\n2010-2013 Clint Adams <clint@debian.org>\nCopyright 2022-2024 Alexei Sibidanov and Paul Zimmermann\nCopyright 2000-2004 Ben Collins <bcollins@debian.org> 2002-2004 Jeff Bailey <jbailey@debian.org> 2002-2005 Philip Blundell <pb@debian.org> 2002-2006 Daniel Jacobowitz <dan@debian.org> 2002-2006 GOTO Masanori <gotom@debian.org> 2006 Denis Barbier <barbier@debian.org> 2006-2025 Aurelien Jarno <aurel32@debian.org> 2007-2008 Pierre Habouzit <madcoder@debian.org> 2010-2013 Clint Adams <clint@debian.org> 2012-2019 Adam Conrad <adconrad@0c3.net> 2016-2025 Samuel Thibault <sthibault@debian.org>\nCopyright 1993 Carlos Leandro and Rui Salgueiro Dep. Matematica Universidade de Coimbra, Portugal, Europe 1983, 1993 The Regents of the University of California 1996-2025 Free Software Foundation, Inc.\nCopyright 1987-1982 Carnegie Mellon University\nCopyright 1991,1990,1989 Carnegie Mellon University 1993-2025 Free Software Foundation, Inc.\nCopyright 2018 Free Software Foundation\nCopyright 1991-2025 Free Software Foundation, Inc.\nCopyright 1996-2025 Free Software Foundation, Inc. 1985, 1988, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation\nCopyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 1995 IBM Corporation 1996-1999\nCopyright 2004 John Maddock\nCopyright 2001-2007 Miklos Szeredi\nCopyright 2010, Oracle America, Inc.\nCopyright 1980-2011 Regents of the University of California\nCopyright 1982-1994 Regents of the University of California 1991-2025 Free Software Foundation, Inc. 1988 Stephen Deering\nCopyright 1985, 1988, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation\nCopyright 1983, 1985, 1988, 1989, 1990, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation. 1995-2025 Free Software Foundation, Inc.\nCopyright 1985 The Regents of the University of California 1993 by Digital Equipment Corporation 1995 IBM Corporation\nCopyright 1988, 1993 The Regents of the University of California 1993 by Digital Equipment Corporation 1996-1999 by Internet Software Consortium\nCopyright 1983, 1987, 1989, 1993 The Regents of the University of California 1996-1999 by Internet Software Consortium. 2004 by Internet Systems Consortium, Inc.\nCopyright 1991-2024 Unicode, Inc.\nCopyright 1997-2003 University of Cambridge\nCopyright 1998 WIDE Project 1983, 1993, 1994 The Regents of the University of California\nCopyright 1996 by Craig Metz 1997-2025 Free Software Foundation, Inc.\nCopyright 1995-1999 by Internet Software Consortium. 2004 by Internet Systems Consortium, Inc.\nCopyright 1995, 1999 by Ralf Baechle 2002-2025 Free Software Foundation\nCopyright 1993 by Sun Microsystems, Inc.\nCopyright 1993 by Sun Microsystems, Inc. 1984, 1991, 2001 by Stephen L. Moshier 2011-2025 Free Software Foundation, Inc. 2012-2025 Free Software Foundation, Inc.\nCopyright 1995 by Tom Lord\nCopyright (c) 1992-2025 Free Software Foundation, Inc.\nCopyright (c) 1991-2024 Unicoe, Inc.\nCopyright (c) 1997-2003 University of Cambridge\n2002-2006 Daniel Jacobowitz <dan@debian.org>\n2006 Denis Barbier <barbier@debian.org>\n2002-2025 Free Software Foundation\n2018 Free Software Foundation\n1991-2025 Free Software Foundation, Inc.\n1993-2025 Free Software Foundation, Inc.\n1995-2025 Free Software Foundation, Inc.\n1996-2025 Free Software Foundation, Inc.\n1997-2025 Free Software Foundation, Inc.\n2002-2022 Free Software Foundation, Inc.\n2003-2025 Free Software Foundation, Inc.\n2008-2025 Free Software Foundation, Inc.\n2011-2025 Free Software Foundation, Inc.\n2012-2025 Free Software Foundation, Inc.\n2002-2006 GOTO Masanori <gotom@debian.org>\n1992, 1993, 1994, 1997 Henry Spencer\n1995 IBM Corporation\n2002-2004 Jeff Bailey <jbailey@debian.org>\n2004 John Maddock\n2001-2007 Miklos Szeredi\nNone\n2010, Oracle America, Inc.\n2002-2005 Philip Blundell <pb@debian.org>\n2007-2008 Pierre Habouzit <madcoder@debian.org>\n1980-2011 Regents of the University of California\n1982-1994 Regents of the University of California\n2016-2025 Samuel Thibault <sthibault@debian.org>\n1988 Stephen Deering\nThe Internet Assigned Numbers Authority (IANA)\n1983, 1985, 1988, 1989, 1990, 1993 The Regents of the University of California\n1983, 1987, 1989, 1993 The Regents of the University of California\n1983, 1993 The Regents of the University of California\n1983, 1993, 1994 The Regents of the University of California\n1985 The Regents of the University of California\n1985, 1988, 1993 The Regents of the University of California\n1988, 1993 The Regents of the University of California\n1991-2024 Unicode, Inc.\n1997-2003 University of Cambridge\n1998 WIDE Project\n1996 by Craig Metz\n1993 by Digital Equipment Corporation\n1995-1999 by Internet Software Consortium\n1996-1999 by Internet Software Consortium\n2004 by Internet Systems Consortium, Inc. (\"ISC\")\n1995, 1999 by Ralf Baechle\n1984, 1991, 2001 by Stephen L. Moshier\n1993 by Sun Microsystems, Inc.\n1995 by Tom Lord\ncopyright by the University of Cambridge, England\n\nAuthors: Alexei Sibidanov and Paul Zimmermann; Ben Collins Jeff Bailey Philip Blundell Daniel Jacobowitz GOTO Masanori Denis Barbier Aurelien Jarno Pierre Habouzit Clint Adams Adam Conrad Samuel Thibault; Carlos Leandro and Rui Salgueiro Dep. Matematica Universidade de Coimbra, Portugal, Europe The Regents of the University of California Free Software Foundation, Inc.; Carnegie Mellon University; Carnegie Mellon University Free Software Foundation, Inc.; Craig Metz Free Software Foundation, Inc.; Eric Norum <eric.norum@usask.ca>; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. The Regents of the University of California by Digital Equipment Corporation; Henry Spencer; Hongjiu Lu; IBM Corporation; Internet Software Consortium. by Internet Systems Consortium, Inc.; Isamu Hasegawa <isamu@yamato.ibm.com>; JT Conklin and Ulrich Drepper; John Maddock; Martin Schwidefsky <schwidefsky@de.ibm.com>; Masahide Washizawa <washi@jp.ibm.com>; Matthew Rickard <mjricka@epoch.ncsc.mil>; Miklos Szeredi; Oracle America, Inc.; Per Bothner; Philip Hazel; Ralf Baechle Free Software Foundation; Regents of the University of California; Regents of the University of California Free Software Foundation, Inc. Stephen Deering; Sun Microsystems, Inc.; Sun Microsystems, Inc. by Stephen L. Moshier Free Software Foundation, Inc. Free Software Foundation, Inc.; The Regents of the University of California by Digital Equipment Corporation; The Regents of the University of California by Digital Equipment Corporation IBM Corporation; The Regents of the University of California by Digital Equipment Corporation by Internet Software Consortium; The Regents of the University of California by Digital Equipment Corporation. Free Software Foundation, Inc.; The Regents of the University of California by Internet Software Consortium. by Internet Systems Consortium, Inc.; Tom Lord; Ulrich Drepper; Unicode, Inc.; Unicoe, Inc.; University of Cambridge; WIDE Project The Regents of the University of California; rewritten by Wolfram Gloger; the University of Cambridge, England",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/glibc/libc6_2.41-12+deb13u4_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Amac0DSAa1vDcIM5Sx2y1YO8wK5oMalcm6-gJW8XgZA/libc6_~-12%2Bdeb13u4_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libc/libc.html",
    "licenseConcluded" : "(BSL-1.0 AND Unicode-DFS-2016 AND GPL-3.0-or-later AND LGPL-2.1-only AND BSD-2-Clause AND BSD-3-Clause AND SunPro AND FSFAP AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-Public-Domain AND LGPL-2.0-only AND LGPL-3.0-only AND LGPL-2.1-or-later AND ISC AND MIT AND LicenseRef-scancode-pcre AND GPL-1.0-or-later AND HPND AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libc6",
    "versionInfo" : "2.41-12+deb13u4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libcrypt1-4.4.38-1-arch-amd64-distro-debian-13-epoch-1",
    "copyrightText" : "Copyright Alexander Peslyak\nCopyright Alexander Peslyak, Bjorn Esser\nCopyright Alexey Degtyarev\nCopyright Andrew Collier FSF\nCopyright 2015 Bjorn Esser\nCopyright Bjorn Esser\nCopyright Colin Percival\nCopyright David Burren\nCopyright Francesco Salvestrini FSF\nCopyright Free Software Foundation, Inc.\nCopyright Gabriele Svelto FSF\nCopyright Guido U. Draheim, Maarten Bosmans FSF\nCopyright Juniper Networks, Inc.\nCopyright Kevin Cernekee FSF\nCopyright Maarten Bosmans FSF\nCopyright Michael Bretterklieber, Bjorn Esser\nCopyright Mike Frysinger FSF\nCopyright Philip Withnall FSF\nCopyright 2005, 2008, 2009 2011 SUSE LINUX Products GmbH, Germany\nCopyright Scott James Remnant, Dan Nicholson GPL\nCopyright Solar Designer, Colin Percival\nCopyright Steven G. Johnson, Daniel Richard G. GPL\nCopyright 2002, 2003, 2004 SuSE Linux AG, Germany\nCopyright Thorsten Kukuk, Bjorn Esser, Zack Weinberg LGPL\nCopyright Tim Toolan FSF\nCopyright Vitaly Chikunov, Bjorn Esser\nCopyright Zack Weinberg\nCopyright Zack Weinberg and Free Software Foundation, Inc",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/libx/libxcrypt/libcrypt1_4.4.38-1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libcrypt1@4.4.38-1?arch=amd64&distro=debian-13&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7inpCBAe_IaGYLWqtCmPzkMtKjhwtviIXEaLg3P63m4/libcrypt1_~-1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(0BSD AND GPL-2.0-or-later WITH Autoconf-exception-generic AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND FSFAP AND GPL-3.0-or-later WITH Autoconf-exception-3.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libcrypt1",
    "versionInfo" : "4.4.38-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libexpat1-2.9.0-1-deb13u1-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright (C) 1998-2000 Adam Di Carlo <aph@debian.org>\nCopyright (C) 2000-2007 Ardo van Rangelrooij <ardo@debian.org>\nCopyright (C) 2008-2009 Daniel Leidert (dale) <daniel.leidert@wgdd.de>\nCopyright (C) 2001-2017 Expat maintainers\nCopyright (C) Expat maintainers\nCopyright (C) 2013- Laszlo Boszormenyi (GCS) <gcs@debian.org>\nCopyright (C) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper",
    "downloadLocation" : "http://security.debian.org/debian-security/pool/updates/main/e/expat/libexpat1_2.9.0-1~deb13u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5E9Fh-wkbc7-P3ilLSKp4xwuY82G__HK_9hJj47EQaM/libexpat1_~-1~deb13u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://libexpat.github.io/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libexpat1",
    "versionInfo" : "2.9.0-1~deb13u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libfontconfig1-2.15.0-2.3-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright (c) 2001,2003 Keith Packard",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/fontconfig/libfontconfig1_2.15.0-2.3_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libfontconfig1@2.15.0-2.3?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ged2oTptlGI4uEDSPhISG-VHMBa__ItGKETQcUTF3Ko/libfontconfig1_~-~_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.freedesktop.org/wiki/Software/fontconfig/",
    "licenseConcluded" : "HPND-sell-variant",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libfontconfig1",
    "versionInfo" : "2.15.0-2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libfreetype6-2.13.3PLUSdfsg-1PLUSdeb13u1-arch-amd64-distro-debian-13",
    "copyrightText" : "2006-2014 Adobe Systems Incorporated\n2004-2024 Albert Chin-A-Young\n1999-2024 Antoine Leca, David Turner, Robert Wilhelm and Werner Lemberg\n2018-2024 Armin Hasitzka, David Turner, Robert Wilhelm and Werner Lemberg\n2022-2024 Charlie Jiang\n1996-2019 Christoph Lameter, Anthony Fok, Steve Langasek, et al.\n2000 Computing Research Labs, New Mexico State University\nCopyright 2006-2014 Adobe Systems Incorporated\nCopyright 2004-2024 Albert\nCopyright 1999-2024 Antoine Leca, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2018-2024 Armin Hasitzka, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2022-2024 Charlie Jiang\nCopyright 1996-2019 Christoph Lameter, Anthony Fok, Steve Langasek\nCopyright 2000 Computing Research Labs, New Mexico State University 2001-2014 Francesco Zappa Nardelli\nCopyright 2010, 2017 Craig A. Berry\nCopyright 2024 David Saltzman\nCopyright 2002-2024 David Turner\nCopyright 2018-2024 David Turner, Robert Wilhelm, Dominik Rottsches and Werner Lemberg\nCopyright 2022-2024 David Turner, Robert Wilhelm, Werner Lemberg, George Williams and Dominik Rottsches\nCopyright 2021-2024 David Turner, Robert Wilhelm, Werner Lemberg and Anuj Verma\nCopyright 2022-2024 David Turner, Robert Wilhelm, Werner Lemberg and Charlie Jiang\nCopyright 1996-2024 David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner\nCopyright 1996-2024 David Turner, Robert Wilhelm, Werner Lemberg and Dominik Rottsches\nCopyright 2004-2024 David Turner, Robert Wilhelm, Werner Lemberg and George Williams\nCopyright 2022-2024 David Turner, Robert Wilhelm, Werner Lemberg and Moazin Khatti\nCopyright 2008-2024 David Turner, Robert Wilhelm, Werner Lemberg and Suzuki Toshiya\nCopyright 1996-2024 David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1996-2024 David Turner, Robert Wilhelm and Werner Lemberg 2007 Dmitry Timoshkov\nCopyright 1996-2024 David Turner, Robert Wilhelm and Werner Lemberg 2001, 2002 Francesco Zappa Nardelli 2010-2019 Joel Klinghed\nCopyright 2005-2024 David Turner, Robert Wilhelm and Werner Lemberg 2013 Google, Inc.\nCopyright 1996-2024 David Turner, Robert Wilhelm and Werner Lemberg 2003 Huw D M Davies for Codeweavers 2007 Dmitry Timoshkov\nCopyright 2007-2024 Derek Clegg and Michael Toftdal\nCopyright 2009 Francesco Salvestrini\nCopyright 2000-2014 Francesco Zappa Nardelli\nCopyright 2005, 2007, 2008, 2013 George Williams\nCopyright 2013-2024 Google, Inc.\nCopyright 2012 Intel Corporation 2019 Sony Interactive Entertainment Inc.\nCopyright 1995-2017 Jean-loup Gailly\nCopyright 1995-2023 Jean-loup Gailly and Mark Adler\nCopyright 2010-2024 Joel Klinghed\nCopyright 1999-2024 Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1996-2024 Just van Rossum, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1995-2023 Mark Adler\nCopyright 2003-2024 Masatake Yamato, Red Hat K.K., David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2004-2024 Masatake Yamato and Redhat K.K.\nCopyright 2001-2024 Michael Pfeiffer\nCopyright 2018-2024 Nikhil Ramakrishnan, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2009-2024 Oran Agra and Mickey Gabel\nCopyright 2007-2024 Rahul Bhalerao\nCopyright 2009, 2023 Red Hat, Inc. 2015 Google, Inc.\nCopyright 2002-2024 Roberto Alameda\nCopyright 2004 Scott James Remnant <scott@netsplit.com>\nCopyright 2016-2018 Static Jobs LLC\nCopyright 2008 Steven G. Johnson 2011 Daniel Richard G. 2019 Marc Stevens\nCopyright 1991-2024 Stichting Mathematisch Centrum\nCopyright 1996-2024 Suzuki Toshiya, David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 2004-2024 Suzuki Toshiya, Masatake Yamato, Red Hat K.K., David Turner, Robert Wilhelm and Werner Lemberg\nCopyright 1999-2024 The FreeType Development Team\nCopyright The FreeType Project\nCopyright 1990, 1994, 1998 The Open Group\nCopyright 2008 Tim Toolan\nCopyright 2015-2024 Werner Lemberg\nCopyright 2005-2024 Werner Lemberg and Detlef Wurkner\nCopyright 1994 X Consortium\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2006-2024 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2019 nyorain\n2010, 2017 Craig A. Berry\n2011 Daniel Richard G.\n2024 David Saltzman\n2002-2024 David Turner\n2018-2024 David Turner, Robert Wilhelm, Dominik Röttsches and Werner Lemberg\n2022-2024 David Turner, Robert Wilhelm, Werner Lemberg,\n2021-2024 David Turner, Robert Wilhelm, Werner Lemberg and Anuj Verma\n2022-2024 David Turner, Robert Wilhelm, Werner Lemberg and Charlie Jiang\n1996-2024 David Turner, Robert Wilhelm, Werner Lemberg and Detlef Würkner\n1996-2024 David Turner, Robert Wilhelm, Werner Lemberg and Dominik Röttsches\n2004-2024 David Turner, Robert Wilhelm, Werner Lemberg and George Williams\n2022-2024 David Turner, Robert Wilhelm, Werner Lemberg and Moazin Khatti\n2008-2024 David Turner, Robert Wilhelm, Werner Lemberg and Suzuki Toshiya\n1996-2024 David Turner, Robert Wilhelm and Werner Lemberg\n2005-2024 David Turner, Robert Wilhelm and Werner Lemberg\nDavid Turner, Robert Wilhelm and Werner Lemberg\n2007-2024 Derek Clegg and Michael Toftdal\n2007 Dmitry Timoshkov for Codeweavers\n2009 Francesco Salvestrini\n2000-2014 Francesco Zappa Nardelli\n2001, 2002 Francesco Zappa Nardelli\n2001-2014 Francesco Zappa Nardelli\n2001-2015 Francesco Zappa Nardelli\n2005, 2007, 2008, 2013 George Williams\nGeorge Williams and Dominik Röttsches\n2013 Google, Inc.\n2013-2024 Google, Inc.\n2015 Google, Inc.\n2018-2024 Hugh McMaster\n2003 Huw D M Davies for Codeweavers\n2012 Intel Corporation\n1995-2017 Jean-loup Gailly\n1995-2023 Jean-loup Gailly and Mark Adler\n2010-2019 Joel Klinghed\n2010-2024 Joel Klinghed\n1999-2024 Just van Rossum, Antoine Leca,\n1996-2024 Just van Rossum, David Turner, Robert Wilhelm and Werner Lemberg\n2019 Marc Stevens\n1995-2023 Mark Adler\n2003-2024 Masatake Yamato, Red Hat K.K.,\n2004-2024 Masatake Yamato and Redhat K.K.\n2001-2024 Michael Pfeiffer\n2018-2024 Nikhil Ramakrishnan, David Turner, Robert Wilhelm and Werner Lemberg\nNone\n2009-2024 Oran Agra and Mickey Gabel\n2007-2024 Rahul Bhalerao\n2009, 2023 Red Hat, Inc.\n2002-2024 Roberto Alameda\n2004 Scott James Remnant <scott@netsplit.com>\n2019 Sony Interactive Entertainment Inc.\n2016-2018 Static Jobs LLC\n2008 Steven G. Johnson\n1991-2024 Stichting Mathematisch Centrum\n1996-2024 Suzuki Toshiya, David Turner, Robert Wilhelm and Werner Lemberg\n2004-2024 Suzuki Toshiya, Masatake Yamato, Red Hat K.K.,\n1999-2024 The FreeType Development Team\nThe FreeType Project\n1990, 1994, 1998 The Open Group\n2008 Tim Toolan\n2015-2024 Werner Lemberg\n2005-2024 Werner Lemberg and Detlef Würkner\n1994 X Consortium\ncopyright (c) The FreeType Project (www.freetype.org)\n2019 nyorain",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/f/freetype/libfreetype6_2.13.3+dfsg-1+deb13u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libfreetype6@2.13.3%2Bdfsg-1%2Bdeb13u1?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yZ_wzpYIiITKP-f-D6yLUqocNCEDeHmpawNwmpWC030/libfreetype6_~%2Bdfsg-1%2Bdeb13u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://freetype.org",
    "licenseConcluded" : "(BSL-1.0 AND Zlib AND GPL-3.0-or-later AND BSD-3-Clause AND MIT-Modern-Variant AND FSFAP AND GPL-2.0-or-later AND LicenseRef-Public-Domain AND MIT-open-group AND MIT AND ICU AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libfreetype6",
    "versionInfo" : "2.13.3+dfsg-1+deb13u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libgcc-s1-14.2.0-19-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright 1989, 1990 Advanced Micro Devices, Inc.\nCopyright 1992, 1993, 1994 Henry Spencer\nCopyright ISO/IEC (International Organization for Standardization and International Electrotechnical Commission) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010\nCopyright 2001 Red Hat, Inc.\nCopyright 2002 SuperH, Inc.\nCopyright 1984, 1991 by Stephen L. Moshier Adapted\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright (c) 2000, 2001 Alexey Zelkin <phantom@FreeBSD.org>\nCopyright (c) 2003, Artem B. Bityuckiy, SoftMine Corporation\nCopyright (c) 1993 C.W. Sandmann\nCopyright (c) 2001 Christopher G. Demetriou\nCopyright (c) 1999 Citrus Project\nCopyright (c) 1991 DJ Delorie\nCopyright (c) 2004-2007 David Friedman\nCopyright (c) 1997-2002 FreeBSD Project\nCopyright (c) 1986-2024 Free Software Foundation, Inc.\nCopyright (c) 1990-1999, 2000, 2001 Free Software Foundation, Inc.\nCopyright (c) 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 1997, 1999, 2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 2000-2024 Free Software Foundation, Inc.\nCopyright (c) 2001-2019 Free Software Foundation, Inc.\nCopyright (c) 2001-2024 Free Software Foundation, Inc.\nCopyright (c) 2002-2024 Free Software Foundation, Inc.\nCopyright (c) 2014-2019 Free Software Foundation, Inc.\nCopyright (c) 2015-2024 Free Software Foundation, Inc.\nCopyright (c) 2001-2019 Free Software Foundation, Inc. Mix\nCopyright (c) 2005-2024 Free Software Foundation, Inc. Mix\nCopyright (c) 2009 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2001 Hans-Peter Nilsson\nCopyright (c) 1993 Intel Corporation\nCopyright (c) 1999, 2000 Konstantin Chuguev\nCopyright (c) 1999 Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 1996-2011 Red Hat, Inc.\nCopyright (c) 1994, 1997, 2001, 2002, 2003, 2004 Red Hat Incorporated\nCopyright (c) 1987, 1988, 2000 Regents of the University of California\nCopyright (c) 1988, 1990, 1993 Regents of the University of California\nCopyright (c) 1984,2000 S.L. Moshier\nCopyright (c) 1999, 2000, 2001, 2002 Stephane Carrez (stcarrez@nerim.fr)\nCopyright (c) 2001 Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright (c) 2018-2023, The D Language Foundation\nCopyright (c) 2009-2023 The Go Authors\nCopyright (c) 1981, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California\nCopyright (c) 1982, 1986, 1989, 1991, 1993, 1994 The Regents of the University of California\nCopyright (c) 1990 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1991-2013 Unicode, Inc.\nCopyright (c) 1996 Xavier Leroy (Xavier.Leroy@inria.fr)\nCopyright (c) 1991 by AT&T.\nCopyright (c) 1997 by Andrey A. Chernov, Moscow, Russia\nCopyright (c) 2004-2022 by Digital Mars, www.digitalmars.com\nCopyright (c) 1993 by Sun Microsystems, Inc.\nCopyright (c) 1999-2023 by The D Language Foundation\nCopyright (c) 2009-2019 by the LLVM contributors\nVincenzo Ampolo, Michael Parrot, Iain Buclaw, (c) 2009, 2010\n(c) Copyright 1992 Eric Backus\n(c) Copyright 1986 HEWLETT-PACKARD COMPANY\n(c) 1995-2016 Jean-loup Gailly and Mark Adler\n(c) UNIX System Laboratories, Inc.\n\nAuthors: AT&T; Advanced Micro Devices, Inc.; Alexey Zelkin; Andrey A. Chernov, Moscow, Russia; Artem B. Bityuckiy, SoftMine Corporation; C.W. Sandmann; Christopher G. Demetriou; Citrus Project; DJ Delorie; David Friedman; Digital Mars, www.digitalmars.com; Eric Backus; Francois-Xavier Coudert <fxcoudert@gcc.gnu.org>; Free Software Foundation, Inc.; Free Software Foundation, Inc. Mix; FreeBSD Project; Gaius Mulley <gaius@glam.ac.uk>; HEWLETT-PACKARD COMPANY; Hans-Peter Nilsson; Henry Spencer; ISO/IEC (International Organization for Standardization and International Electrotechnical Commission); Intel Corporation; J.T. Conklin <jtc@netbsd.org>; Jakub Jelinek <jj@ultra.linux.cz>; Jean-loup Gailly and Mark Adler; Konstantin Chuguev; Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden); LLVM Team; Mark Kettenis <kettenis@phys.uva.nl>; Mike Barcroft; Red Hat Incorporated; Red Hat, Inc.; Regents of the University of California; S. L. Moshier; S.L. Moshier; Stephane Carrez; Stephen L. Moshier; Stephen L. Moshier Adapted; Sun Microsystems, Inc.; SuperH, Inc.; The D Language Foundation; The Go Authors; The Regents of the University of California; Tobias Burnus <burnus@net-b.de>; Todd C. Miller; UNIX System Laboratories, Inc.; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Unicode, Inc.; Vincenzo Ampolo, Michael Parrot, Iain Buclaw; Walter Bright; Walter Bright http://www.digitalmars.com; Xavier Leroy; newlib@sources.redhat.com Jeff Johnston <jjohnstn@redhat.com>; the LLVM contributors; the University of California, Berkeley; the University of California, Berkeley and its contributors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/gcc-14/libgcc-s1_14.2.0-19_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_oUDDohnYfgSzpi_rpxSjDe1vn2YZwEzr4knURsw_Zs/libgcc-s1_~-19_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org/",
    "licenseConcluded" : "(Zlib AND GFDL-1.3-or-later AND AMD-newlib AND GPL-3.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-d-zlib AND LicenseRef-scancode-nilsson-historical AND LGPL-2.0-or-later AND LicenseRef-Public-Domain AND dtoa AND LicenseRef-scancode-bsla-no-advert AND LGPL-2.0-only AND LGPL-3.0-only AND BSD-4-Clause-UC AND LGPL-2.1-or-later AND GPL-1.0-or-later AND HP-1989 AND LicenseRef-scancode-newlib-historical AND GFDL-1.2-only AND GPL-3.0-or-later WITH GCC-exception-3.1 AND LicenseRef-scancode-gnu-emacs-gpl-1988 AND Artistic-1.0-Perl AND BSD-2-Clause AND BSD-3-Clause AND NCSA AND SunPro AND Spencer-94 AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-2.0-only AND BSD-3-Clause-flex AND BSD-4.3TAHOE AND LicenseRef-scancode-x11-hanson AND HPND-Intel AND LicenseRef-scancode-unicode AND MIT AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libgcc-s1",
    "versionInfo" : "14.2.0-19"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libjpeg62-turbo-2.1.5-4-arch-amd64-distro-debian-13-epoch-1",
    "copyrightText" : "1996-1997, Agner Fog\n2011, Alex Neundorf\n2021, Alex Richardson.\n2015, Alex Turbov\n2019-2020, Arm Limited\n2020, Arm Limited\n2020-2021, Arm Limited\n2011-2012, Canonical Ltd.\nCopyright 2020, Arm Limited 2020-2021, Arm Limited\nCopyright 2020-2021, Arm Limited 2022, D. R. Commander 2022, Matthieu Darbois\nCopyright 2009-2019, 2021, D. R. Commander\nCopyright 2009-2023, D. R. Commander 2021, Alex Richardson\nCopyright 2020, 2022, D. R. Commander 2020, Arm Limited. 2020, D. R. Commander 2020-2021, Arm Limited\nCopyright 2010, 2020, D. R. Commander 2015, 2018, 2021-2022, D. R. Commander 2015, 2018, D. R. Commander 2015-2020, 2022, D. R. Commander 2017-2018, D. R. Commander\nCopyright 2009-2011, 2013, 2016, 2020, D. R. Commander 2009-2014, 2016-2019, 2021, 2023, D. R. Commander 2009-2014, 2017-2019, 2022-2023, D. R. Commander 2009-2015, 2017, 2020-2021, 2023, D. R. Commander 2009-2019, 2021-2023, D. R. Commander 2011, 2013, 2018, 2023, D. R. Commander 2011, 2013, 2023, D. R. Commander 2011, 2019, D. R. Commander 2011, 2022, D. R. Commander 2011, D. R. Commander 2011-2012, 2014-2015, 2017, 2019, 2021-2023, D. R. Commander 2011-2012, 2014-2015, 2017-2018, 2023, D. R. Commander 2011-2013, 2016, 2020, D. R. Commander 2011-2018, 2023, D. R. Commander 2011-2023, D. R. Commander 2013, 2016, D. R. Commander 2018, D. R. Commander 2021, D. R. Commander\nCopyright 2011, 2013-2015, 2023, D. R. Commander 2011, 2018, D. R. Commander 2011-2013, 2017-2018, 2020-2021, 2023, D. R. Commander 2011-2015, 2018, 2020, 2023, D. R. Commander 2011-2015, 2018, 2022-2023, D. R. Commander 2014, 2017, 2023, D. R. Commander 2015, Viktor Szathmary 2017-2018, D. R. Commander\nCopyright 2011, 2014, D. R. Commander 2011, 2015, D. R. Commander 2016-2017, Loongson Technology Corporation Limited, BeiJing 2016-2018, Loongson Technology Corporation Limited, BeiJing 2019, D. R. Commander\nCopyright 1990, David Koblas 1991-1997, Thomas G. Lane 2021-2022, D. R. Commander\nCopyright 1997-2020, Dimitri van Heesch\nCopyright 2005, Guido Vollbeding <guido@jpegclub.org>\nCopyright 2014, Jay Foad. 2014-2015, D. R. Commander\nCopyright 1988, Jef Poskanzer 1989, Jef Poskanzer 1991-1997, Thomas G. Lane 2015, 2017, 2022, D. R. Commander 2015-2017, 2020-2023, D. R. Commander\nCopyright 2011, John Resig\nCopyright 2011, 2013-2015, Kitware, Inc. 2011, Alex Neundorf 2011, Eric NOULARD\nCopyright 2016-2018, Loongson Technology Corporation Limited, BeiJing\nCopyright 2013-2014, MIPS Technologies, Inc., California. 2015, D. R. Commander\nCopyright 2013, MIPS Technologies, Inc., California. 2018, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2016, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru 2014, 2018, 2020, D. R. Commander 2014, 2018-2019, D. R. Commander 2014-2015, 2018, 2020, D. R. Commander 2014-2015, 2018-2019, D. R. Commander 2015, 2018-2019, D. R. Commander 2016-2017, Loongson Technology Corporation Limited, BeiJing 2016-2018, Loongson Technology Corporation Limited, BeiJing 2018-2019, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2015, Intel Corporation. 2016, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2015, Intel Corporation. 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, D. R. Commander 2011, 2016, D. R. Commander 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009-2011, 2014-2016, 2019, 2021, D. R. Commander 2009-2011, 2014-2017, 2019, D. R. Commander 2015, Matthieu Darbois. 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2012, 2016, D. R. Commander 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, 2018, 2020, D. R. Commander 2009, 2016, 2020, D. R. Commander 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2018, Matthias Rancker\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2012, 2016, D. R. Commander 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2015, Intel Corporation\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2016, 2018, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2016, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2016, 2018, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2013-2014, 2016, 2018, 2022, D. R. Commander 2009-2011, 2014, 2016, 2018, 2022, D. R. Commander 2009-2011, 2014-2016, 2018, 2022, D. R. Commander 2015-2016, 2018, 2022, Matthieu Darbois. 2016, 2018, D. R. Commander 2016, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, 2018, 2020, D. R. Commander 2009, 2016, 2020, D. R. Commander 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2011, 2016, D. R. Commander 2012, 2016, D. R. Commander 2016, 2020, D. R. Commander 2016, D. R. Commander 2018, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2014-2015, 2019, D. R. Commander. 2015, 2019, D. R. Commander. 2016-2018, Loongson Technology Corporation Limited, BeiJing\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2014, 2022, D. R. Commander 2011, 2014, 2022, D. R. Commander 2015-2016, 2018, 2022, Matthieu Darbois. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2011, 2014-2016, 2018, 2020, 2022, D. R. Commander 2013-2014, MIPS Technologies, Inc., California. 2014, Linaro Limited. 2015-2016, 2018, 2022, Matthieu Darbois. 2016-2018, Loongson Technology Corporation Limited, BeiJing. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2014, 2016, 2018, 2020, 2022, D. R. Commander 2013-2014, MIPS Technologies, Inc., California. 2015-2016, 2018, 2022, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2014, 2016, 2018, 2022, D. R. Commander 2013-2014, MIPS Technologies, Inc., California. 2015, 2018, 2022, Matthieu Darbois. 2016-2018, Loongson Technology Corporation Limited, BeiJing\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2010, 2016, 2018-2019, D. R. Commander 2018, Matthias Rancker. 2018, Matthieu Darbois\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2013-2014, 2016, 2018, 2020, 2022, D. R. Commander 2011, Nokia Corporation and/or its subsidiary(-ies). 2015-2016, 2018, Matthieu Darbois. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2011, 2013-2014, 2016, 2018, 2022, D. R. Commander 2011, Nokia Corporation and/or its subsidiary(-ies) 2015-2016, 2018, 2022, Matthieu Darbois 2019, Google LLC. 2020, Arm Limited\nCopyright 1999-2006, MIYASAKA Masaru. 2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009, 2016, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2012, 2016, D. R. Commander 2015, Intel Corporation. 2016, D. R. Commander\nCopyright 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2015, Intel Corporation\nCopyright 2020-2023, Mike Gabriel <mike.gabriel@das-netzwerkteam.de> 2014, Ondrej Sury <ondrej@debian.org> 2012-2013, Debian TigerVNC Packaging Team <pkg-tigervnc-devel@lists.alioth.debian.org> 2011-2012, Canonical Ltd. 2011-2012, Linaro Inc.\nCopyright 2009-2011, Nokia Corporation and/or its subsidiary(-ies). 2013-2014, Linaro Limited. 2014, Linaro Limited. 2014, Siarhei Siamashka. 2014-2016, 2020, D. R. Commander 2015, D. R. Commander 2015-2016, 2018, Matthieu Darbois. 2016, Siarhei Siamashka\nCopyright 2011, The Dojo Foundation\nCopyright 1994-1996, Thomas G. Lane\nCopyright 1991-1997, Thomas G. Lane 1996-1997, Agner Fog 2009-2011, 2014-2016, 2018-2022, D. R. Commander 2015, Matthieu Darbois 2018, Matthias Rancker\nCopyright 1991-1997, Thomas G. Lane. 2009-2011, 2016, 2018-2019, D. R. Commander 2010-2011, 2015-2016, 2021, D. R. Commander 2018, Matthias Rancker\nCopyright 1991-1997, Thomas G. Lane. 2009-2011, 2016, 2019, 2022, D. R. Commander 2013, Linaro Limited 2015, Google, Inc.\nCopyright 1991-1997, Thomas G. Lane. 2009, 2018, 2021, D. R. Commander 2018, Matthias Rancker 2020-2021, Arm Limited\nCopyright 1995-1997, Thomas G. Lane. 2011, 2015, 2018, 2021-2022, D. R. Commander 2016, 2018, 2022, Matthieu Darbois. 2020, Arm Limited. 2021, Alex Richardson\nCopyright 1991-1997, Thomas G. Lane. 2015, Google, Inc. 2015-2016, 2019, 2021, D. R. Commander 2021, Alex Richardson\nCopyright 1991-2012, Thomas G. Lane, Guido Vollbeding\nCopyright 1994-2013, Thomas G. Lane, Guido Vollbeding. 2010, 2014-2018, 2020, 2022, D. R. Commander 2015, Google, Inc.\nCopyright 1991-2020, Thomas G. Lane, Guido Vollbeding 1999-2006, MIYASAKA Masaru 2009-2023, D. R. Commander 2009-2011, Nokia Corporation and/or its subsidiary(-ies) 2009, 2012, Pierre Ossman for Cendio AB 2011-2016, Siarhei Siamashka 2013-2014, Linaro Limited 2013-2014, MIPS Technologies, Inc. 2015-2016, 2018 Matthieu Darbois 2015, 2020, Google, Inc. 2015, Intel Corporation 2019-2020, Arm Limited\nCopyright 1991-2020, Thomas G. Lane, Guido Vollbeding. 1995-2019, Thomas G. Lane, Guido Vollbeding. 1997-2019, Thomas G. Lane, Guido Vollbeding. 2010, 2012-2022, D. R. Commander 2010, 2014, 2017, 2019-2022, D. R. Commander 2010, 2017, 2021-2022, D. R. Commander 2017, 2021, D. R. Commander\nCopyright 1994-1996, Thomas G. Lane. 1999-2006, MIYASAKA Masaru. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2011, 2014-2015, D. R. Commander\nCopyright 1994-1997, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2010, 2015-2016, 2019-2020, 2022, D. R. Commander 2015, 2020, Google, Inc.\nCopyright 1991-1996, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2010, 2015-2016, D. R. Commander 2014, MIPS Technologies, Inc., California. 2015, Google, Inc. 2019-2020, Arm Limited\nCopyright 1994-1997, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2020, Google, Inc.\nCopyright 1991-1997, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2009, 2011, 2014-2015, 2020, D. R. Commander 2009, 2011-2012, 2014-2015, D. R. Commander 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2013, Linaro Limited\nCopyright 1991-1997, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2013, Linaro Limited. 2014-2015, 2017, 2019, 2022, D. R. Commander 2014-2015, 2018, 2020, D. R. Commander 2014-2015, D. R. Commander\nCopyright 1991-1996, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2009, Pierre Ossman <ossman@cendio.se> for Cendio AB 2009-2012, 2015, 2022, D. R. Commander 2010, 2015, 2022, D. R. Commander 2013, MIPS Technologies, Inc., California. 2014, MIPS Technologies, Inc., California. 2015, 2019, D. R. Commander\nCopyright 1991-1997, Thomas G. Lane. 1991-1998, Thomas G. Lane. 1994-1996, Thomas G. Lane. 2009-2011, 2013-2014, 2016-2017, 2020, D. R. Commander 2010, 2015-2020, 2022, D. R. Commander 2010, 2016, 2018, 2022, D. R. Commander 2010-2011, 2013-2017, 2019-2020, 2022, D. R. Commander 2015, Google, Inc.\nCopyright 1991-1994, Thomas G. Lane. 1991-1995, Thomas G. Lane. 1991-1996, Thomas G. Lane. 1992-1997, Thomas G. Lane. 1994-1996, Thomas G. Lane. 1994-1997, Thomas G. Lane\nCopyright 1991-1994, Thomas G. Lane. 1991-1996, Thomas G. Lane. 1991-1997, Thomas G. Lane. 1991-1998, Thomas G. Lane. 1992-1996, Thomas G. Lane. 1994-1996, Thomas G. Lane. 1994-1997, Thomas G. Lane. 1994-1998, Thomas G. Lane. 1995-1997, Thomas G. Lane. 1995-1998, Thomas G. Lane. 2009, 2011, 2014-2015, 2018, 2020, D. R. Commander 2009, 2011, 2015, 2023, D. R. Commander 2009, 2014-2015, 2020, D. R. Commander 2009, 2015, D. R. Commander 2009-2011, 2018, D. R. Commander 2009-2012, 2015, 2022, D. R. Commander 2009-2019, 2021, D. R. Commander 2010, 2013-2014, 2017, 2019-2022, D. R. Commander 2010, 2016, 2018, D. R. Commander 2010, 2016, D. R. Commander 2010, 2018, 2022, D. R. Commander 2010, D. R. Commander 2010, 2020, D. R. Commander 2011, 2014, 2016, 2019, 2022, D. R. Commander 2011, 2015, 2020, 2023, D. R. Commander 2011, 2016, 2019, D. R. Commander 2012, 2015, 2022, D. R. Commander 2013, 2016, 2022, D. R. Commander 2014, 2017, 2021-2022, D. R. Commander 2014, 2022, D. R. Commander 2014, D. R. Commander 2015, 2017-2018, 2021-2022, D. R. Commander 2015, 2020, D. R. Commander 2015, D. R. Commander 2015-2016, 2018-2022, D. R. Commander 2016, 2021-2022, D. R. Commander 2016, 2022, D. R. Commander 2017, 2019, 2021, D. R. Commander 2017, 2019, 2022, D. R. Commander 2017, 2019-2020, 2022, D. R. Commander 2017-2018, D. R. Commander 2018, 2021-2022, D. R. Commander 2019, 2022, D. R. Commander 2020, 2022, D. R. Commander 2021, D. R. Commander 2022, D. R. Commander\nCopyright 1997-1998, Thomas G. Lane, Todd Newman. 2017, D. R. Commander\nCopyright (c) 1991-2023 The libjpeg-turbo Project\nCopyright property of CompuServe Incorporated\n2009, 2011, 2014-2015, 2018, 2020, D. R. Commander\n2009, 2011, 2014-2015, 2020, D. R. Commander\n2009, 2011, 2015, 2023, D. R. Commander\n2009, 2011-2012, 2014-2015, D. R. Commander\n2009, 2012, 2016, D. R. Commander\n2009, 2014-2015, 2020, D. R. Commander\n2009, 2015, D. R. Commander\n2009, 2016, 2018, 2020, D. R. Commander\n2009, 2016, 2018, D. R. Commander\n2009, 2016, 2020, D. R. Commander\n2009, 2016, D. R. Commander\n2009, 2018, 2021, D. R. Commander\n2009-2011, 2013, 2016, 2020, D. R. Commander\n2009-2011, 2013-2014, 2016, 2018, 2020, 2022, D. R. Commander\n2009-2011, 2013-2014, 2016, 2018, 2022, D. R. Commander\n2009-2011, 2013-2014, 2016-2017, 2020, D. R. Commander\n2009-2011, 2014, 2016, 2018, 2020, 2022, D. R. Commander\n2009-2011, 2014, 2016, 2018, 2022, D. R. Commander\n2009-2011, 2014, 2022, D. R. Commander\n2009-2011, 2014-2016, 2018, 2022, D. R. Commander\n2009-2011, 2014-2016, 2018-2022, D. R. Commander\n2009-2011, 2014-2016, 2019, 2021, D. R. Commander\n2009-2011, 2014-2017, 2019, D. R. Commander\n2009-2011, 2016, 2018-2019, D. R. Commander\n2009-2011, 2016, 2019, 2022, D. R. Commander\n2009-2011, 2018, D. R. Commander\n2009-2012, 2015, 2022, D. R. Commander\n2009-2014, 2016-2019, 2021, 2023, D. R. Commander\n2009-2014, 2017-2019, 2022-2023, D. R. Commander\n2009-2015, 2017, 2020-2021, 2023, D. R. Commander\n2009-2019, 2021, D. R. Commander\n2009-2019, 2021-2023, D. R. Commander\n2009-2021, D. R. Commander\n2009-2023, D. R. Commander\n2010, 2012-2022, D. R. Commander\n2010, 2013-2014, 2017, 2019-2022, D. R. Commander\n2010, 2014, 2017, 2019-2022, D. R. Commander\n2010, 2014-2018, 2020, 2022, D. R. Commander\n2010, 2015, 2022, D. R. Commander\n2010, 2015-2016, 2019-2020, 2022, D. R. Commander\n2010, 2015-2016, D. R. Commander\n2010, 2015-2020, 2022, D. R. Commander\n2010, 2016, 2018, 2022, D. R. Commander\n2010, 2016, 2018, D. R. Commander\n2010, 2016, 2018-2019, D. R. Commander\n2010, 2016, D. R. Commander\n2010, 2017, 2021-2022, D. R. Commander\n2010, 2018, 2022, D. R. Commander\n2010, 2020, D. R. Commander\n2010, D. R. Commander\n2010-2011, 2013-2017, 2019-2020, 2022, D. R. Commander\n2010-2011, 2015-2016, 2021, D. R. Commander\n2011, 2013, 2018, 2023, D. R. Commander\n2011, 2013, 2023, D. R. Commander\n2011, 2013-2015, 2023, D. R. Commander\n2011, 2014, 2016, 2019, 2022, D. R. Commander\n2011, 2014, 2022, D. R. Commander\n2011, 2014, D. R. Commander\n2011, 2014-2015, D. R. Commander\n2011, 2014-2016, 2018, 2020, 2022, D. R. Commander\n2011, 2015, 2018, 2021-2022, D. R. Commander\n2011, 2015, 2020, 2023, D. R. Commander\n2011, 2015, D. R. Commander\n2011, 2016, 2019, D. R. Commander\n2011, 2016, D. R. Commander\n2011, 2018, D. R. Commander\n2011, 2019, D. R. Commander\n2011, 2022, D. R. Commander\n2011, D. R. Commander\n2011-2012, 2014-2015, 2017, 2019, 2021-2023, D. R. Commander\n2011-2012, 2014-2015, 2017-2018, 2023, D. R. Commander\n2011-2013, 2016, 2020, D. R. Commander\n2011-2013, 2017-2018, 2020-2021, 2023, D. R. Commander\n2011-2015, 2018, 2020, 2023, D. R. Commander\n2011-2015, 2018, 2022-2023, D. R. Commander\n2011-2018, 2023, D. R. Commander\n2011-2023, D. R. Commander\n2012, 2015, 2022, D. R. Commander\n2012, 2016, D. R. Commander\n2013, 2016, 2022, D. R. Commander\n2013, 2016, D. R. Commander\n2014, 2017, 2021-2022, D. R. Commander\n2014, 2017, 2023, D. R. Commander\n2014, 2018, 2020, D. R. Commander\n2014, 2018-2019, D. R. Commander\n2014, 2020, D. R. Commander\n2014, 2022, D. R. Commander\n2014, D. R. Commander\n2014-2015, 2017, 2019, 2022, D. R. Commander\n2014-2015, 2018, 2020, D. R. Commander\n2014-2015, 2018-2019, D. R. Commander\n2014-2015, 2019, D. R. Commander.\n2014-2015, 2020, D. R. Commander\n2014-2015, D. R. Commander\n2014-2016, 2020, D. R. Commander\n2015, 2017, 2022, D. R. Commander\n2015, 2017-2018, 2021-2022, D. R. Commander\n2015, 2018, 2021-2022, D. R. Commander\n2015, 2018, D. R. Commander\n2015, 2018-2019, D. R. Commander\n2015, 2019, D. R. Commander\n2015, 2020, D. R. Commander\n2015, D. R. Commander\n2015-2016, 2018-2022, D. R. Commander\n2015-2016, 2019, 2021, D. R. Commander\n2015-2017, 2020-2023, D. R. Commander\n2015-2020, 2022, D. R. Commander\n2016, 2018, D. R. Commander\n2016, 2018-2019, 2022, D. R. Commander\n2016, 2019, D. R. Commander\n2016, 2020, D. R. Commander\n2016, 2021-2022, D. R. Commander\n2016, 2022, D. R. Commander\n2016, D. R. Commander\n2017, 2019, 2021, D. R. Commander\n2017, 2019, 2022, D. R. Commander\n2017, 2019-2020, 2022, D. R. Commander\n2017, 2021, D. R. Commander\n2017, D. R. Commander\n2017-2018, D. R. Commander\n2018, 2021-2022, D. R. Commander\n2018, D. R. Commander\n2018-2019, D. R. Commander\n2019, 2022, D. R. Commander\n2019, D. R. Commander\n2020, 2022, D. R. Commander\n2020, D. R. Commander\n2021, D. R. Commander\n2021-2022, D. R. Commander\n2022, D. R. Commander\n2014, Daniele E. Domenichelli\n1990, David Koblas\n2012-2013, Debian TigerVNC Packaging Team <pkg-tigervnc-devel@lists.alioth.debian.org>\n2013, Dimitri John Ledkov\n1997-2020, Dimitri van Heesch\n2016, Dmitry Marakasov\n2011, Eric NOULARD\n2015, 2020, Google, Inc.\n2015, Google, Inc.\n2020, Google, Inc.\n2019, Google LLC.\n2005, Guido Vollbeding <guido@jpegclub.org>\n2015, Intel Corporation\n2014, Jay Foad.\n1988, Jef Poskanzer\n1989, Jef Poskanzer\n2011, 2013-2015, Kitware, Inc.\n2011-2012, Linaro Inc.\n2013, Linaro Limited\n2013-2014, Linaro Limited\n2014, Linaro Limited.\n2016-2017, Loongson Technology Corporation Limited, BeiJing\n2016-2018, Loongson Technology Corporation Limited, BeiJing\n2013-2014, MIPS Technologies, Inc.\n2013, MIPS Technologies, Inc., California.\n2013-2014, MIPS Technologies, Inc., California.\n2014, MIPS Technologies, Inc., California.\n1999-2006, MIYASAKA Masaru\n2018, Matthias Räncker\n2015, 2018, 2022, Matthieu Darbois.\n2015, Matthieu Darbois\n2015-2016, 2018 Matthieu Darbois\n2015-2016, 2018, 2022, Matthieu Darbois\n2015-2016, 2018, Matthieu Darbois.\n2016, 2018, 2022, Matthieu Darbois.\n2016, 2018, Matthieu Darbois\n2016, Matthieu Darbois.\n2018, Matthieu Darbois.\n2022, Matthieu Darbois\n2020-2023, Mike Gabriel <mike.gabriel@das-netzwerkteam.de>\n2011, Nikita Krupen'ko\n2009-2011, Nokia Corporation and/or its subsidiary(-ies)\n2011, Nokia Corporation and/or its subsidiary(-ies)\n2014, Ondřej Surý <ondrej@debian.org>\n2009, 2012, Pierre Ossman for Cendio AB\n2009, 2012, Pierre Ossman <ossman@cendio.se> for Cendio AB\n2009, Pierre Ossman <ossman@cendio.se> for Cendio AB\n2016, Roger Leigh\n2014, Rolf Eike Beer\n2011-2016, Siarhei Siamashka\n2014, Siarhei Siamashka.\n2016, Siarhei Siamashka.\n1991-1994, Thomas G. Lane.\n1991-1995, Thomas G. Lane.\n1991-1996, Thomas G. Lane.\n1991-1997, Thomas G. Lane\n1991-1998, Thomas G. Lane.\n1992-1996, Thomas G. Lane.\n1992-1997, Thomas G. Lane.\n1994-1996, Thomas G. Lane.\n1994-1997, Thomas G. Lane.\n1994-1998, Thomas G. Lane.\n1995-1997, Thomas G. Lane.\n1995-1998, Thomas G. Lane.\n1991-2012, Thomas G. Lane, Guido Vollbeding.\n1991-2020, Thomas G. Lane, Guido Vollbeding\n1994-2013, Thomas G. Lane, Guido Vollbeding.\n1995-2019, Thomas G. Lane, Guido Vollbeding.\n1997-2019, Thomas G. Lane, Guido Vollbeding.\n1997-1998, Thomas G. Lane, Todd Newman.\n2015, Viktor Szathmáry\ncopyright by X Consortium\ncopyright by the Free Software Foundation\ncopyright (c) 1991-2010, Thomas G. Lane, Guido Vollbeding\ncopyright holder, Aladdin Enterprises of Menlo Park",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/libj/libjpeg-turbo/libjpeg62-turbo_2.1.5-4_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sAFCK4IV_ndbqvNq3-KszvDepaM88G-jKkZjbmyhFoo/libjpeg62-turbo_~-4_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libjpeg62-turbo@2.1.5-4?arch=amd64&distro=debian-13&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.libjpeg-turbo.org/",
    "licenseConcluded" : "(Zlib AND BSD-3-Clause AND IJG AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libjpeg62-turbo",
    "versionInfo" : "2.1.5-4"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-liblcms2-2-2.16-2PLUSdeb13u2-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright 1998-2022 Marti Maria Saguer <marti.maria@littlecms.com>\nCopyright 2011 Oleksandr Moskalenko <malex@debian.org> 2013-2023 Thomas Weber <tweber@debian.org>\nCopyright 1991-2013, Thomas G. Lane, Guido Vollbeding\n1998-2022 Marti Maria Saguer <marti.maria@littlecms.com>\n2011 Oleksandr Moskalenko <malex@debian.org>\n1991-2013, Thomas G. Lane, Guido Vollbeding.\n2013-2023 Thomas Weber <tweber@debian.org>\ncopyright (c) 1991-2013, Thomas G. Lane, Guido Vollbeding",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/l/lcms2/liblcms2-2_2.16-2+deb13u2_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c_XSXOZLFzbNvv6ws1sFJEOZwZuF3qD5vdr_95PJeXU/liblcms2-2_~-2%2Bdeb13u2_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/liblcms2-2@2.16-2%2Bdeb13u2?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.littlecms.com/",
    "licenseConcluded" : "(GPL-3.0-or-later AND IJG AND MIT AND GPL-2.0-or-later AND GPL-3.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/liblcms2-2",
    "versionInfo" : "2.16-2+deb13u2"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libpng16-16t64-1.6.48-1PLUSdeb13u6-arch-amd64-distro-debian-13",
    "copyrightText" : "2000-2008 Adam M. Costello and Cosmin Truta\n1996, 1997 Andreas Dilger\n2006-2009 Anibal Monsalve Salazar <anibal@debian.org>\n2017-2018 Arm Holdings. All rights reserved.\nCopyright 2000-2008 Adam M. Costello and Cosmin Truta 1998-2017 Greg Roelofs\nCopyright 1996, 1997 Andreas Dilger 1995, 1996 Guy Eric Schalnat, Group 42, Inc. 1998-2018 Glenn Randers-Pehrson 2018-2025 Cosmin Truta\nCopyright 2017-2020 Cosmin Truta\nCopyright 2018-2024 Cosmin Truta 2017-2018 Arm Holdings\nCopyright 2017-2018 Glenn Randers-Pehrson 2016 Google Inc. 2015 The Chromium Authors\nCopyright 2016 Google Inc.\nCopyright 2011-2013 John Cunningham Bowler 2021 Cosmin Truta\nCopyright 2013-2024 John Cunningham Bowler 2015 Glenn Randers-Pehrson\nCopyright 2001 Philippe Troin <phil@fifi.org> 2002 Junichi Uekawa <dancer@debian.org> 2003 Josselin Mouette <joss@debian.org> 2006-2009 Anibal Monsalve Salazar <anibal@debian.org> 2011-2014 Nobuhiro Iwamatsu <iwamatsu@debian.org> 2016-2025 Gianfranco Costamagna <locutusofborg@debian.org> 2016-2017 Tobias Frost <tobi@debian.org>\nCopyright 1995-2025 The\nCopyright 1999-2019 Willem van Schaik\nCopyright (c) 1996, 1997 Andreas Dilger\nCopyright (c) 1996, 1997 Andreas Dilger Distributed\nCopyright (c) 2006-11-28 Charles Poynton\nCopyright (c) 2018-2025 Cosmin Truta\nCopyright (c) 1995, 1996 Frank J. T. Wojcik\nCopyright (c) 1998, 1999 Glenn Randers-Pehrson\nCopyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc. RGB\n2017-2020 Cosmin Truta\n2018-2024 Cosmin Truta\n2018-2025 Cosmin Truta\n2021 Cosmin Truta\n2023-2024 Cosmin Truta\n2016-2025 Gianfranco Costamagna <locutusofborg@debian.org>\n1998-2018 Glenn Randers-Pehrson\n2014,2016 Glenn Randers-Pehrson\n2015 Glenn Randers-Pehrson\n2017-2018 Glenn Randers-Pehrson\n2016 Google Inc.\n1998-2017 Greg Roelofs\n1995, 1996 Guy Eric Schalnat, Group 42, Inc.\n2011-2013 John Cunningham Bowler\n2013-2024 John Cunningham Bowler\n2003 Josselin Mouette <joss@debian.org>\n2002 Junichi Uekawa <dancer@debian.org>\n2011-2014 Nobuhiro Iwamatsu <iwamatsu@debian.org>\n2001 Philippe Troin <phil@fifi.org>\n2015 The Chromium Authors.\n1995-2025 The PNG Reference Library Authors.\n2016-2017 Tobias Frost <tobi@debian.org>\n2000,2017 Willem van Schaik\n1999-2019 Willem van Schaik <willem at schaik dot com>\n(c) Willem van Schaik, 1999, 2011\n\nAuthors: Adam M. Costello and Cosmin Truta Greg Roelofs; Andreas Dilger; Andreas Dilger Distributed; Andreas Dilger Guy Eric Schalnat, Group 42, Inc. Glenn Randers-Pehrson Cosmin Truta; Charles Poynton; Cosmin Truta; Cosmin Truta Arm Holdings; Frank J. T. Wojcik; Glenn Randers-Pehrson; Glenn Randers-Pehrson Abstract; Glenn Randers-Pehrson Google Inc. The Chromium Authors; Google Inc.; Greg Roelofs and contributors; Guy Eric Schalnat, Group 42, Inc.; Guy Eric Schalnat, Group 42, Inc. RGB; John Cunningham Bowler Cosmin Truta; John Cunningham Bowler Glenn Randers-Pehrson; Philippe Troin Junichi Uekawa Josselin Mouette Anibal Monsalve Salazar Nobuhiro Iwamatsu Gianfranco Costamagna Tobias Frost; Willem van Schaik",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/libp/libpng1.6/libpng16-16t64_1.6.48-1+deb13u6_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/V68X7CiSbNCF8GcvllT42MmKrFuK94guTWE1IsM7EqQ/libpng16-16t64_~-1%2Bdeb13u6_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libpng16-16t64@1.6.48-1%2Bdeb13u6?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libpng.org/pub/png/libpng.html",
    "licenseConcluded" : "(Libpng AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libpng16-16t64",
    "versionInfo" : "1.6.48-1+deb13u6"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libstdcPLUSPLUS6-14.2.0-19-arch-amd64-distro-debian-13",
    "copyrightText" : "Copyright (c) 2008-2024 Free Software Foundation, Inc.",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/g/gcc-14/libstdc++6_14.2.0-19_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZeRAOTL7L8YsL7shkFnsTO-aDeyCTfwBebyd1rAX5xo/libstdc%2B%2B6_~-19_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libstdc++6",
    "versionInfo" : "14.2.0-19"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-libuuid1-2.41.5-0PLUSdeb13u1-arch-amd64-distro-debian-13",
    "copyrightText" : "1980, 1983, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994\n1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002,\n1995, 1995, 1996, 1997, 1999, 2000, 2001, 2002, 2003, 2004\n1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\n2005 Adrian Bunk\nAdrian Bunk <bunk@stusta.de>\nAiet Kolkhi <aietkolkhi@gmail.com>\n2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\n1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\n1999 Andreas Dilger\n2001 Andreas Dilger\n1999 Andreas Dilger (adilger@enel.ucalgary.ca)\n2009-2010 Andreas Dilger <adilger@sun.com>\n2001 Andreas Dilger (adilger@turbolinux.com)\n1999, Andreas Dilger and Theodore Tso\n2014 Andreas Henriksson <andreas@fatal.se>\n2010 Andrew Nayenko <resver@gmail.com>\n1999, 2001 Andries Brouwer\n1995, 1999, 2000 Andries E. Brouwer <aeb@cwi.nl>\n2012 Andy Lutomirski <luto@amacapital.net>\nAnton Gladky <gladky.anton@gmail.com>\nArief S F (arief@gurame.fisika.ui.ac.id>\nArmin Beširović <armin@linux.org.ba>\nAxel Bojer <axelb@skolelinux.no>\nBart Cornelis <cobaco@skolelinux.no>\nBartosz Fe�ski <fenio@o2.pl>\nBasil Shubin <bashu@surgut.ru>\n2009 Bastian Friedrich <bastian.friedrich@collax.com>\nBaurzhan Muftakhidinov <baurthefirst@gmail.com>\n2007, Bernhard Walle <bwalle@suse.de>\nBjorn Steensrud <bjornst@powertech.no>\n2008 Cai Qian <qcai@redhat.com>\n2008, Cai Qian <qcai@redhat.com>\n2017-2024 Chris Hofstaedtler <zeha@debian.org>\nClaus Hindsgaul <claus_h@image.dk>\nClytie Siddall <clytie@riverland.net.au>\n2012 Cody Maloney <cmaloney@theoreticalchaos.com>\nCopyright Aiet Kolkhi <aietkolkhi@gmail.com> Anton Gladky <gladky.anton@gmail.com> Arief S\nCopyright 2001 Andreas Dilger\nCopyright 1999, Andreas Dilger and Theodore Tso\nCopyright 1999, 2001 Andries Brouwer 1995, 1995, 1996, 1997, 1999, 2000, 2001, 2002, 2003, 2004 Theodore Ts'o\nCopyright 2010-2012, Davidlohr Bueso <dave@gnu.org>\nCopyright 2010 Davidlohr Bueso <dave@gnu.org> 2010-2022 Karel Zak <kzak@redhat.com>\nCopyright 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright 2020, FUJITSU LIMITED.\nCopyright 2009-2010 Free Software Foundation, Inc. 2010-2013 Karel Zak <kzak@redhat.com>\nCopyright 1997-2014, Frodo Looijaard\nCopyright 2000-2001 Gunnar Ritter\nCopyright Guy Maor <maor@debian.org> Sean Shaleh Perry <shaleh@debian.org> Adrian Bunk <bunk@stusta.de>\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2005 Jens Axboe <jens@axboe.dk>\nCopyright 2006-2016, 2018, 2021, Karel Zak <kzak@redhat.com>\nCopyright 2007-2023, Karel Zak <kzak@redhat.com> 2007, Bernhard Walle <bwalle@suse.de>\nCopyright 2008-2023, Karel Zak <kzak@redhat.com> 2008, Cai Qian <qcai@redhat.com>\nCopyright 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright 2008, Karel Zak <kzak@redhat.com> 2008, Hayden A. James (hayden.james@gmail.com)\nCopyright 2015, Karel Zak <kzak@redhat.com> 2006, Hewlett-Packard Development Company, L.P.\nCopyright 2016, Karel Zak <kzak@redhat.com> 2016, IBM Corp.\nCopyright 2021, Karel Zak <kzak@redhat.com> 2008-2014, Julian Andres Klode <jak@jak-linux.org>\nCopyright 2014-2022, Karel Zak <kzak@redhat.com> 2010, Lennart Poettering\nCopyright 2009-2023 Karel Zak <kzak@redhat.com> 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 2012-2020, Karel Zak <kzak@redhat.com> 2012, Sami Kerola <kerolasa@iki.fi>\nCopyright 1991, 1992 Linus Torvalds\nCopyright 1994 Martin Schulze <joey@infodrom.north.de> 1994 Salvatore Valente <svalente@mit.edu>\nCopyright Michal Luscon <mluscon@redhat.com> 1986 Gary S. Brown 1990 Gordon Irlam (gordoni@cs.ua.oz.au) 1991, 1992 Linus Torvalds 1991-2004 Miquel van Smoorenburg 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk) 1992-1997 Michael K. Johnson, johnsonm@redhat.com 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2008 Theodore Ts'o <tytso@mit.edu> 1994 Kevin E. Martin (martin@cs.unc.edu) 1994 Salvatore Valente <svalente@mit.edu> 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it) 1994-2005 Jeff Tranter (tranter@pobox.com) 1995, 1999, 2000 Andries E. Brouwer <aeb@cwi.nl> 1997-2005 Frodo Looijaard\nCopyright 2022, Nathan Sharp\nCopyright 2012 Ondrej Oprala <ooprala@redhat.com> 2012-2014 Karel Zak <kzak@redhat.com>\nCopyright 2015, Ondrej Oprala <ooprala@redhat.com> 2015, Karel Zak <ooprala@redhat.com>\nCopyright 2020, Pali Rohar <pali.rohar@gmail.com> 2009, Karel Zak <kzak@redhat.com> 2008, Kay Sievers <kay.sievers@vrfy.org>\nCopyright 2002-2018, 2021-2023, Red Hat, Inc.\nCopyright 1999, 2000, Red Hat Software\nCopyright 2018, Riku Voipio <riku.voipio@iki.fi>\nCopyright 2004 Robert Love <rml@tech9.net> 2010 Karel Zak <kzak@redhat.com>\nCopyright 2017, Sami Kerola 1998, 1999, Theodore Tso\nCopyright 2017, Sami Kerola <kerolasa@iki.fi> 2017, Karel Zak <kzak@redhat.com> 2009, Tim Gardner <tim.gardner@canonical.com>\nCopyright Steven M. Bellovin <smb@research.att.com> Unknown Authors\nCopyright 1980, 1987, 1988 The Regents of the University of California. 2011 Karel Zak <kzak@redhat.com>\nCopyright 1980, 1983, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994 The Regents of the University of California 2014 Sami Kerola <kerolasa@iki.fi> 2014-2023 Karel Zak <kzak@redhat.com>\nCopyright 1995-2000, 2008, Theodore Tso\nCopyright 1996, 1997, 1998, 1999, 2007 Theodore Ts'o. 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2022, 2023, Thomas Weissschuh <thomas@t-8ch.de>\nCopyright 2003-2005, Thorsten Kukuk\nCopyright 2023, 2024, Thorsten Kukuk <kukuk@suse.com>\nCopyright 2016, Werner Fink <werner@suse.de> 2016, SUSE Linux GmbH\nCopyright 2012-2020, Yann Collet\nCopyright (c) 2024 by the\nCopyright 1993, rishna balasubramanian\n2009 Corentin Chary <corentincj@iksaif.net>\nDafydd Tomos <l10n@da.fydd.org>\nDamyan Ivanov <dam@modsoftsys.com>\n1998 Danek Duvall <duvall@alumni.princeton.edu>\nDaniel Franganillo <dfranganillo@gmail.com>\nDaniel Nylander <po@danielnylander.se>\nDanishka Navin <danishka@gmail.com>\nDauren Sarsenov <daur88@inbox.ru>\n2010 Davidlohr Bueso <dave@gnu.org>\n2010, 2011, 2012 Davidlohr Bueso <dave@gnu.org>\n2010, Davidlohr Bueso <dave@gnu.org>\n2010-2012, Davidlohr Bueso <dave@gnu.org>\n2012 Davidlohr Bueso <dave@gnu.org>\nDominik Zablotny <dominz@wp.pl>\nDr.T.Vasudevan <agnihot3@gmail.com>\nEddy Petrisor <eddy.petrisor@gmail.com>\nEder L. Marques <frolic@debian-ce.org>\nElian Myftiu <elian.myftiu@gmail.com>\nEmmanuel Galatoulas <galas@tee.gr>\n2012-2013 Eric Biederman <ebiederm@xmission.com>\n2013 Eric Sandeen <sandeen@redhat.com>\nEsko Arajärvi <edu@iki.fi>\n2020, FUJITSU LIMITED.\n2008-2012 Frank Lichtenheld (djpig@debian.org)\nFrank Lichtenheld <djpig@debian.org>\nFrédéric Bothamy <frederic.bothamy@free.fr>\n2009-2010 Free Software Foundation, Inc.\n1997-2005 Frodo Looijaard <frodo@frodo.looijaard.name>\n1997-2014, Frodo Looijaard <frodo@frodo.looijaard.name>\nGabor Burjan <buga@buvoshetes.hu>\n1986 Gary S. Brown\nGeorge Papamichelakis <george@step.gr>\n1990 Gordon Irlam (gordoni@cs.ua.oz.au)\n2000-2001 Gunnar Ritter\nGuy Maor <maor@debian.org>\n2003-2005 H. Peter Anvin\n2010 Hajime Taira <htaira@redhat.com>\nHans Fredrik Nordhaug <hans@nordhaug.priv.no>\n2008 Hayden A. James (hayden.james@gmail.com)\n2008, Hayden A. James (hayden.james@gmail.com)\n2006, Hewlett-Packard Development Company, L.P.\nHideki Yamane <henrich@samba.gr.jp>\nHleb Rubanau <g.rubanau@gmail.com>\nHåvard Korsvoll <korsvoll@gmail.com>\n2011 IBM Corp.\n2016, IBM Corp.\nI Gede Wijaya S <gwijayas@yahoo.com>\nIvan Masár <helix84@centrum.sk>\nJacobo Tarrio <jtarrio@debian.org>\n2008 James Youngman <jay@gnu.org>\nJamil Ahmed <jamil@ankur.org.bd>\nJanos Guljas <janos@resenje.org>\n2010 Jason Borden <jborden@bluehost.com>A\n1994-2005 Jeff Tranter (tranter@pobox.com)\n2005 Jens Axboe <jens@axboe.dk>\n2010 Jeroen Oortwijn <oortwijn@gmail.com>\n1990 Jim Berets <jberets@bbn.com>\n2010 Jiro SEKIBA <jir@unicus.jp>\n2009, Johannes Berg <johannes@sipsolutions.net>\nJordi Mallach <jordi@debian.org>\nJosip Rodin <joy+ditrans@linux.hr>\n2008-2014, Julian Andres Klode <jak@jak-linux.org>\n2006-2016, 2018, 2021, Karel Zak <kzak@redhat.com>\n2006-2023, Karel Zak <kzak@redhat.com>\n2007-2013 Karel Zak <kzak@redhat.com>\n2007-2023 Karel Zak <kzak@redhat.com>\n2007-2023, Karel Zak <kzak@redhat.com>\n2008 Karel Zak <kzak@redhat.com>\n2008, Karel Zak <kzak@redhat.com>\n2008-2009, 2010, 2011, 2012 Karel Zak <kzak@redhat.com>\n2008-2014, 2016-2018, 2021, 2023, Karel Zak <kzak@redhat.com>\n2008-2023 Karel Zak <kzak@redhat.com>\n2008-2023, Karel Zak <kzak@redhat.com>\n2009, Karel Zak <kzak@redhat.com>\n2009-2023 Karel Zak <kzak@redhat.com>\n2010 Karel Zak <kzak@redhat.com>\n2010, Karel Zak <kzak@redhat.com>\n2010-2013 Karel Zak <kzak@redhat.com>\n2010-2022 Karel Zak <kzak@redhat.com>\n2011 Karel Zak <kzak@redhat.com>\n2012-2014 Karel Zak <kzak@redhat.com>\n2012-2014, Karel Zak <kzak@redhat.com>\n2012-2020, Karel Zak <kzak@redhat.com>\n2012-2023, Karel Zak <kzak@redhat.com>\n2013-2023, Karel Zak <kzak@redhat.com>\n2014-2022, Karel Zak <kzak@redhat.com>\n2014-2023 Karel Zak <kzak@redhat.com>\n2015, Karel Zak <kzak@redhat.com>\n2016, Karel Zak <kzak@redhat.com>\n2017, Karel Zak <kzak@redhat.com>\n2020, Karel Zak <kzak@redhat.com>\n2021, Karel Zak <kzak@redhat.com>\n2015, Karel Zak <ooprala@redhat.com>\nKarolina Kalic <karolina@resenje.org>\nKartik Mistry <kartik.mistry@gmail.com>\n2004-2008 Kay Sievers <kay.sievers@vrfy.org>\n2008, Kay Sievers <kay.sievers@vrfy.org>\n1994 Kevin E. Martin (martin@cs.unc.edu)\nKevin Scannell <kscanne@gmail.com>\nKhoem Sokhem <khoemsokhem@khmeros.info>\nKlaus Ade Johnstad <klaus@skolelinux.no>\nKnut Yrvin <knuty@skolelinux.no>\nKonstantinos Margaritis <markos@debian.org>\nKostas Papadimas <pkst@gnome.org>\nKęstutis Biliūnas <kebil@kaunas.init.lt>\nKumar Appaiah <a.kumar@alumni.iitm.ac.in>\nLaMont Jones <lamont@debian.org>\n2010, Lennart Poettering\n2012 Lennart Poettering\n1991, 1992 Linus Torvalds\nLior Kaplan <kaplan@debian.org>\nLuiz Portella <lfpor@lujz.org>\nMallikarjuna <Mallikarjunasj@gmail.com>\n2009, Marcel Holtmann <marcel@holtmann.org>\n1996-2003 Martin Mitchell (martin@debian.org)\n1994 Martin Schulze <joey@infodrom.north.de>\n2010 Masatake Yamato <yamato@redhat.com>\nMert Dirik <mertdirik@gmail.com>\n2017-2020 Michael Biebl <biebl@debian.org>\n2004-2006 Michael Holzt, kju -at- fqdn.org\n1992-1997 Michael K. Johnson, johnsonm@redhat.com\nMichal Luscon <mluscon@redhat.com>\n2009 Mike Hommey <mh@glandium.org>\n2009 Mikhail Gusarov <dottedmag@dottedmag.net>\n2012 Milan Broz <mbroz@redhat.com>\nMilo Casagrande <milo@ubuntu.com>\nMing Hua <minghua@ubuntu.com>\n1991-2004 Miquel van Smoorenburg\nMiroslav Kure <kurem@debian.cz>\nMouhamadou Mamoune Mbacke <mouhamadoumamoune@gmail.com>\nNabin Gautam <nabin@mpp.org.np>\n2022, Nathan Sharp\n2012 Ondrej Oprala <ooprala@redhat.com>\n2012, Ondrej Oprala <ooprala@redhat.com>\n2013, Ondrej Oprala <ooprala@redhat.com>\n2013,2014 Ondrej Oprala <ooprala@redhat.com>\n2014 Ondrej Oprala <ooprala@redhat.com>\n2015, Ondrej Oprala <ooprala@redhat.com>\nOssama M. Khayat <okhayat@yahoo.com>\nOvidiu Damian <deelerious@gmail.com>\n2020, Pali Rohár <pali.rohar@gmail.com>\nParlin Imanuel Toh <parlin_i@yahoo.com>\n1999, 2004 Paul Eggert <eggert@twinsun.com>\nPavel Piatruk <berserker@neolocation.com>\n2019 Petter Reinholdtsen <pere@debian.org>\n2011 Philipp Marek <philipp.marek@linbit.com>\nPiarres Beobide <pi@beobide.net>\nPraveen|പ്രവീണ്‍ A|എ <pravi.a@gmail.com>\nRūdolfs Mazurs <rudolfs.mazurs@gmail.com>\n1999, 2000, 2002-2009, 2010, 2011, 2012, 2014 Red Hat, Inc.\n2002-2018, 2021-2023, Red Hat, Inc.\n2009 Red Hat, Inc.\n2010-2018, Red Hat, Inc.\n2013, Red Hat, Inc.\n1999, 2000, Red Hat Software\n1990 Rich $alz <rsalz@bbn.com>\n2018, Riku Voipio <riku.voipio@iki.fi>\n2004 Robert Love <rml@tech9.net>\n2013 Rolf Fokkens <rolf@fokkens.nl>\n2008 Roy Peled, the.roy.peled -at- gmail.com\n2016, SUSE Linux GmbH\nSahran <Sahran.ug@gmail.com>\n1994 Salvatore Valente <svalente@mit.edu>\n2017, Sami Kerola\n2012 Sami Kerola <kerolasa@iki.fi>\n2012, Sami Kerola <kerolasa@iki.fi>\n2014 Sami Kerola <kerolasa@iki.fi>\n2017, Sami Kerola <kerolasa@iki.fi>\nSampada Nakhare <sampadanakhare@gmail.com>\nSean 'Shaleh' Perry <shaleh@debian.org>\nSetyo Nugroho <setyo@gmx.net>\nSimão Pedro Cardoso <pthell@gmail.com>\nStefano Melchior <stefano.melchior@openlabs.it>\nSteven M. Bellovin <smb@research.att.com>\n2007, 2011, 2012, 2016 SuSE LINUX Products GmbH\nSunjae Park <darehanl@gmail.com>\nSveinn í Felli <sveinki@nett.is>\nTetralet <tetralet@gmail.com>\n1980, 1987, 1988 The Regents of the University of California.\nThe Regents of the University of California\n1995-2000, 2008, Theodore Tso.\n1996, 1997, 1998, 1999, 2007 Theodore Ts'o.\n1998, 1999, Theodore Tso.\n2007, Theodore Tso\nTheodore Ts'o.\n2003, 2004, 2005, 2008 Theodore Ts'o <tytso@mit.edu>\nTheppitak Karoonboonyanan <thep@linux.thai.net>\n2022, 2023, Thomas Weißschuh <thomas@t-8ch.de>\n2003-2005, Thorsten Kukuk\n2023-2024 Thorsten Kukuk\n2023, 2024, Thorsten Kukuk <kukuk@suse.com>\n2009, Tim Gardner <tim.gardner@canonical.com>\n1999-2002 Transmeta Corporation\nTshewang Norbu <bumthap2006@hotmail.com>\nUnknown Authors on Usenet\nVahid Ghaderi <vahid_male1384@yahoo.com>\nVanja Cvelbar <cvelbar@gmail.com>\nVeeven <veeven@gmail.com>\nVikram Vincent <vincentvikram@gmail.com>\n2000 Werner Almesberger\n2012 Werner Fink <werner@suse.de>\n2016, Werner Fink <werner@suse.de>\n2012-2020, Yann Collet\nYoppy Hidayanto <yoppy.hidayanto@gmail.com>\n2013 Zeeshan Ali (Khattak) <zeeshanak@gnome.org>\nastur <malditoastur@gmail.com>\n1999-2008 by Theodore Ts'o\n1995, ike Jagdis <jaggy@purplet.demon.co.uk>\nn/a\n1993, rishna balasubramanian\n*unknown*\n2019, zhenwei pi <pizhenwei@bytedance.com>\n\nAuthors: Aiet Kolkhi Anton Gladky Arief S; Andreas Dilger; Andreas Dilger and Theodore Tso; Andries Brouwer Theodore Ts'o; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Eric Biederman; FUJITSU LIMITED.; Free Software Foundation, Inc. Karel Zak; Frodo Looijaard; Gunnar Ritter; Guy Maor Sean Shaleh Perry Adrian Bunk; H. Peter Anvin; Jens Axboe; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak Bernhard Walle; Karel Zak Cai Qian; Karel Zak Davidlohr Bueso; Karel Zak Hayden A. James; Karel Zak Hewlett-Packard Development Company, L.P.; Karel Zak IBM Corp.; Karel Zak Julian Andres Klode; Karel Zak Lennart Poettering; Karel Zak Ondrej Oprala; Karel Zak Sami Kerola; Linus Torvalds; Martin Schulze Salvatore Valente; Michal Luscon Gary S. Brown Gordon Irlam Linus Torvalds Miquel van Smoorenburg A. V. Le Blanc Michael K. Johnson, Theodore Ts'o Kevin E. Martin Salvatore Valente Alessandro Rubini Jeff Tranter Andries E. Brouwer Frodo Looijaard; Nathan Sharp; Ondrej Oprala Karel Zak; Pali Rohar Karel Zak Kay Sievers; Red Hat Software; Red Hat, Inc.; Riku Voipio; Robert Love Karel Zak; Sami Kerola Karel Zak Tim Gardner; Sami Kerola Theodore Tso; Steven M. Bellovin Unknown Authors; The Regents of the University of California Sami Kerola Karel Zak; The Regents of the University of California. Karel Zak; Theodore Ts'o. Andreas Dilger; Theodore Tso; Thomas Weissschuh; Thorsten Kukuk; Werner Fink SUSE Linux GmbH; Yann Collet; rishna balasubramanian; the University of California, Berkeley; the University of California, Berkeley and its contributors",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/u/util-linux/libuuid1_2.41.5-0+deb13u1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SbGJn7RNzKah5Yzo39VCbX9YLLXCxWLSpxxASVfJ0b0/libuuid1_~-0%2Bdeb13u1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/util-linux/util-linux",
    "licenseConcluded" : "(BSD-4-Clause AND GPL-3.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND BSD-4.3TAHOE AND BSD-4-Clause-UC AND LGPL-2.1-or-later AND ISC AND MIT AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/libuuid1",
    "versionInfo" : "2.41.5-0+deb13u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-media-types-13.0.0-arch-all-distro-debian-13",
    "copyrightText" : "public-domain",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/m/media-types/media-types_13.0.0_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pVDl4g32te7et0Yjsqsp3Z0dy_lCtVLQBZZARBK6ESQ/media-types_~_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/media-types",
    "versionInfo" : "13.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-netbase-6.5-arch-all-distro-debian-13",
    "copyrightText" : "Copyright (c) 1998-2001 Anthony Towns\nCopyright (c) 2002-2022 Marco d'Itri\nCopyright (c) 1994-1998 Peter Tobias",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/n/netbase/netbase_6.5_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZWHBhvgIekmFmI9Aqj4achtBHKOnQQ5Jck3eN4i_kM8/netbase_~_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/netbase",
    "versionInfo" : "6.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-temurin-17-jre-17.0.21.0.0PLUS9-0-arch-amd64-distro-debian-13",
    "attributionTexts" : [ "The notice/license texts shown below apply to certain parts of this component. \n\nSee the /legal/ directory of the JRE/JDK to view the full third party licenses.\n\n==========\n### Additional Freetype Attributions\n```\n\n---------------------------------\nThe below applies to the following file(s):\nlibfreetype/src/psaux/psarrst.c\nlibfreetype/src/psaux/psarrst.h\nlibfreetype/src/psaux/psblues.c\nlibfreetype/src/psaux/psblues.h\nlibfreetype/src/psaux/pserror.c\nlibfreetype/src/psaux/pserror.h\nlibfreetype/src/psaux/psfixed.h\nlibfreetype/src/psaux/psfont.c\nlibfreetype/src/psaux/psfont.h\nlibfreetype/src/psaux/psft.c\nlibfreetype/src/psaux/psft.h\nlibfreetype/src/psaux/psglue.h\nlibfreetype/src/psaux/pshints.c\nlibfreetype/src/psaux/pshints.h\nlibfreetype/src/psaux/psintrp.c\nlibfreetype/src/psaux/psintrp.h\nlibfreetype/src/psaux/psread.c\nlibfreetype/src/psaux/psread.h\nlibfreetype/src/psaux/psstack.c\nlibfreetype/src/psaux/psstack.h\nlibfreetype/src/psaux/pstypes.h\n\nCopyright (C) 2006-2014 Adobe Systems Incorporated.\n\nThis software, and all works of authorship, whether in source or\nobject code form as indicated by the copyright notice(s) included\nherein (collectively, the \"Work\") is made available, and may only be\nused, modified, and distributed under the FreeType Project License,\nLICENSE.TXT.  Additionally, subject to the terms and conditions of the\nFreeType Project License, each contributor to the Work hereby grants\nto any individual or legal entity exercising permissions granted by\nthe FreeType Project License and this section (hereafter, \"You\" or\n\"Your\") a perpetual, worldwide, non-exclusive, no-charge,\nroyalty-free, irrevocable (except as stated in this section) patent\nlicense to make, have made, use, offer to sell, sell, import, and\notherwise transfer the Work, where such license applies only to those\npatent claims licensable by such contributor that are necessarily\ninfringed by their contribution(s) alone or by combination of their\ncontribution(s) with the Work to which such contribution(s) was\nsubmitted.  If You institute patent litigation against any entity\n(including a cross-claim or counterclaim in a lawsuit) alleging that\nthe Work or a contribution incorporated within the Work constitutes\ndirect or contributory patent infringement, then any patent licenses\ngranted to You under this License for that Work shall terminate as of\nthe date such litigation is filed.\n\nBy using, modifying, or distributing the Work you indicate that you\nhave read and understood the terms and conditions of the\nFreeType Project License as well as those provided in this section,\nand you accept them fully.\n\n\n```\n\n###\n\n==========\nPNG Reference Library License version 2\n---------------------------------------\n\nCopyright (C) 1995-2026 The PNG Reference Library Authors.\nCopyright (C) 2018-2026 Cosmin Truta\nCopyright (C) 1998-2018 Glenn Randers-Pehrson\nCopyright (C) 1996-1997 Andreas Dilger\nCopyright (C) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\n\nThe software is supplied \"as is\", without warranty of any kind,\nexpress or implied, including, without limitation, the warranties\nof merchantability, fitness for a particular purpose, title, and\nnon-infringement.  In no event shall the Copyright owners, or\nanyone distributing the software, be liable for any damages or\nother liability, whether in contract, tort or otherwise, arising\nfrom, out of, or in connection with the software, or the use or\nother dealings in the software, even if advised of the possibility\nof such damage.\n\nPermission is hereby granted to use, copy, modify, and distribute\nthis software, or portions hereof, for any purpose, without fee,\nsubject to the following restrictions:\n\n 1. The origin of this software must not be misrepresented; you\n    must not claim that you wrote the original software.  If you\n    use this software in a product, an acknowledgment in the product\n    documentation would be appreciated, but is not required.\n\n 2. Altered source versions must be plainly marked as such, and must\n    not be misrepresented as being the original software.\n\n 3. This Copyright notice may not be removed or altered from any\n    source or altered source distribution.\n\n\nPNG Reference Library License version 1 (for libpng 0.5 through 1.6.35)\n-----------------------------------------------------------------------\n\nlibpng versions 1.0.7, July 1, 2000, through 1.6.35, July 15, 2018 are\nCopyright (c) 2000-2002, 2004, 2006-2018 Glenn Randers-Pehrson, are\nderived from libpng-1.0.6, and are distributed according to the same\ndisclaimer and license as libpng-1.0.6 with the following individuals\nadded to the list of Contributing Authors:\n\n    Simon-Pierre Cadieux\n    Eric S. Raymond\n    Mans Rullgard\n    Cosmin Truta\n    Gilles Vollant\n    James Yu\n    Mandar Sahastrabuddhe\n    Google Inc.\n    Vadim Barkov\n\nand with the following additions to the disclaimer:\n\n    There is no warranty against interference with your enjoyment of\n    the library or against infringement.  There is no warranty that our\n    efforts or the library will fulfill any of your particular purposes\n    or needs.  This library is provided with all faults, and the entire\n    risk of satisfactory quality, performance, accuracy, and effort is\n    with the user.\n\nSome files in the \"contrib\" directory and some configure-generated\nfiles that are distributed with libpng have other copyright owners, and\nare released under other open source licenses.\n\nlibpng versions 0.97, January 1998, through 1.0.6, March 20, 2000, are\nCopyright (c) 1998-2000 Glenn Randers-Pehrson, are derived from\nlibpng-0.96, and are distributed according to the same disclaimer and\nlicense as libpng-0.96, with the following individuals added to the\nlist of Contributing Authors:\n\n    Tom Lane\n    Glenn Randers-Pehrson\n    Willem van Schaik\n\nlibpng versions 0.89, June 1996, through 0.96, May 1997, are\nCopyright (c) 1996-1997 Andreas Dilger, are derived from libpng-0.88,\nand are distributed according to the same disclaimer and license as\nlibpng-0.88, with the following individuals added to the list of\nContributing Authors:\n\n    John Bowler\n    Kevin Bracey\n    Sam Bushell\n    Magnus Holmgren\n    Greg Roelofs\n    Tom Tanner\n\nSome files in the \"scripts\" directory have other copyright owners,\nbut are released under this license.\n\nlibpng versions 0.5, May 1995, through 0.88, January 1996, are\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\n\nFor the purposes of this copyright and license, \"Contributing Authors\"\nis defined as the following set of individuals:\n\n    Andreas Dilger\n    Dave Martindale\n    Guy Eric Schalnat\n    Paul Schmidt\n    Tim Wegner\n\nThe PNG Reference Library is supplied \"AS IS\".  The Contributing\nAuthors and Group 42, Inc. disclaim all warranties, expressed or\nimplied, including, without limitation, the warranties of\nmerchantability and of fitness for any purpose.  The Contributing\nAuthors and Group 42, Inc. assume no liability for direct, indirect,\nincidental, special, exemplary, or consequential damages, which may\nresult from the use of the PNG Reference Library, even if advised of\nthe possibility of such damage.\n\nPermission is hereby granted to use, copy, modify, and distribute this\nsource code, or portions hereof, for any purpose, without fee, subject\nto the following restrictions:\n\n 1. The origin of this source code must not be misrepresented.\n\n 2. Altered versions must be plainly marked as such and must not\n    be misrepresented as being the original source.\n\n 3. This Copyright notice may not be removed or altered from any\n    source or altered source distribution.\n\nThe Contributing Authors and Group 42, Inc. specifically permit,\nwithout fee, and encourage the use of this source code as a component\nto supporting the PNG file format in commercial products.  If you use\nthis source code in a product, acknowledgment is not required but would\nbe appreciated.\n\nTRADEMARK\n=========\n\nThe name \"libpng\" has not been registered by the Copyright owners\nas a trademark in any jurisdiction.  However, because libpng has\nbeen distributed and maintained world-wide, continually since 1995,\nthe Copyright owners claim \"common-law trademark protection\" in any\njurisdiction where common-law trademark is recognized.\n\n</pre>\n\n###\n\n==========\n## Independent JPEG Group: JPEG release 6b\n\n### JPEG License\n\n```\n****************************************************************************\n\nCopyright (C) 1991-1998, Thomas G. Lane.\n\nThis software is the work of Tom Lane, Philip Gladstone, Jim Boucher,\nLee Crocker, Julian Minguillon, Luis Ortiz, George Phillips, Davide Rossi,\nGuido Vollbeding, Ge' Weijers, and other members of the Independent JPEG\nGroup.\n\nIJG is not affiliated with the official ISO JPEG standards committee. \n\nThe authors make NO WARRANTY or representation, either express or implied,\nwith respect to this software, its quality, accuracy, merchantability, or\nfitness for a particular purpose.  This software is provided \"AS IS\",\nand you, its user, assume the entire risk as to its quality and accuracy.\n\nThis software is copyright (C) 1991-1998, Thomas G. Lane.\nAll Rights Reserved except as specified below.\n\nPermission is hereby granted to use, copy, modify, and distribute\nthis software (or portions thereof) for any purpose, without fee,\nsubject to these conditions:\n\n(1) If any part of the source code for this software is distributed,\nthen this README file must be included, with this copyright and no-warranty\nnotice unaltered; and any additions, deletions, or changes to the original\nfiles must be clearly indicated in accompanying documentation.\n\n(2) If only executable code is distributed, then the accompanying documentation\nmust state that \"this software is based in part on the work of the\nIndependent JPEG Group\".\n\n(3) Permission for use of this software is granted only if the user accepts\nfull responsibility for any undesirable consequences; the authors accept\nNO LIABILITY for damages of any kind.\n\nThese conditions apply to any software derived from or based on the IJG code,\nnot just to the unmodified library.  If you use our work, you ought to\nacknowledge us.\n\nPermission is NOT granted for the use of any IJG author's name or company name\nin advertising or publicity relating to this software or products derived\nfrom it.  This software may be referred to only as \"the Independent JPEG\nGroup's software\".\n\nWe specifically permit and encourage the use of this software as the basis\nof commercial products, provided that all warranty or liability claims are\nassumed by the product vendor.\n\nIt appears that the arithmetic coding option of the JPEG spec is covered\nby patents owned by IBM, AT&T, and Mitsubishi.  Hence arithmetic coding\ncannot legally be used without obtaining one or more licenses.  For this\nreason, support for arithmetic coding has been removed from the free\nJPEG software. (Since arithmetic coding provides only a marginal gain\nover the unpatented Huffman mode, it is unlikely that very many\nimplementations will support it.) So far as we are aware, there are\nno patent restrictions on the remaining code.\n\nThe IJG distribution formerly included code to read and write GIF files.\nTo avoid entanglement with the Unisys LZW patent, GIF reading support\nhas been removed altogether, and the GIF writer has been simplified to\nproduce \"uncompressed GIFs\".  This technique does not use the LZW algorithm;\nthe resulting GIF files are larger than usual, but are readable by all\nstandard GIF decoders.\n\nWe are required to state that \"The Graphics Interchange Format(c) is\nthe Copyright property of CompuServe Incorporated.  GIF(sm) is a\nService Mark property of CompuServe Incorporated.\"\n\n****************************************************************************\n```\n\n==========\n## International Components for Unicode (ICU4J) v67.1\n\n### ICU4J License\n```\n\nCOPYRIGHT AND PERMISSION NOTICE (ICU 58 and later)\n\nCopyright © 1991-2020 Unicode, Inc. All rights reserved.\nDistributed under the Terms of Use in https://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of the Unicode data files and any associated documentation\n(the \"Data Files\") or Unicode software and any associated documentation\n(the \"Software\") to deal in the Data Files or Software\nwithout restriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, and/or sell copies of\nthe Data Files or Software, and to permit persons to whom the Data Files\nor Software are furnished to do so, provided that either\n(a) this copyright and permission notice appear with all copies\nof the Data Files or Software, or\n(b) this copyright and permission notice appear in associated\nDocumentation.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS.\nIN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS\nNOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL\nDAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,\nDATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER\nTORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\nPERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale,\nuse or other dealings in these Data Files or Software without prior\nwritten authorization of the copyright holder.\n\n---------------------\n\nThird-Party Software Licenses\n\nThis section contains third-party software notices and/or additional\nterms for licensed third-party software components included within ICU\nlibraries.\n\n1. ICU License - ICU 1.8.1 to ICU 57.1\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright (c) 1995-2016 International Business Machines Corporation and others\nAll rights reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, and/or sell copies of the Software, and to permit persons\nto whom the Software is furnished to do so, provided that the above\ncopyright notice(s) and this permission notice appear in all copies of\nthe Software and that both the above copyright notice(s) and this\npermission notice appear in supporting documentation.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT\nOF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR\nHOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR ANY\nSPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale, use\nor other dealings in this Software without prior written authorization\nof the copyright holder.\n\nAll trademarks and registered trademarks mentioned herein are the\nproperty of their respective owners.\n\n\n——————————————————————————————————————————————————————————————————————\n\n\nFrom: https://www.unicode.org/copyright.html:\n\n    Unicode® Copyright and Terms of Use\n\n    For the general privacy policy governing access to this site, see the  Unicode Privacy Policy.\n\n        Unicode Copyright\n            Copyright © 1991-2020 Unicode, Inc. All rights reserved.\n        Definitions\n\n        Unicode Data Files (\"DATA FILES\") include all data files under the directories:\n        https://www.unicode.org/Public/\n        https://www.unicode.org/reports/\n        https://www.unicode.org/ivd/data/\n\n        Unicode Data Files do not include PDF online code charts under the directory:\n        https://www.unicode.org/Public/\n\n        Unicode Software (\"SOFTWARE\") includes any source code published in the Unicode Standard\n        or any source code or compiled code under the directories:\n        https://www.unicode.org/Public/PROGRAMS/\n        https://www.unicode.org/Public/cldr/\n        http://site.icu-project.org/download/\n\n        Terms of Use\n            Certain documents and files on this website contain a legend indicating that \"Modification is permitted.\" Any person is hereby authorized, without fee, to modify such documents and files to create derivative works conforming to the Unicode® Standard, subject to Terms and Conditions herein.\n            Any person is hereby authorized, without fee, to view, use, reproduce, and distribute all documents and files, subject to the Terms and Conditions herein.\n            Further specifications of rights and restrictions pertaining to the use of the Unicode DATA FILES and SOFTWARE can be found in the Unicode Data Files and Software License.\n            Each version of the Unicode Standard has further specifications of rights and restrictions of use. For the book editions (Unicode 5.0 and earlier), these are found on the back of the title page.\n            The Unicode PDF online code charts carry specific restrictions. Those restrictions are incorporated as the first page of each PDF code chart.\n            All other files, including online documentation of the core specification for Unicode 6.0 and later, are covered under these general Terms of Use.\n            No license is granted to \"mirror\" the Unicode website where a fee is charged for access to the \"mirror\" site.\n            Modification is not permitted with respect to this document. All copies of this document must be verbatim.\n        Restricted Rights Legend\n            Any technical data or software which is licensed to the United States of America, its agencies and/or instrumentalities under this Agreement is commercial technical data or commercial computer software developed exclusively at private expense as defined in FAR 2.101, or DFARS 252.227-7014 (June 1995), as applicable. For technical data, use, duplication, or disclosure by the Government is subject to restrictions as set forth in DFARS 202.227-7015 Technical Data, Commercial and Items (Nov 1995) and this Agreement. For Software, in accordance with FAR 12-212 or DFARS 227-7202, as applicable, use, duplication or disclosure by the Government is subject to the restrictions set forth in this Agreement.\n        Warranties and Disclaimers\n            This publication and/or website may include technical or typographical errors or other inaccuracies. Changes are periodically added to the information herein; these changes will be incorporated in new editions of the publication and/or website. Unicode, Inc. may make improvements and/or changes in the product(s) and/or program(s) described in this publication and/or website at any time.\n            If this file has been purchased on magnetic or optical media from Unicode, Inc. the sole and exclusive remedy for any claim will be exchange of the defective media within ninety (90) days of original purchase.\n            EXCEPT AS PROVIDED IN SECTION E.2, THIS PUBLICATION AND/OR SOFTWARE IS PROVIDED \"AS IS\" WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. UNICODE, INC. AND ITS LICENSORS ASSUME NO RESPONSIBILITY FOR ERRORS OR OMISSIONS IN THIS PUBLICATION AND/OR SOFTWARE OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS PUBLICATION OR THE UNICODE WEBSITE.\n        Waiver of Damages\n            In no event shall Unicode, Inc. or its licensors be liable for any special, incidental, indirect or consequential damages of any kind, or any damages whatsoever, whether or not Unicode, Inc. was advised of the possibility of the damage, including, without limitation, those resulting from the following: loss of use, data or profits, in connection with the use, modification or distribution of this information or its derivatives.\n        Trademarks & Logos\n            The Unicode Word Mark and the Unicode Logo are trademarks of Unicode, Inc. “The Unicode Consortium” and “Unicode, Inc.” are trade names of Unicode, Inc. Use of the information and materials found on this website indicates your acknowledgement of Unicode, Inc.’s exclusive worldwide rights in the Unicode Word Mark, the Unicode Logo, and the Unicode trade names.\n            The Unicode Consortium Name and Trademark Usage Policy (“Trademark Policy”) are incorporated herein by reference and you agree to abide by the provisions of the Trademark Policy, which may be changed from time to time in the sole discretion of Unicode, Inc.\n            All third party trademarks referenced herein are the property of their respective owners.\n        Miscellaneous\n            Jurisdiction and Venue. This website is operated from a location in the State of California, United States of America. Unicode, Inc. makes no representation that the materials are appropriate for use in other locations. If you access this website from other locations, you are responsible for compliance with local laws. This Agreement, all use of this website and any claims and damages resulting from use of this website are governed solely by the laws of the State of California without regard to any principles which would apply the laws of a different jurisdiction. The user agrees that any disputes regarding this website shall be resolved solely in the courts located in Santa Clara County, California. The user agrees said courts have personal jurisdiction and agree to waive any right to transfer the dispute to any other forum.\n            Modification by Unicode, Inc. Unicode, Inc. shall have the right to modify this Agreement at any time by posting it to this website. The user may not assign any part of this Agreement without Unicode, Inc.’s prior written consent.\n            Taxes. The user agrees to pay any taxes arising from access to this website or use of the information herein, except for those based on Unicode’s net income.\n            Severability.  If any provision of this Agreement is declared invalid or unenforceable, the remaining provisions of this Agreement shall remain in effect.\n            Entire Agreement. This Agreement constitutes the entire agreement between the parties. \n\n```\n\n==========\n## Harfbuzz v14.2.0\n\n### Harfbuzz License\n\n<pre>\n\nHarfBuzz is licensed under the so-called \"Old MIT\" license.  Details follow.\nFor parts of HarfBuzz that are licensed under different licenses see individual\nfiles names COPYING in subdirectories where applicable.\n\nCopyright © 2010-2024  Google, Inc.\nCopyright © 2018-2020  Ebrahim Byagowi\nCopyright © 2004-2013  Red Hat, Inc.\nCopyright © 2019  Facebook, Inc.\nCopyright (C) 2012 Zilong Tan (eric.zltan@gmail.com)\nCopyright © 2007  Chris Wilson\nCopyright © 2018-2019 Adobe Inc.\nCopyright © 2006-2025 Behdad Esfahbod\nCopyright © 1998-2004  David Turner and Werner Lemberg\nCopyright © 2009  Keith Stribley\nCopyright © 2018  Khaled Hosny\nCopyright © 2016  Elie Roux <elie.roux@telecom-bretagne.eu>\nCopyright © 2016  Igalia S.L.\nCopyright © 2015  Mozilla Foundation.\nCopyright © 1999  David Turner\nCopyright © 2005  Werner Lemberg\nCopyright © 2013-2015  Alexei Podtelezhnikov\nCopyright © 2022 Matthias Clasen\nCopyright © 2011  Codethink Limited\n\nFor full copyright notices consult the individual files in the package.\n\n\nPermission is hereby granted, without written agreement and without\nlicense or royalty fees, to use, copy, modify, and distribute this\nsoftware and its documentation for any purpose, provided that the\nabove copyright notice and the following two paragraphs appear in\nall copies of this software.\n\nIN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE TO ANY PARTY FOR\nDIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES\nARISING OUT OF THE USE OF THIS SOFTWARE AND ITS DOCUMENTATION, EVEN\nIF THE COPYRIGHT HOLDER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH\nDAMAGE.\n\nTHE COPYRIGHT HOLDER SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING,\nBUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED HEREUNDER IS\nON AN \"AS IS\" BASIS, AND THE COPYRIGHT HOLDER HAS NO OBLIGATION TO\nPROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.\n\nAll source code, except for one section, is licensed as above. The one\nexception is licensed with a slightly different MIT variant:\nThe contents of this directory are licensed under the following terms:\n\n---------------------------------\nThe below applies to the following file(s):\nlibharfbuzz/hb-ucd.cc\n\nCopyright (C) 2012 Grigori Goronzy <greg@kinoho.net>\n\nPermission to use, copy, modify, and/or distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\n---------------------------------\nThe below applies to the following file(s):\nlibharfbuzz/hb-unicode-emoji-table.hh\n\n© 2025 Unicode®, Inc.\n\nUnicode and the Unicode Logo are registered trademarks of Unicode, Inc.\nin the U.S. and other countries.\nFor terms of use and license, see https://www.unicode.org/terms_of_use.html\n\n</pre>\n\n### AUTHORS File Information\n```\n\nBehdad Esfahbod\nDavid Corbett\nDavid Turner\nEbrahim Byagowi\nGarret Rieger\nJonathan Kew\nKhaled Hosny\nLars Knoll\nMartin Hosken\nOwen Taylor\nRoderick Sheeter\nRoozbeh Pournader\nSimon Hausmann\nWerner Lemberg\n\n```\n\n==========\n## Mesa 3-D Graphics Library v21.0.3\n\n### Mesa License\n\n```\nCopyright (C) 1999-2007  Brian Paul   All Rights Reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of this software and associated documentation files (the \"Software\"),\nto deal in the Software without restriction, including without limitation\nthe rights to use, copy, modify, merge, publish, distribute, sublicense,\nand/or sell copies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included\nin all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\nOR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL\nTHE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\nAttention, Contributors\n\nWhen contributing to the Mesa project you must agree to the licensing terms\nof the component to which you're contributing.\nThe following section lists the primary components of the Mesa distribution\nand their respective licenses.\nMesa Component Licenses\n\n\n\nComponent         Location               License\n------------------------------------------------------------------\nMain Mesa code    src/mesa/              MIT\nDevice drivers    src/mesa/drivers/*     MIT, generally\n\nGallium code      src/gallium/           MIT\n\nExt headers       GL/glext.h             Khronos\n                  GL/glxext.h            Khronos\n                  GL/wglext.h            Khronos\n                  KHR/khrplatform.h      Khronos\n\n*****************************************************************************\n\n----\ninclude/GL/gl.h :\n\n\n Mesa 3-D graphics library\n\n Copyright (C) 1999-2006  Brian Paul   All Rights Reserved.\n Copyright (C) 2009  VMware, Inc.  All Rights Reserved.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and associated documentation files (the \"Software\"),\n to deal in the Software without restriction, including without limitation\n the rights to use, copy, modify, merge, publish, distribute, sublicense,\n and/or sell copies of the Software, and to permit persons to whom the\n Software is furnished to do so, subject to the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Software.\n\n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\n OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL\n THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR\n OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,\n ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\n OTHER DEALINGS IN THE SOFTWARE.\n\n *****************************************************************************\n\n----\ninclude/GL/glext.h\ninclude/GL/glxext.h\ninclude/GL/wglxext.h :\n\n\n Copyright (c) 2013 - 2018 The Khronos Group Inc.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and/or associated documentation files (the\n \"Materials\"), to deal in the Materials without restriction, including\n without limitation the rights to use, copy, modify, merge, publish,\n distribute, sublicense, and/or sell copies of the Materials, and to\n permit persons to whom the Materials are furnished to do so, subject to\n the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Materials.\n\n THE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\n IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\n CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\n TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.\n\n *****************************************************************************\n\n----\ninclude/KHR/khrplatform.h :\n\n Copyright (c) 2008 - 2018 The Khronos Group Inc.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and/or associated documentation files (the\n \"Materials\"), to deal in the Materials without restriction, including\n without limitation the rights to use, copy, modify, merge, publish,\n distribute, sublicense, and/or sell copies of the Materials, and to\n permit persons to whom the Materials are furnished to do so, subject to\n the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Materials.\n\n THE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\n IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\n CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\n TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.\n\n *****************************************************************************\n\n```\n\n==========\n## PC/SC Lite v1.9.9\n\n### PC/SC Lite Notice\n```\nMUSCLE SmartCard Development ( https://pcsclite.apdu.fr/ )\n\nOnly 3 header files are included in this distribution: winscard.h, wintypes.h, pcsclite.h\n\nCopyright for winscard.h:\n * Copyright (C) 1999-2003\n *  David Corcoran <corcoran@musclecard.com>\n * Copyright (C) 2002-2009\n *  Ludovic Rousseau <ludovic.rousseau@free.fr>\n\nCopyright for wintypes.h:\n * Copyright (C) 1999\n *  David Corcoran <corcoran@musclecard.com>\n * Copyright (C) 2002-2011\n *  Ludovic Rousseau <ludovic.rousseau@free.fr>\n\nCopyright for pcsclite.h:\n * Copyright (C) 1999-2004\n *  David Corcoran <corcoran@musclecard.com>\n * Copyright (C) 2002-2011\n *  Ludovic Rousseau <ludovic.rousseau@free.fr>\n * Copyright (C) 2005\n *  Martin Paljak <martin@paljak.pri.ee>\n\n```\n\n### PC/SC Lite License\n```\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions\nare met:\n\n1. Redistributions of source code must retain the above copyright\n   notice, this list of conditions and the following disclaimer.\n2. Redistributions in binary form must reproduce the above copyright\n   notice, this list of conditions and the following disclaimer in the\n   documentation and/or other materials provided with the distribution.\n3. The name of the author may not be used to endorse or promote products\n   derived from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES\nOF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.\nIN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,\nINCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT\nNOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF\nTHIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n```\n\n==========\n## OASIS PKCS #11 Cryptographic Token Interface v3.1\n\n### OASIS PKCS #11 Cryptographic Token Interface License\n<pre>\n\nCopyright © OASIS Open 2023. All Rights Reserved.\n\nAll capitalized terms in the following text have the meanings\nassigned to them in the OASIS Intellectual Property Rights Policy (the\n\"OASIS IPR Policy\"). The full Policy may be found at the OASIS website:\n[https://www.oasis-open.org/policies-guidelines/ipr/].\n\nThis document and translations of it may be copied and furnished to\nothers, and derivative works that comment on or otherwise explain it or\nassist in its implementation may be prepared, copied, published, and\ndistributed, in whole or in part, without restriction of any kind,\nprovided that the above copyright notice and this section are included\non all such copies and derivative works. However, this document itself\nmay not be modified in any way, including by removing the copyright\nnotice or references to OASIS, except as needed for the purpose of\ndeveloping any document or deliverable produced by an OASIS Technical\nCommittee (in which case the rules applicable to copyrights, as set\nforth in the OASIS IPR Policy, must be followed) or as required to\ntranslate it into languages other than English.\n\nThe limited permissions granted above are perpetual and will not be\nrevoked by OASIS or its successors or assigns.\n\nThis document and the information contained herein is provided on an\n\"AS IS\" basis and OASIS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED,\nINCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE\nINFORMATION HEREIN WILL NOT INFRINGE ANY OWNERSHIP RIGHTS OR ANY IMPLIED\nWARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. OASIS\nAND ITS MEMBERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR\nCONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THIS DOCUMENT OR ANY\nPART THEREOF.\n\nAs stated in the OASIS IPR Policy, the following three paragraphs in\nbrackets apply to OASIS Standards Final Deliverable documents (Committee\nSpecifications, OASIS Standards, or Approved Errata).\n\n[OASIS requests that any OASIS Party or any other party that\nbelieves it has patent claims that would necessarily be infringed by\nimplementations of this OASIS Standards Final Deliverable, to notify\nOASIS TC Administrator and provide an indication of its willingness to\ngrant patent licenses to such patent claims in a manner consistent with\nthe IPR Mode of the OASIS Technical Committee that produced this\ndeliverable.]\n\n[OASIS invites any party to contact the OASIS TC Administrator if it\nis aware of a claim of ownership of any patent claims that would\nnecessarily be infringed by implementations of this OASIS Standards\nFinal Deliverable by a patent holder that is not willing to provide a\nlicense to such patent claims in a manner consistent with the IPR Mode\nof the OASIS Technical Committee that produced this OASIS Standards\nFinal Deliverable. OASIS may include such claims on its website, but\ndisclaims any obligation to do so.]\n\n[OASIS takes no position regarding the validity or scope of any\nintellectual property or other rights that might be claimed to pertain\nto the implementation or use of the technology described in this OASIS\nStandards Final Deliverable or the extent to which any license under\nsuch rights might or might not be available; neither does it represent\nthat it has made any effort to identify any such rights. Information on\nOASIS' procedures with respect to rights in any document or deliverable\nproduced by an OASIS Technical Committee can be found on the OASIS\nwebsite. Copies of claims of rights made available for publication and\nany assurances of licenses to be made available, or the result of an\nattempt made to obtain a general license or permission for the use of\nsuch proprietary rights by implementers or users of this OASIS Standards\nFinal Deliverable, can be obtained from the OASIS TC Administrator.\nOASIS makes no representation that any information or list of\nintellectual property rights will at any time be complete, or that any\nclaims in such list are, in fact, Essential Claims.]\n\n</pre>\n\n==========\n## Eastman Kodak Company: Portions of color management and imaging software\n\n### Eastman Kodak Notice\n<pre>\nPortions Copyright Eastman Kodak Company 1991-2003\n</pre>" ],
    "copyrightText" : "Copyright 1994 Hewlett-Packard Co.\nCopyright 2012-2024 JP Aumasson\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 1996, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 1996-2003 by Elliot Joel Berk and C. Scott Ananian\nCopyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter\nCopyright (c) 2006-2014 Adobe Systems Incorporated\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2009-2013, Attila Szegedi\nCopyright (c) 2021 Collabora Ltd.\nCopyright (c) 2000 Computing Research Labs, New Mexico State University\nCopyright (c) 2018-2026 Cosmin Truta\nCopyright (c) Eric S. Raymond <esr@thyrsus.com>\nCopyright (c) 2000-2011 France Telecom\nCopyright (c) 2001-2015 Francesco Zappa Nardelli\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 1989 Gershon Elber\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2002 Graz University of Technology\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1995-2026 Jean-loup Gailly and Mark Adler\nCopyright (c) 1998-2026 Marti Maria Saguer\nCopyright (c) 1998 National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2023 PipeWire authors\nCopyright (c) 2021 Red Hat, Inc.\nCopyright (c) 1995-2026 The\nCopyright (c) 1995-2005 The Cryptix Foundation Limited\nCopyright (c) 2009 The Go Authors\nCopyright (c) 1991 The Regents of the University of California\nCopyright (c) 1982 The Royal Institute, Thai Royal Government\nCopyright (c) 1991-2020 Unicode, Inc.\nCopyright (c) 2018-2023 Wim Taymans\nCopyright (c) 2004 World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2025-2026 by Behdad Esfahbod\nCopyright (c) 2007-2026 by David Turner\nCopyright (c) 2018-2026 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2026 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams\nCopyright (c) 1996-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams. The FreeType Project\nCopyright (c) 2022-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2026 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2007-2026 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2026 by Derek Clegg and Michael Toftdal\nCopyright (c) 2013-2026 by Google, Inc.\nCopyright (c) 1996-2026 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2026 by Masatake YAMATO, Red Hat K.K.\nCopyright (c) 2004-2026 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2019-2026 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2026 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2026 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2001, softSurfer (www.softsurfer.com)\nat iClick, Inc., software copyright (c) 1999\n(c) 2009 by Remo Dentato (rdentato@gmail.com)\ncopyright (c) 1999, IBM Corporation., http://www.ibm.com\ncopyright (c) 2001, Institute\ncopyright (c) 1999-2002, Lotus Development Corporation., http://www.lotus.com\ncopyright (c) 2021, 2023, Oracle and/or its affiliates\ncopyright (c) 1999, Sun Microsystems., http://www.sun.com\ncopyright (c) The FreeType Project (https://freetype.org)\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\n\nAuthors: Adobe Systems Incorporated; Andreas Dilger; Attila Szegedi; Behdad Esfahbod; Collabora Ltd.; Computing Research Labs, New Mexico State University; Cosmin Truta; David Turner; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg, George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams. The FreeType Project; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Elliot Joel Berk and C. Scott Ananian; Eric S. Raymond; France Telecom; Francesco Zappa Nardelli; Free Software Foundation, Inc.; Gershon Elber; Glenn Randers-Pehrson; Google, Inc.; Graz University of Technology; Guy Eric Schalnat, Group 42, Inc.; Hewlett-Packard Co.; IBM Corporation; Institute; JP Aumasson; Jean-Philippe Aumasson; Jean-loup Gailly and Mark Adler; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Lotus Development Corporation; Marti Maria Saguer; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K.; National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; Oracle and/or its affiliates; Oran Agra and Mickey Gabel; Otto Moerbeek; Ovidiu Predescu (ovidiu@cup.hp.com); PipeWire authors; Rahul Bhalerao; Red Hat, Inc.; Remo Dentato; Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter; Sun Microsystems; The Apache Software Foundation; The Apache Software Foundation (http://www.apache.org/); The Cryptix Foundation Limited; The FreeType Project; The Go Authors; The Open Group; The Regents of the University of California; The Royal Institute, Thai Royal Government; Unicode, Inc.; Wim Taymans; World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University); iClick, Inc., software; softSurfer; the Free Software Foundation",
    "downloadLocation" : "https://packages.adoptium.net/artifactory/deb/pool/main/t/temurin-17/temurin-17-jre_17.0.21.0.0%2B9-0_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/temurin-17-jre@17.0.21.0.0%2B9-0?arch=amd64&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/STXsmcNW76G0HXQt82szf9HCe_jwaN-fGGH2EHBUvIE/OpenJDK17U-jdk-sources_~_9.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Zlib AND Libpng AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND LGPL-2.1-only AND W3C AND BSD-2-Clause AND BSD-3-Clause AND W3C-19980720 AND Unicode-TOU AND LGPL-2.0-or-later AND softSurfer AND GPL-2.0-or-later WITH GNU-compiler-exception AND LGPL-3.0-only AND MIT-open-group AND LicenseRef-scancode-unicode AND MPL-2.0 AND Apache-1.1 AND Apache-2.0 AND CC0-1.0 AND MIT AND SMLNJ AND GPL-3.0-only WITH GCC-exception-3.1 AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/temurin-17-jre",
    "versionInfo" : "17.0.21.0.0+9-0"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-tzdata-legacy-2026c-0PLUSdeb13u1-arch-all-distro-debian-13",
    "copyrightText" : "The Internet Assigned Numbers Authority (IANA)\n\nAuthors: mistake. Australia/Currie",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/t/tzdata/tzdata-legacy_2026c-0+deb13u1_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/tzdata-legacy@2026c-0%2Bdeb13u1?arch=all&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6mx46zCusSmzfTiMJDF11lz-Z3wq8_frrlA6lfztLeA/tzdata-legacy_2026c-0%2Bdeb13u1_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/tzdata-legacy",
    "versionInfo" : "2026c-0+deb13u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-tzdata-2026c-0PLUSdeb13u1-arch-all-distro-debian-13",
    "copyrightText" : "The Internet Assigned Numbers Authority (IANA)\n\nAuthors: mistake. Australia/Currie",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/t/tzdata/tzdata_2026c-0+deb13u1_all.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/tzdata@2026c-0%2Bdeb13u1?arch=all&distro=debian-13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CQX9iy53U6UJoe8N7T71fv58Mep_WXXTiiaFS3YUkoM/tzdata_2026c-0%2Bdeb13u1_all-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/tzdata",
    "versionInfo" : "2026c-0+deb13u1"
  }, {
    "SPDXID" : "SPDXRef-pkg-deb-debian-zlib1g-1.3.dfsgPLUSreally1.3.1-1PLUSb1-arch-amd64-distro-debian-13-epoch-1",
    "copyrightText" : "Copyright 1998-2010 Gilles Vollant 2007-2008 Even Rouault 2009-2010 Mathias Svensson\nCopyright 1995-2013 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2000-2017 Mark Brown\nCopyright 1998 by Andreas R. Kleinert\n2007-2008 Even Rouault\n1998-2010 Gilles Vollant\n1995-2013 Jean-loup Gailly and Mark Adler\n2000-2017 Mark Brown\n2009-2010 Mathias Svensson\n1998 by Andreas R. Kleinert",
    "downloadLocation" : "https://ftp.debian.org/debian/pool/main/z/zlib/zlib1g_1.3.dfsg+really1.3.1-1+b1_amd64.deb",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VXjTqPVhNOX-EK6LP20myuoULh126tUiS6h-i8PakYo/zlib1g_~.dfsg%2Breally~-1%2Bb1_amd64-sources.tar.xz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://zlib.net/",
    "licenseConcluded" : "Zlib",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "deb/debian/zlib1g",
    "versionInfo" : "1.3.dfsg+really1.3.1-1+b1"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-org.eclipse.californium-californium-legal-3.7.0",
    "copyrightText" : "Copyright 2011-2019 The Bootstrap Authors\nCopyright 2011-2019 Twitter, Inc.\nCopyright 2018 University of Rostock, Institute of Applied Microelectronics and Computer Engineering\nCopyright (c) 2016\nCopyright (c) 2022 AVSystem and others\nCopyright (c) 2022 Achim Kraus and others\nCopyright (c) 2016 Amazon Web Services\nCopyright (c) 2016, 2017 Amazon Web Services and others\nCopyright (c) 2019 Andrei-Marius Longhin and others\nCopyright (c) 2016-2020 Bosch.IO GmbH and others\nCopyright (c) 2016 Bosch Software Innovations GmbH.\nCopyright (c) 2018, 2019 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2014 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2019 Lari Hotari and others\nCopyright (c) 2018, Ludwig Seitz, RISE\nCopyright (c) 2017 NTNU Gjovik and others\nCopyright (c) 2018 RISE SICS and others\nCopyright (c) 2022 RISE and others\nCopyright (c) 2018, Rikard Hoglund, RISE SICS\nCopyright (c) 2015, 2017 Robert Harder and others\nCopyright (c) 2015 Sierra Wireless\nCopyright (c) 2016 Sierra Wireless and others\nCopyright (c) 2020 Softech and others\nCopyright (c) 2018, Tobias Andersson, RISE\nCopyright (c) 2018 Vikram and others\nCopyright (c) 2019 Wajd Tohme, Ahmad Hussaein, Petr Kocian, Matias Carlander-Reuterfelt, Ismail Hilal, Tuna Gersil, and Zainab Alsaadi and others\nCopyright (c) 2015 Wireless Networks Group, UPC Barcelona\nCopyright (c) 2015, 2017 Wireless Networks Group, UPC Barcelona, i2CAT and others\nCopyright 2015 the original author or authors\n(c) 2017-2020, Bosch.IO GmbH and others\n(c) 2017, Bosch Software Innovations GmbH and others\n(c) 2014, Institute for Pervasive Computing, ETH Zurich\n(c) 2014-2022 Institute for Pervasive Computing, ETH Zurich and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: AVSystem and others; Achim Kraus and others; Amazon Web Services; Amazon Web Services and others; Andrei-Marius Longhin and others; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch Software Innovations GmbH.; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; Lari Hotari and others; Ludwig Seitz, RISE; NTNU Gjovik and others; RISE SICS and others; RISE and others; Rikard Hoglund, RISE SICS; Robert Harder; Robert Harder and others; Sierra Wireless; Sierra Wireless and others; Softech and others; The Bootstrap Authors; Tobias Andersson, RISE; Twitter, Inc.; University of Rostock, Institute of Applied Microelectronics and Computer Engineering; VeriSign, Inc.; Vikram and others; Wajd Tohme, Ahmad Hussaein, Petr Kocian, Matias Carlander-Reuterfelt, Ismail Hilal, Tuna Gersil, and Zainab Alsaadi and others; Wireless Networks Group, UPC Barcelona; Wireless Networks Group, UPC Barcelona, i2CAT and others; rob@iharder.net; the Eclipse Californium CoAP Framework project; the Free Software Foundation; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/californium-legal/3.7.0/californium-legal-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M2d0OHGmEn8pz7x6xb8Hg68fM9EU3XZQkgAAWoxgGb8/~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/org.eclipse.californium/californium-legal@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(CC-BY-4.0 AND BSD-2-Clause AND BSD-3-Clause AND CDDL-1.0 AND LicenseRef-Public-Domain AND EPL-1.0 AND CDDL-1.1 AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/org.eclipse.californium/californium-legal",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32",
    "copyrightText" : "Copyright (c) 1999-2026, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.32/logback-classic-1.5.32.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q9PRMpYiFT8L84aaMa6lJCbsoer7EdxBtlZqWdSvOSI/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.5.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32",
    "copyrightText" : "Copyright (c) 1999-2026, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.32/logback-core-1.5.32.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z7IQFM_OqVJCP-jfbDKSFaAb3MZqRAXKaQvdeOQSHoA/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only AND LGPL-2.1-or-later AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.5.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FAYPPEKJfln70WdH6d5kYlr1jWNe0fksQHhTBb25MYQ/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.21"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.15.2",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. Apache\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.15.2/jackson-core-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4VANI1kypYJ1zmJFfd30dfvX7jyjaUzvbTs801yzBdg/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.2",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.21.2/jackson-core-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qsJnXQSuWwxnv3nEFoDksTuMivM0sGsPPbISHIKRxH4/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.2",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.21.2/jackson-databind-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xvLQKlcPwbLX1q4rkbutbYuojalAwNt9Jr7WeE82dAQ/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.21.2",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.21.2/jackson-dataformat-yaml-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rBAWa7wFM9JD_GYWx4hfIvCG3iqV3pOybySPBwIWRtg/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.21.2",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.21.2/jackson-datatype-jdk8-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VMHJvQWlmPO2AS8_EQmfKAs-ekFNuHyvNytF1Z9ALc0/jackson-datatype-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.21.2",
    "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.21.2/jackson-datatype-joda-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.21.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G2WqMFmduR9GNa_bo5yiJ6XeFhxv6W7xM88L15HxqHU/jackson-datatype-joda-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-datatype-joda",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.2",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.21.2/jackson-datatype-jsr310-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BXoAY8BToF9rSyVaFkLSgO8T-bbiy4fs3z-bwpTLef8/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-annotation-support-2.15.2",
    "copyrightText" : "Copyright (c) 2014 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jr/jackson-jr-annotation-support/2.15.2/jackson-jr-annotation-support-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YPhG6ZycX_bltKECiMzWGD0uwtbgYt7mg3-k_5MFLoM/jackson-jr-annotation-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jr/jackson-jr-annotation-support@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jr",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jr/jackson-jr-annotation-support",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-objects-2.15.2",
    "copyrightText" : "Copyright (c) 2014 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jr/jackson-jr-objects/2.15.2/jackson-jr-objects-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jr/jackson-jr-objects@2.15.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OoW9NAG9GUz0RxRKbZvfHVel_Sl_haO8vStRjO_31lo/jackson-jr-objects-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jr",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jr/jackson-jr-objects",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.21.2",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.21.2/jackson-module-parameter-names-2.21.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uiprbO0JS93bhe2YOwOXqwVOmraNqHOwtdrK90jot8o/jackson-module-parameter-names-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.21.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names",
    "versionInfo" : "2.21.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFfKHTGsG5wpfJo2-AKZfGBthRsboCCOy9rGo9Vo134/classmate-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/java-classmate",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml/classmate",
    "versionInfo" : "1.7.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.erosb-everit-json-schema-1.14.3",
    "copyrightText" : "Copyright (c) 2011 Everit Kft. (http://www.everit.org)\nCopyright (c) 2002 JSON.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/erosb/everit-json-schema/1.14.3/everit-json-schema-1.14.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yjSQAAxqnd-TRiXP_Lz2duRH5Iuh1uKk2bkDOtygQ1s/everit-json-schema-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.erosb/everit-json-schema@1.14.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/erosb/everit-json-schema",
    "licenseConcluded" : "(Apache-2.0 AND JSON)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.erosb/everit-json-schema",
    "versionInfo" : "1.14.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.peteroupc-numbers-1.8.2",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/peteroupc/numbers/1.8.2/numbers-1.8.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.peteroupc/numbers@1.8.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sWEbX8utTpw3b4de4FDK5yEPqAGF1jqF9ZT0bm9bha0/numbers-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/peteroupc/Numbers-Java",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.peteroupc/numbers",
    "versionInfo" : "1.8.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1",
    "copyrightText" : "Copyright 2013 Stephen Connolly",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T3RxVpunqiGuBA0KfR3vP5GJ-nvyG4QAHLDQwlAWMMk/jcip-annotations-~-1-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://stephenc.github.com/jcip-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.stephenc.jcip/jcip-annotations",
    "versionInfo" : "1.0-1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-generator-4.37.0",
    "copyrightText" : "Copyright 2019 VicTools",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/victools/jsonschema-generator/4.37.0/jsonschema-generator-4.37.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.victools/jsonschema-generator@4.37.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ttc1LKzbRFpY90oWqZRP5bIsU16InBiYdqzsCWvAs2Q/jsonschema-generator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/victools/jsonschema-generator",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.victools/jsonschema-generator",
    "versionInfo" : "4.37.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jackson-4.37.0",
    "copyrightText" : "Copyright 2019-2024 VicTools",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/victools/jsonschema-module-jackson/4.37.0/jsonschema-module-jackson-4.37.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.victools/jsonschema-module-jackson@4.37.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A-smTb04z2mpqdn3AvtL3NyxCDUQ34k4YspvLEBk3ps/jsonschema-module-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/victools/jsonschema-generator",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.victools/jsonschema-module-jackson",
    "versionInfo" : "4.37.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jakarta-validation-4.37.0",
    "copyrightText" : "Copyright 2020 VicTools & Sascha Kohlmann",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/victools/jsonschema-module-jakarta-validation/4.37.0/jsonschema-module-jakarta-validation-4.37.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.victools/jsonschema-module-jakarta-validation@4.37.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i8sqQjMWHKFKMfWmiLPXDL5k3v19H89cAVVk5URCn6g/jsonschema-module-jakarta-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.victools/jsonschema-module-jakarta-validation",
    "versionInfo" : "4.37.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.13.1/gson-2.13.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A_YJEqCXCoORGISt1zFe9oOoA9uSxQNVmTl22V2OiKo/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.13.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.13.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.2",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.13.2/gson-2.13.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.13.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CUZ_UWJtsGtkPqq4x6UDwCNbAALoHR23abRp3c_kojQ/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.13.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.41.0",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.41.0/error_prone_annotations-2.41.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/alzkQ-FVPqiotQ2w3vi3ywd1bt-ytOSQsgQbL08u5Xo/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.41.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3",
    "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.4.8-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-tpc-engine-5.3.5",
    "copyrightText" : "Copyright 2021 Hazelcast Inc.\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2008-2023, Hazelcast, Inc.\nCopyright (c) 2002 JSON.org\nCopyright (c) 2009 The Go Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Hazelcast Inc.; Hazelcast, Inc.; JSON.org; The Go Authors; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hazelcast/hazelcast-tpc-engine/5.3.5/hazelcast-tpc-engine-5.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hazelcast/hazelcast-tpc-engine@5.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7846ivOs7Ei-c_SVlkySyFVYwxgPtrODu9MZOqhK8YU/hazelcast-tpc-engine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.hazelcast.com/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hazelcast/hazelcast-tpc-engine",
    "versionInfo" : "5.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-5.3.5",
    "copyrightText" : "Copyright 2021 Hazelcast Inc.\nCopyright 2006-2022 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2018-2020 Raffaello Giulietti\nCopyright 2015 Real Logic Ltd.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2014, Appear Networks\nCopyright (c) 2013 Brett Wooldridge\nCopyright (c) 2022 Daniel Lemire. Apache\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 2013, 2014 EclipseSource\nCopyright (c) 2011 Everit Kft. (http://www.everit.org)\nCopyright (c) 2008 Google Inc.\nCopyright (c) 2017 Harith Elrufaie\nCopyright (c) 2008-2023, Hazelcast, Inc.\nCopyright (c) 2002 JSON.org\nCopyright (c) 2016 Johno Crawford\nCopyright (c) 2009-2017 Lightbend Inc. <http://www.lightbend.com>\nCopyright (c) 2019 Luke Hutchison\nCopyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c) 2018, SnakeYAML\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2009 The Go Authors\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2005-2021, by Ewgenij Proschak and Contributors\nCopyright (c) 2019 @jacobg, Luke Hutchison\nCopyright (c) 2019 @mcollovati\nCopyright 2006-2022 the original author or authors\nPortions Copyright 2014 Real Logic Ltd.\nPortions Copyright (c) 2020, MicroRaft\nPortions Copyright 2014 the original author or authors\n\nAuthors: Andreas Brenk; Appear Networks; Brett Wooldridge; Brett Wooldridge, Luca Burgazzoli; CP Subsystem Persistence; Daniel Lemire. Apache; Doug Lea; Eclipse Foundation, Inc.; EclipseSource; Everit Kft; Ewgenij Proschak and Contributors; Free Software Foundation, Inc.; Google Inc.; Harith Elrufaie; Hazelcast Inc.; Hazelcast, Inc.; Henri Tremblay; Ian Parkinson (Google Inc.); JSON.org; Jason T. Greene; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Johno Crawford; Johno Crawford (johno@sulake.com); Leonardo Mesquita; Lightbend Inc.; Luke Hutchison; Luke Hutchison (luke.hutch@gmail.com); Michael J. Simons; MicroRaft; Peter Veentjer; Piotr Qertoip Wlodarek; R. Kempees; Raffaello Giulietti; Real Logic Ltd.; Sergey Bespalov; SnakeYAML; Tatu Saloranta; Tatu Saloranta (tatu.saloranta@iki.fi); The Go Authors; Tim Buktu; Werner Randelshofer, Switzerland; a community of developers; code Json; https://github.com/franz1981; jacobg, Luke Hutchison; mcollovati; the Free Software Foundation; the Raft; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hazelcast/hazelcast/5.3.5/hazelcast-5.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hazelcast/hazelcast@5.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vNwW6M5yIZsgsVZxOwVum2DRZYcshBaClZjk4SrqqQ0/hazelcast-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.hazelcast.com/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hazelcast/hazelcast",
    "versionInfo" : "5.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.kstruct-gethostname4j-1.0.0",
    "copyrightText" : "Copyright (c) 2017 Matt Sheppard",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/kstruct/gethostname4j/1.0.0/gethostname4j-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.kstruct/gethostname4j@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fGiIe7vL_ZiqslYvOT5p-OOWqtI5LqYpD4WO2es_slg/gethostname4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/mattsheppard/gethostname4j",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.kstruct/gethostname4j",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.9",
    "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.9/nimbus-jose-jwt-10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XKmk-3xczDc1_IIuU9KE3bBywervN1xuQmQDURGXW3k/nimbus-jose-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.nimbusds/nimbus-jose-jwt",
    "versionInfo" : "10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.istack-istack-commons-runtime-4.1.2",
    "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/istack/istack-commons-runtime/4.1.2/istack-commons-runtime-4.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KBauXKqa_Cgtf7yk2wrU0-a8gB7hce0YlZOHaEKUiAk/istack-commons-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.istack/istack-commons-runtime",
    "versionInfo" : "4.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.upokecenter-cbor-4.5.2",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/upokecenter/cbor/4.5.2/cbor-4.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZjohzH5nttmbPR8LiktX2yBrGl55GCx2Lyyr8egJil4/cbor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.upokecenter/cbor@4.5.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/peteroupc/CBOR-Java",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.upokecenter/cbor",
    "versionInfo" : "4.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-4.0.3",
    "copyrightText" : "Copyright (c) 2013 Brett Wooldridge",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TrmLYcEwhyo6EHTL9iyRmyFF4bz908emywF4eKLV6oI/HikariCP-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.zaxxer/HikariCP@4.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/brettwooldridge/HikariCP",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.zaxxer/HikariCP",
    "versionInfo" : "4.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.13",
    "copyrightText" : "Copyright 2002-2019 The Apache Software Foundation\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2002 Kevin Atkinson (kevina@gnu.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.13/commons-codec-1.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ApNsXwYoZ1jsEM-hyGyk9kcnOzt2YmwgeGomfvaUpMc/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.21.0/commons-io-2.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AU79RM8_xf3CmPeGvp4-4u-2NlgOAhhLIM159CBDq_M/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6",
    "copyrightText" : "Copyright 2001-2011 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-lang/commons-lang@2.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xcmxx2ur1Z8EXrIzeYGnDv6NHJiK8KdtV-k6BBn2-9w/commons-lang-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-lang/commons-lang",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-dev.failsafe-failsafe-3.3.2",
    "copyrightText" : "Copyright 2011-2021 the original author or authors\n\nAuthors: Ben Manes; Jonathan Halterman",
    "downloadLocation" : "https://repo1.maven.org/maven2/dev/failsafe/failsafe/3.3.2/failsafe-3.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/dev.failsafe/failsafe@3.3.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/n_RnkUykYIWGuPDiQJ_4uMaDJnmyHAeiWYEbvERHJwk/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/dev.failsafe/failsafe",
    "versionInfo" : "3.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.classgraph-classgraph-4.8.158",
    "copyrightText" : "Copyright (c) 2017 Harith Elrufaie\nCopyright (c) 2016 Johno Crawford\nCopyright (c) 2019 Luke Hutchison\nCopyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c) 2019 @jacobg, Luke Hutchison\nCopyright (c) 2019 @mcollovati",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/classgraph/classgraph/4.8.158/classgraph-4.8.158.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0omXx5yW25DoL3J2tZ62Ip57ltmbQ2HaAL2UzHIda34/classgraph-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.classgraph/classgraph@4.8.158",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/classgraph/classgraph",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.classgraph/classgraph",
    "versionInfo" : "4.8.158"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.11",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.15.11/micrometer-commons-1.15.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/68QdtvycNZda7niTaUv1qv4RPGM6eaRmA0Vccuvn--Q/micrometer-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.15.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-commons",
    "versionInfo" : "1.15.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.11",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.15.11/micrometer-core-1.15.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Jl_eic_07FPFXu9tjivzAgGMBHpnae1BUtx0G6frgU8/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.15.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.15.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.11",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.15.11/micrometer-jakarta9-1.15.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dmTf2pc0qBFYWMjYLITmPDDvEjoUvO3oKw3C8slVtqI/micrometer-jakarta9-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.15.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-jakarta9",
    "versionInfo" : "1.15.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.11",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Maksim Petelin; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.15.11/micrometer-observation-1.15.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cA-E6v1aTkJt3OcT1_9cbs5UBxu0uuHkmgM4q9uB5Og/micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.15.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-observation",
    "versionInfo" : "1.15.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.11",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.15.11/micrometer-registry-prometheus-1.15.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5d6K52nXxk2vPmBYzEF0fYn8USujYz2E2WCvdqedCQc/micrometer-registry-prometheus-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-registry-prometheus",
    "versionInfo" : "1.15.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.3.10/prometheus-metrics-config-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UHTzQ-XwDKf_cEWqR-cvpcQlcwU-pfvxbBTS_IAhu94/prometheus-metrics-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-config",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.3.10/prometheus-metrics-core-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I8gCRyk7q7mtrGouy3qx9_L_d9J22Q7fniMuGpQdoIA/prometheus-metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-core",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10",
    "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.3.10/prometheus-metrics-exposition-formats-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cBUYYlLazSiCq49QjFQGEv_0IoMLV1IgNZxx6wXDkhs/prometheus-metrics-exposition-formats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.3.10/prometheus-metrics-exposition-textformats-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uEL0F2qPRr2_DzJKJNPnpkMtK_rrhzF-Bo4Ja8Nn5U/prometheus-metrics-exposition-textformats-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.3.10/prometheus-metrics-model-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6zzDlJBJZO1fyuySffEYb1Hs4jRARYm1_TBjE8L2pSs/prometheus-metrics-model-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-model",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.3.10/prometheus-metrics-tracer-common-1.3.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pmnxX5WNpK2YLcGxlRBkzm_zwzBqXlXjNJiqRVmC9tA/prometheus-metrics-tracer-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/prometheus-metrics-tracer-common",
    "versionInfo" : "1.3.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-jakarta-2.2.30",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-annotations-jakarta/2.2.30/swagger-annotations-jakarta-2.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/02gAl1gBwVmLNQqQFUu8aE2Dx6skGQ4T64ijY28KG0s/swagger-annotations-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-annotations-jakarta",
    "versionInfo" : "2.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-core-jakarta-2.2.30",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-core-jakarta/2.2.30/swagger-core-jakarta-2.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g1Q-6JHdKwVsSYHmjYBr_yKeutaACfgG1Bvejzq2LLE/swagger-core-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-core-jakarta",
    "versionInfo" : "2.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-models-jakarta-2.2.30",
    "copyrightText" : "Copyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/core/v3/swagger-models-jakarta/2.2.30/swagger-models-jakarta-2.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t06qf7jYbaNmRwUo8vc9ZI2PHq57N2BdVEfaahQ5QqU/swagger-models-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger.core.v3/swagger-models-jakarta",
    "versionInfo" : "2.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vavr-vavr-match-0.9.0",
    "copyrightText" : "Copyright 2024 Vavr",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vavr/vavr-match/0.9.0/vavr-match-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2nG1aNVac0aEXkvOWEzzK46NxJ-hTYsNcIRd6zkK5ak/vavr-match-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vavr/vavr-match@0.9.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://vavr.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vavr/vavr-match",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vavr-vavr-0.9.0",
    "copyrightText" : "Copyright 2024 Vavr",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vavr/vavr/0.9.0/vavr-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EO8RlyjYrTsj6JNtpps3_2S9G-H3MBKeNogj1ubbh3o/vavr-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vavr/vavr@0.9.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://vavr.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vavr/vavr",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4",
    "copyrightText" : "Copyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PRU62PFiEM2QmMRN3dinnHVhUbmo6H2GxaRvzrObX5g/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jakartaee/jaf-api",
    "licenseConcluded" : "(W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain AND OFL-1.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "2.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1",
    "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.el-jakarta.el-api-5.0.0",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 2021 Contributors to the Eclipse Foundation\nCopyright (c) 2018, 2022 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997, 2022 Oracle and/or its affiliates and others\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to the Eclipse Foundation; Dongbin Nie; Eclipse Foundation; Free Software Foundation, Inc.; Kin-man Chung; Oracle and/or its affiliates; Oracle and/or its affiliates and others; The Apache Software Foundation; the Free Software Foundation; the Jakarta Expression Language project",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/el/jakarta.el-api/5.0.0/jakarta.el-api-5.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.el/jakarta.el-api@5.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jFV6KkE4si_gnLdwi4hiGID7mhBWpFVNbiB2vLhDKEM/jakarta.el-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.el",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.el/jakarta.el-api",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1",
    "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.inject/jakarta.inject-api",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.1.0",
    "copyrightText" : "Copyright (c) 2019,2023 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.1.0/jakarta.validation-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yMfcU2isIfMm-gBNn1hsPBt8st490a8Q6w3mAwOEKGc/jakarta.validation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0",
    "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.4",
    "copyrightText" : "Copyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2023 Oracle and/or its affiliates\nCopyright (c) 2018, 2024 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/4.0.4/jakarta.xml.bind-api-4.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RMlHZ4k01NrW_RTZl58d1v5GOkWhF71mLRmKvLJiIjw/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "4.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.activation-javax.activation-api-1.2.0",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1997-2016 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LjJYMFwpDj38_BmEPSzlrFrVXwz7RiIth_QYOzy8oPo/javax.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.activation/javax.activation-api@1.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.activation/javax.activation-api",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2009-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EsDiBfvenrC3SxvU0AYOhakhWVqJRn8aEg4kQMZwUTw/javax.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcp.org/en/jsr/detail?id=250",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.annotation/javax.annotation-api",
    "versionInfo" : "1.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.cache-cache-api-1.1.1",
    "copyrightText" : "Copyright 2011-2016 Oracle America Incorporated\nCopyright 2011-2016 Terracotta, Inc.\nCopyright (c) 2011-2013 Oracle and/or its affiliates\nCopyright (c) 2011-2013 Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/cache/cache-api/1.1.1/cache-api-1.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PNVkgVYSsIaPyY4vQzitdC-nC7be7k7otm4Qnr_tujc/cache-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.cache/cache-api@1.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsr107/jsr107spec",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.cache/cache-api",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.servlet-javax.servlet-api-4.0.1",
    "copyrightText" : "Copyright 2004 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1997-2017 Oracle and/or its affiliates\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nPortions Copyright (c) 1999-2002 The Apache Software Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/servlet/javax.servlet-api/4.0.1/javax.servlet-api-4.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wAvIlriWGyB8zK2_ImePF3cM-mIi9mus9JvFSzA1sQQ/javax.servlet-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.servlet/javax.servlet-api@4.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://javaee.github.io/servlet-spec/",
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.servlet/javax.servlet-api",
    "versionInfo" : "4.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2004-2017 Oracle\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017-2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CNpJdhH9y3bc9jEUmHT-DeW5wAhzb0WKAnGhbQ4q1gc/jaxb-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.xml.bind/jaxb-api",
    "versionInfo" : "2.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.14.1",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.14.1/joda-time-2.14.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.14.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xXnFMyPOpZ6R0hnoMU0tVmTd4tkdqXRsur-xSe-2kiE/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.14.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.7.0",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2017 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2010 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2020 Torbjorn Svensson\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.7.0/jna-platform-5.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6ZZcNOGyiLyIslfl_Q-Aur4GUc6odtBm3oAzYYmOMRo/jna-platform-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.7.0",
    "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.7.0/jna-5.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mv3bgQtu_U1L1Wwvf7KWgJYZ_0ggg5OdETIUymzBcT8/jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna",
    "versionInfo" : "5.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jodah-expiringmap-0.5.9",
    "copyrightText" : "Copyright 2009-2016 Jonathan Halterman",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jodah/expiringmap/0.5.9/expiringmap-0.5.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jodah/expiringmap@0.5.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H_976r3tF_Frmx8_AjRSKdI9fdFVs1NS67BnecaKeEs/expiringmap-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jhalterman/expiringmap/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jodah/expiringmap",
    "versionInfo" : "0.5.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.sourceforge.argparse4j-argparse4j-0.9.0",
    "copyrightText" : "Copyright (c) 2013 Adam Parkin\nCopyright (c) 2015 Andrew\nCopyright (c) 2011 Tatsuhiro Tsujikawa",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/sourceforge/argparse4j/argparse4j/0.9.0/argparse4j-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.sourceforge.argparse4j/argparse4j@0.9.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gkEDCiZjvCFRX2hh-TtzC2VlCnQcxSnsQYOffJWCO5U/argparse4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://argparse4j.github.io",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.sourceforge.argparse4j/argparse4j",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.1",
    "copyrightText" : "Copyright 2009-2025 The Apache Software Foundation\nCopyright 2006-2015 The Guava Authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Chris Beams; Colin Sampaleanu; Juergen Hoeller; Keith Donald; Rob Harrop; Rod Johnson; Sam Brannen; The Apache Software Foundation; The Guava Authors; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro/1.12.1/avro-1.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro@1.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEhl6MJsKkwa8nBQg-sx8O6YPMHRfI8k8Ou8HQFWA6U/avro-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://avro.apache.org",
    "licenseConcluded" : "(0BSD AND BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro",
    "versionInfo" : "1.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.1",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.1/commons-collections4-4.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PVKzsjI3F9MUuNVYbRFYEpRGAWOYzauqnQuRkfYtvQs/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.28.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GeAZl8zP9Io_wlCT9pgjRpi5nAJ3fDA-1s03Lh0SKSU/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.28.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0",
    "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.17.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-5.5.2",
    "copyrightText" : "Copyright 1999-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.5.2/httpclient5-5.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hM5fWGIwWRMsiuIGPdAnLhyiDj0hwSpHtr477k80qwU/httpclient5-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MPL-2.0 AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents.client5/httpclient5",
    "versionInfo" : "5.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-h2-5.3.6",
    "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/core5/httpcore5-h2/5.3.6/httpcore5-h2-5.3.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/52uUI8XPaFoLaddqiXDnI6W7A__vfgksCiT7FiNSiq4/httpcore5-h2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents.core5/httpcore5-h2",
    "versionInfo" : "5.3.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-5.3.6",
    "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/core5/httpcore5/5.3.6/httpcore5-5.3.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aCZWevGVF8EX5ikORwAMG3CGF5ifAiCPxVAKiC87pAA/httpcore5-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents.core5/httpcore5",
    "versionInfo" : "5.3.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/fluent-hc/4.5.14/fluent-hc-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Beykp52o_7Kq-JfqMiy3kjazjuggNjwoJIvwxGBTcVQ/fluent-hc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/fluent-hc",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.13",
    "copyrightText" : "Copyright 1999-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.13/httpclient-4.5.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WU0s2T_wlLNz-1vei88CzigYsnNzAzbEzyU9X_bfRhE/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpmime-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpmime/4.5.14/httpmime-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iDSBHV8O-4GMGB5Qi3lT-Wx5RyBkgmd1fw-9Bz6QwIY/httpmime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpmime",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.54",
    "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2026 The Apache Software Foundation\nCopyright (c) 1999-2026, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2026, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.54/tomcat-embed-core-10.1.54.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.54",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XFb1yaMZw9_3MDzMW5ImYb-tyWWMH7ISN1-0hutNs-k/tomcat-embed-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core",
    "versionInfo" : "10.1.54"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.54",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.54/tomcat-embed-el-10.1.54.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.54",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/130TATW6qFhVQ5P9Cl26k6L9Np49e371kmffMIJqnyo/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "10.1.54"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.54",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.54/tomcat-embed-websocket-10.1.54.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.54",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jW1IxQlH60CalDO3SmzGsZPlN04_rqyv39of1-tpuVk/tomcat-embed-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket",
    "versionInfo" : "10.1.54"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat-tomcat-annotations-api-10.1.54",
    "copyrightText" : "Copyright 1999-2026 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/tomcat-annotations-api/10.1.54/tomcat-annotations-api-10.1.54.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sXB3hDSprXUuttXzMkIRipjUjNdMfSgyyo0-I_RR3bM/tomcat-annotations-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@10.1.54",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat/tomcat-annotations-api",
    "versionInfo" : "10.1.54"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.8.13",
    "copyrightText" : "Copyright (c) 1998-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 1999-2001 Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2000, 2003 IBM Corporation and others\nCopyright (c) 2001 The Apache Software Foundation\nCopyright (c) 2002 Contributors\nCopyright (c) 2002 Palo Alto Research Center, Incorporated\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002 Palo Alto Research Center, Incorporated (PARC). 2004 IBM Corporation\nCopyright (c) 2002, 2010 Contributors\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2002, 2010 Palo Alto Research Center, Incorporated (PARC) and others\nCopyright (c) 2002,2005 Contributors\nCopyright (c) 2002,2010\nCopyright (c) 2002-2006 Contributors\nCopyright (c) 2002-2009 Contributors\nCopyright (c) 2002-2010\nCopyright (c) 2002-2010 Contributors\nCopyright (c) 2003 Contributors\nCopyright (c) 2003 Palo Alto Research Center, Incorporated (PARC)\nCopyright (c) 2003,2010 Contributors\nCopyright (c) 2004 Contributors\nCopyright (c) 2004 IBM\nCopyright (c) 2004 IBM Corporation\nCopyright (c) 2004 IBM Corporation and others\nCopyright (c) 2004, 2013 IBM Corporation\nCopyright (c) 2004, 2013 IBM, VMware\nCopyright (c) 2004, 2017 Contributors\nCopyright (c) 2004,2010 Contributors\nCopyright (c) 2005 Contributors\nCopyright (c) 2005 IBM\nCopyright (c) 2005 IBM Corporation\nCopyright (c) 2005 IBM, Contributors\nCopyright (c) 2005, 2017 Contributors\nCopyright (c) 2005-2008 Contributors\nCopyright (c) 2005-2010 Contributors\nCopyright (c) 2005-2012 Contributors\nCopyright (c) 2005-2017 Contributors\nCopyright (c) 2006 Contributors\nCopyright (c) 2006 IBM\nCopyright (c) 2006 IBM Corporation and others\nCopyright (c) 2006-2008 Contributors\nCopyright (c) 2007 Contributors\nCopyright (c) 2008 Contributors\nCopyright (c) 2009 Contributors\nCopyright (c) 2010 Contributors\nCopyright (c) 2010 SpringSource, Contributors\nCopyright (c) 2011 Contributors\nCopyright (c) 2012 Contributors\nCopyright (c) 2012 VMware, Inc\nCopyright (c) 2013 Contributors\nCopyright (c) 2013 VMware\nCopyright (c) 2014 Contributors\n\nAuthors: Abraham Nevado; a ClassWriter; Adrian Colyer; <A HREF http://www.inf.fu-berlin.de/~ehaase'> E. Haase; <A HREF http://www.inf.fu-berlin.de/~ehaase'> Enver Haase; <A HREF http://www.vmeng.com/beard'> Patrick C. Beard; <A HREF markus.dahm@berlin.de'> M. Dahm; Alexander Kriegisch; Alexandre Vasseur; alex@gnilux.com Alexandre Vasseur; Andy Clement; Andy Clement, Abraham Nevado; A. Nevado; colyer Annotation; colyer Creates; colyer Facade; colyer Implementors; colyer Instances; colyer Marker; colyer Matches; Contributors; David Dixon-Peugh; David Knibb; Erik Hilsdale; IBM; IBM, Contributors; IBM Corporation; IBM Corporation and others; IBM, VMware; Jim Hugunin; Konstantin Shagin <konst@cs.technion.ac.il>; Kris De Volder; Lyor Goldstein; Mik Kersten; Palo Alto Research Center, Incorporated; Palo Alto Research Center, Incorporated (PARC); Palo Alto Research Center, Incorporated (PARC) and others; Palo Alto Research Center, Incorporated (PARC). IBM Corporation; Ron Bodkin; SpringSource, Contributors; The Apache Software Foundation; the Apache Software Foundation (http://www.apache.org/); the PatternParser; VMware; VMware, Inc.; Xerox Corporation, Palo Alto Research Center, Incorporated; Xerox Corporation, Palo Alto Research Center, Incorporated (PARC)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aspectj/aspectjweaver/1.8.13/aspectjweaver-1.8.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UMwJxf9uS8uGCgJq56XprR9QoZ0DGVXlods0gijl2Fo/aspectjweaver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aspectj/aspectjweaver@1.8.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.aspectj.org",
    "licenseConcluded" : "EPL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aspectj/aspectjweaver",
    "versionInfo" : "1.8.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.84",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\n(c) a href https://drive.google.com/file/d/1jEECOq-pD1mdgu-9MPFkucCaeK11C4Bz/view?usp\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.84/bcpkix-jdk18on-1.84.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wnus6SV3qVDuor8Y3BQdSiRbUtK0-Oq2cWPCBwx0AEs/r1rv84.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.84",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.84"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.84",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\n(c) a href https://drive.google.com/file/d/1jEECOq-pD1mdgu-9MPFkucCaeK11C4Bz/view?usp",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.84/bcprov-jdk18on-1.84.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lfTUSfmhOSEIgq16CtuzeCNH7JMpKZ8SbdrJLqj9Gvw/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.84"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.84",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\n(c) a href https://drive.google.com/file/d/1jEECOq-pD1mdgu-9MPFkucCaeK11C4Bz/view?usp\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.84/bcutil-jdk18on-1.84.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.84",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wnus6SV3qVDuor8Y3BQdSiRbUtK0-Oq2cWPCBwx0AEs/r1rv84.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.84"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.angus-angus-activation-2.0.3",
    "copyrightText" : "Copyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021, 2023 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/angus/angus-activation/2.0.3/angus-activation-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.angus/angus-activation@2.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8C6vqEnhrViwmsXeJMFLXzdbeOMDoa6FklM3PoClGlE/angus-activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.angus/angus-activation",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-core-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2016 Amazon Web Services\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2016 Bosch Software Innovations GmbH.\nCopyright (c) 2015 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2014 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2019 Lari Hotari and others\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2016 Sierra Wireless and others\nCopyright (c) 2015 Wireless Networks Group, UPC Barcelona\nCopyright (c) 2015, 2017 Wireless Networks Group, UPC Barcelona, i2CAT and others\n(c) 2014-2022 Institute for Pervasive Computing, ETH Zurich and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: Amazon Web Services; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch Software Innovations GmbH.; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; Lari Hotari and others; QOS.ch; Sierra Wireless and others; VeriSign, Inc.; Wireless Networks Group, UPC Barcelona; Wireless Networks Group, UPC Barcelona, i2CAT and others; the Eclipse Californium CoAP Framework project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/californium-core/3.7.0/californium-core-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/californium-core@3.7.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RVj593DYB3fnhVW6ow26UICaY6OtmutMYeT_POJ3sAE/californium-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/californium-core",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-proxy2-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 2007, Eclipse Foundation, Inc. and its licensors.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2015 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2017 NTNU Gjovik and others\nCopyright (c) 2004-2017 QOS.ch\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/californium-proxy2/3.7.0/californium-proxy2-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AIWr20TPyBBmsYsz8wN-QUp03ZK9L-vzSwonHIFvT9M/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/californium-proxy2@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(EPL-1.0 AND CDDL-1.1 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/californium-proxy2",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-cf-oscore-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2018 Bosch Software Innovations GmbH and others\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2018, Ludwig Seitz, RISE\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2018 RISE SICS and others\nCopyright (c) 2022 RISE and others\nCopyright (c) 2018, Rikard Hoglund, RISE SICS\nCopyright (c) 2018, Tobias Andersson, RISE\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/cf-oscore/3.7.0/cf-oscore-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uKcRGvJo6QzmjEqIe-ftjkMety-WZqYa9U5t8r1CEss/cf-oscore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/cf-oscore@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/cf-oscore",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-element-connector-3.7.0",
    "copyrightText" : "Copyright (c) 2016\nCopyright (c) 2019 Andrei-Marius Longhin and others\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2015 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2015 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2015, 2017 Robert Harder and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: Andrei-Marius Longhin and others; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; QOS.ch; Robert Harder; Robert Harder and others; VeriSign, Inc.; rob@iharder.net; the Eclipse Californium CoAP Framework project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/element-connector/3.7.0/element-connector-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XD3hlY6mgwtP-TvKfr5p0nhtZq7MEecdGDRjSqVOQmA/element-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/element-connector@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/element-connector",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.californium-scandium-3.7.0",
    "copyrightText" : "Copyright 2018 University of Rostock, Institute of Applied Microelectronics and Computer Engineering\nCopyright (c) 2016\nCopyright (c) 2022 AVSystem and others\nCopyright (c) 2022 Achim Kraus and others\nCopyright (c) 2020 Bosch IO GmbH and others\nCopyright (c) 2019 Bosch Software Innovations GmbH and others\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2007, Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2015 Institute for Pervasive Computing, ETH Zurich and others\nCopyright (c) 2016, Jim Schaad\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2015 Sierra Wireless\nCopyright (c) 2020 Sierra Wireless and others\nCopyright (c) 2020 Softech and others\n(c) 2008 VeriSign, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: AVSystem and others; Achim Kraus and others; Bosch IO GmbH and others; Bosch Software Innovations GmbH and others; Bosch.IO GmbH and others; Contributors to the Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Institute for Pervasive Computing, ETH Zurich and others; Jim Schaad; QOS.ch; Sierra Wireless; Sierra Wireless and others; Softech and others; University of Rostock, Institute of Applied Microelectronics and Computer Engineering; VeriSign, Inc.; the Eclipse Californium CoAP Framework project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/californium/scandium/3.7.0/scandium-3.7.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oR7gk0NJkxAh2tKaYgtYW6Jz-X-eDosiiky75GO1KeU/scandium-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.californium/scandium@3.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.eclipse.org/californium/",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.californium/scandium",
    "versionInfo" : "3.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.25/jetty-util-ajax-12.0.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MlBdgH06sFwFG34mdFmktMfqBaBZVME3axZ1TNJ5fec/jetty-util-ajax-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "12.0.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.25/jetty-util-12.0.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fyRe10si-Sp2CYEl8KFav6V6nFhhnN6Ii1XfzmRPsYw/jetty-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "12.0.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-cf-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2017 Bosch Software Innovations GmbH and others\nCopyright (c) 2013-2016 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-core-cf/2.0.0-M9/leshan-core-cf-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-core-cf@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YKDhWyMtlPzPhFaitcfZlTBG5VcblZ32stPuIjEnYIA/leshan-core-cf-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-core-cf",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-2.0.0-M9",
    "copyrightText" : "Copyright 2017 Open Mobile Alliance\nCopyright 2017 Open Mobile Alliance Ltd.\nCopyright (c) 2015 Bosch Software Innovations GmbH and others\nCopyright (c) Data Geekery GmbH (http://www.datageekery.com)\nCopyright (c) 2021 Orange\nCopyright (c) 2017 RISE SICS AB.\nCopyright (c) 2013-2015 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-core/2.0.0-M9/leshan-core-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-core@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/giL4KR_Oifv-jtDOE7805ftvr4AS9QpAQHMUhMrEcaU/leshan-core-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-core",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-cf-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2013-2015 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-server-cf/2.0.0-M9/leshan-server-cf-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-server-cf@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T_N6FFR-8OigukeofBPdwzDCWC7I3a8Ce8B3PpXO0X0/leshan-server-cf-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-server-cf",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-core-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2017 Bosch Software Innovations GmbH and others\nCopyright (c) 2018 NTELS and others\nCopyright (c) 2017 RISE SICS AB.\nCopyright (c) 2013-2015 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-server-core/2.0.0-M9/leshan-server-core-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-server-core@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sDB0UTX2lsFtrO2zlWVebQwqKBI6HqGMaTvCnnyRTYE/leshan-server-core-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-server-core",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-redis-2.0.0-M9",
    "copyrightText" : "Copyright (c) 2017 Bosch Software Innovations GmbH and others\nCopyright (c) 2013-2016 Sierra Wireless and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/leshan/leshan-server-redis/2.0.0-M9/leshan-server-redis-2.0.0-M9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.leshan/leshan-server-redis@2.0.0-M9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PWSeayvwpRv1wF-ypzqNCItqza1lrafcAnX0a7PjOVY/leshan-server-redis-~-M9-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://eclipse.org/leshan",
    "licenseConcluded" : "(BSD-3-Clause AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.leshan/leshan-server-redis",
    "versionInfo" : "2.0.0-M9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-107-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-107/3.10.9/ehcache-107-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J3x8vsPMQozlY2-EA4SEdIWSSKqGAYH0r7n-3yFm6Ec/ehcache-107-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-107@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-107",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-api-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-api/3.10.9/ehcache-api-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KzQHNQNuCIrYi6ObDL_FMtmQC0Kp6Iseda9n65kTK04/ehcache-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-api@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-api",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-core-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-core/3.10.9/ehcache-core-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2gEsXxiPGdnH2D5W7EMOM-s_U6ffKCuCsNIQoeuThIg/ehcache-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-core@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-core",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-impl-3.10.9",
    "copyrightText" : "Copyright 2014-2023 Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-impl/3.10.9/ehcache-impl-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RA5Y3oozagHU1h2Xx_ZbNMPfSRpQlCOp3q21p8rK-BA/ehcache-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-impl@3.10.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-impl",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-spi-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-xml-spi/3.10.9/ehcache-xml-spi-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-xml-spi@3.10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l8xwenZ0V-CQFuo51zT5rTLDPwR0cM2j0yxLg2TzpnA/ehcache-xml-spi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-xml-spi",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-3.10.9",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/modules/ehcache-xml/3.10.9/ehcache-xml-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache.modules/ehcache-xml@3.10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G3GP7ph3CqA8TIu8rIkkMN24ByvWgRuK1s_gqP2O0kQ/ehcache-xml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache.modules/ehcache-xml",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache-ehcache-3.10.9",
    "copyrightText" : "Copyright 2015-2023 Terracotta, Inc., a Software AG company\nCopyright 2020 Terracotta, Inc., a Software AG company\nCopyright (c) 2012-2023 Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates\nCopyright (c) license.git.copyrightExistenceYears Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates\nCopyright license.git.copyrightExistenceYears Terracotta, Inc., a Software AG company\ncopyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/ehcache/3.10.9/ehcache-3.10.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache/ehcache@3.10.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/28AjqGmRjOdsq9xQa3tABsRJFqBHyC0TaUk5LiKMm68/ehcache-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://ehcache.org",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache/ehcache",
    "versionInfo" : "3.10.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ehcache-sizeof-0.4.3",
    "copyrightText" : "Copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ehcache/sizeof/0.4.3/sizeof-0.4.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ehcache/sizeof@0.4.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b_pz32gOqJWC2yTjITOXtfO0MmaLYeuKwxRbKegwXsE/sizeof-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ehcache/sizeof",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ehcache/sizeof",
    "versionInfo" : "0.4.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.expressly-expressly-5.0.0",
    "copyrightText" : "Copyright (c) 2022 Contributors to Eclipse Foundation\nCopyright (c) 2022 Contributors to the Eclipse Foundation\nCopyright (c) 2018, 2022 Eclipse Foundation\nCopyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2021 Oracle and/or its affiliates and others\nCopyright (c) 2021 Payara Services Ltd.\n\nAuthors: Contributors to Eclipse Foundation; Contributors to the Eclipse Foundation; Eclipse Foundation; Jacob Hookom; Jacob Hookom jacob@hookom.net; Kin-man Chung; Oracle and/or its affiliates; Oracle and/or its affiliates and others; Payara Services Ltd.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/expressly/expressly/5.0.0/expressly-5.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.expressly/expressly@5.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WfF94qiKEcgQxR3suHQgagR2icIT1XSHFIyyxOzBylw/expressly-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.expressly",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.expressly/expressly",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6",
    "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-core-4.0.6",
    "copyrightText" : "Copyright (c) 2025 Contributors to the Eclipse Foundation\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2020, 2023 Oracle and/or its affiliates\n\nAuthors: Bhakti Mehta (bhakti.mehta@sun.com); Contributors to the Eclipse Foundation; David Megginson, david@megginson.com; Iaroslav Savytskyi; Kohsuke Kawaguchi; Kohsuke Kawaguchi (kk@kohsuke.org); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com), Martin Grebac (martin.grebac@oracle.com); Kohsuke Kawaguchi, Sun Microsystems, Inc.; Martin Grebac; Oracle and/or its affiliates; Philippe Marschall; Roman Grigoriadi (roman.grigoriadi@oracle.com); Vivek Pandey",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/jaxb-core/4.0.6/jaxb-core-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DWpjZgRvsdsGszniqw-ldsDg9m2Q2bXSs799I0rSRWA/jaxb-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND MIT AND SAX-PD AND xpp AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/jaxb-core",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-runtime-4.0.6",
    "copyrightText" : "Copyright (c) 2025 Contributors to the Eclipse Foundation\nCopyright (c) 2013, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\n\nAuthors: Bhakti Mehta; Bhakti Mehta (bhakti.mehta@sun.com); Contributors to the Eclipse Foundation; David Megginson; Kohsuke Kawaguchi; Kohsuke Kawaguchi (kk@kohsuke.org); Kohsuke Kawaguchi (kohsuke.kawaguchi@sun.com); Kohsuke Kawaguchi, Martin Grebac; Martin Grebac; Oracle and/or its affiliates; Paul Sandoz; Paul.Sandoz@Sun.Com; Ryan Shoemaker; Ryan Shoemaker, Martin Grebac; Ryan.Shoemaker@Sun.COM; Vivek Pandey",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/jaxb-runtime/4.0.6/jaxb-runtime-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FovgkyX2PEnJlHxQ6Pj_tkrlbRL0THQ9EY_nF3NNP0o/jaxb-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND MIT AND SAX-PD AND xpp AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/jaxb-runtime",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jaxb-txw2-4.0.6",
    "copyrightText" : "Copyright (c) 2005, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jaxb/txw2/4.0.6/txw2-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jaxb/txw2@4.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XVDkOrsmPzUxnzx9M54ykW8Y2AMxtfcCrbMAB4qx2kI/txw2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND MIT AND SAX-PD AND xpp AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jaxb/txw2",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.11/jersey-apache-connector-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SQGAvKCLb_YeIGpdm5DjRAFzHDlA3HXaKH0uoJhOIE/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.11/jersey-client-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFjkdmYyZIHDOWs70Y5lX-e5ktE_v-nP68lBbE6IWc0/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.11/jersey-common-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3lGNO9mwu28Bux_-Nu4u-Z-oHnHcwzF4DrIghQIHeY/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.11/jersey-hk2-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TebQJATQdwGRUPpC7VduvmcqQ2dc1hXux_4MMMU9sA0/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.11/jersey-media-multipart-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l7JeW-thtrqp3-KRhvIyVi8fupF-HoJOx5jPiVp5Bv8/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final",
    "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.3.Final/hibernate-validator-8.0.3.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xGDFrb_wMfreSEhbwws_H9EC2UHSwbM5qieHyeehJ2U/hibernate-validator-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.3.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://hibernate.org/validator",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hibernate.validator/hibernate-validator",
    "versionInfo" : "8.0.3.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0",
    "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TooTallNate/Java-WebSocket",
    "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.java-websocket/Java-WebSocket",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.30.2-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final",
    "copyrightText" : "Copyright 2023 Red Hat, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.3.Final/jboss-logging-3.6.3.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uvI3EFUkHy5LdLFSEGRYKeGb49613nbl5zJk5Fw1lJw/jboss-logging-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.jboss.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jboss.logging/jboss-logging",
    "versionInfo" : "3.6.3.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.json-json-20231013",
    "copyrightText" : "Copyright 2015 the original author or authors\n\nAuthors: JSON.org",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/json/json/20231013/json-20231013.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.json/json@20231013",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NDFvCDmzxJLiKl6rOTzRVQwIsTGQ4B39xCydCga2lyE/json-20231013-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/douglascrockford/JSON-java",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.json/json",
    "versionInfo" : "20231013"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.22.1",
    "copyrightText" : "Copyright (c) 2009-2025 Jonathan Hedley <https://jsoup.org/>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jsoup/jsoup/1.22.1/jsoup-1.22.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jsoup/jsoup@1.22.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Greq1FYbl06EQ-a4G7E3DYfLbyMgYN8RLEv16_dIY2Q/jsoup-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jsoup.org/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jsoup/jsoup",
    "versionInfo" : "1.22.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0",
    "copyrightText" : "Copyright 2018-2020 The JSpecify",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jspecify.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jspecify/jspecify",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.30",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pqVVM-WoMp58kjcRiogntZJoEux-WQHghjS5Uh8QOTM/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "1.7.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-2.6",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2018, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/snakeyaml/snakeyaml-engine/2.6/snakeyaml-engine-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pF85xvhza3A0vgXufS8vsFmVjBSnHJqX-M1Esgrhq1c/snakeyaml-engine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml-engine",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.snakeyaml/snakeyaml-engine",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-common-2.8.9",
    "copyrightText" : "Copyright 2019-2023 the original author or authors\n\nAuthors: Anton Tkachenko tkachenkoas@gmail.com; Claudio Nave; Gibah Joseph; the original author or authors; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/OAuth2AuthorizationServerMetadata.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/http/converter/OAuth2TokenIntrospectionHttpMessageConverter.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/OidcClientRegistration.java; yuta.saito https://github.com/spring-projects/spring-authorization-server/blob/main/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/OidcProviderConfiguration.java; yuta.saito https://github.com/spring-projects/spring-security/blob/main/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/DefaultOAuth2AccessTokenResponseMapConverter.java",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-common/2.8.9/springdoc-openapi-starter-common-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qf71o1tOMGgeBrek0JHlRynN9l4rHAW8UOXb7rFDjjs/springdoc-openapi-starter-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-common@2.8.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-common",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-api-2.8.9",
    "copyrightText" : "Copyright 2019-2023 the original author or authors\n\nAuthors: bnasslahsen, Azige; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-webmvc-api/2.8.9/springdoc-openapi-starter-webmvc-api-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-webmvc-api@2.8.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rtFaValrsmS3nFMH84EOc8N5UMukokS0gLHAWGMJdcA/springdoc-openapi-starter-webmvc-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-webmvc-api",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-ui-2.8.9",
    "copyrightText" : "Copyright 2019-2023 the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springdoc/springdoc-openapi-starter-webmvc-ui/2.8.9/springdoc-openapi-starter-webmvc-ui-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springdoc/springdoc-openapi-starter-webmvc-ui@2.8.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DuEyj7ezJq7KitgvVYcsc6kmwceW7kREr6rN640hYFY/springdoc-openapi-starter-webmvc-ui-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springdoc/springdoc-openapi-starter-webmvc-ui",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael Berry; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Wick Dynex; Yanming Zhou; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.5.14/spring-boot-actuator-autoconfigure-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DqzFL74c8otjCI6YfJRgeuyI3rJDMo0i3bZLfb5_prY/spring-boot-actuator-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nabil Fawwaz Elqayyim; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Tommy Karlsson; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Xiong Tang; Young Jae; Yulin Qin; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.5.14/spring-boot-actuator-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZHKV9XJI0tSBG5y59_9WWiZqEA264mY_rTmgq9pgeL8/spring-boot-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmitry Sulman; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Florian Lemaire; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Pedro Xavier Leite Cavadas; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.5.14/spring-boot-autoconfigure-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ESVSm8m6Wok3ImfAFyF4tYw8aSv1x1dtcAx7fxlWhRo/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/3.5.14/spring-boot-starter-actuator-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XIhwGNOz-6q17lBE-981FNnbMbY0ijShf8Ayk1T_ldk/spring-boot-starter-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-actuator",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-cache-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-cache/3.5.14/spring-boot-starter-cache-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cpQLHkcjfgvhO3z-KUd3NYJ4ukg1aUcYBQGIWhbkSbo/spring-boot-starter-cache-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-cache@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-cache",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/3.5.14/spring-boot-starter-json-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DSQygokC84nMs7CuteKYy3O4qB5M07z_i-xhA-P2sAM/spring-boot-starter-json-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-json",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.5.14/spring-boot-starter-logging-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qtd2UB-IxhjmlPBNcPL-gI7YxRumT5BRbcOloV4iyEM/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-security/3.5.14/spring-boot-starter-security-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i2Tw9CjjYhmzt5b36K2RHgxp7Htu7YpBILdrK-As3YU/spring-boot-starter-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-security@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-security",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/3.5.14/spring-boot-starter-tomcat-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XoxEAMBFAq7KJtuFI-5RBNCT88TBx8qlkOdjX_1eX6A/spring-boot-starter-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-validation/3.5.14/spring-boot-starter-validation-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-validation@3.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sR8B25Gjdxzufq06bV6NmxfLmumpk-JUQJ7a6kvs2nw/spring-boot-starter-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-validation",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/3.5.14/spring-boot-starter-web-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/awnUyv512xB-PJmbAfkQqWep1YXt_ouCXi8cq76PwKk/spring-boot-starter-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-web",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.5.14/spring-boot-starter-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aek6_Q0sP6oEPh0SfXqZ3G7XRLSr8wQ18Lk5RuJCcfI/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.14",
    "copyrightText" : "Copyright (c) 2012-2026 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andrey Litvitski; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daeho Kwon; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nan Chiu; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.5.14/spring-boot-3.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p_kV7NiDTn5L9F56RUVWA7gmejARbCxEn5ia_psbvqc/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "3.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.10",
    "copyrightText" : "Copyright 2004-present the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ding Hao; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne <ch4mp@c4-soft.com>; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Pat McCusker; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/6.5.10/spring-security-config-6.5.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qHXHmR5KgYv_pZjz7giFpgO-MtQotBiIcGPUZ68oLOw/spring-security-config-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@6.5.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-config",
    "versionInfo" : "6.5.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.10",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/6.5.10/spring-security-core-6.5.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OI-nSDRqIlE-lLBMVz-JBjObb_mTyuek53Kn-rcaHsI/spring-security-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@6.5.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-core",
    "versionInfo" : "6.5.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.10",
    "copyrightText" : "Copyright (c) 2006 Damien Miller <djm@mindrot.org>\nCopyright 2004-present the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/6.5.10/spring-security-crypto-6.5.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/B7opM1r4ttFQuhUzWxeN1M3IvULwfJGGT1tvd36bXu4/spring-security-crypto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@6.5.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-crypto",
    "versionInfo" : "6.5.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.10",
    "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Claudenir Freitas; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Daeho Kwon; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Michal Okosy; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Nikita Konev; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sangyoon Jeong; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Yoobin Yoon; Zeeshan Adnan; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/6.5.10/spring-security-web-6.5.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yIGNCCppwQCS_n6EECzVsty2_1XQzVTpS653DDL5yyk/spring-security-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@6.5.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-security",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.security/spring-security-web",
    "versionInfo" : "6.5.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.18/spring-aop-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BN35spFI_F6T2s6NdQshCa_bdzJuqzWqLTSXg7JcVXI/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.18/spring-beans-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zBJvq17usQVcEcacpHEmwrmtwOsnzghMNi3x_Qhicww/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2019 the original author or authors\n\nAuthors: Alef Arendsen; Ben Manes; Brian Clozel; Chris Beams; Darren Davison; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Rob Harrop; Sam Brannen; Sebastien Deleuze; Stas Volsky; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context-support/6.2.18/spring-context-support-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UDERak4CY0Ph8RCsrIr0JDup4y6A944Qr8-HYviXRyw/spring-context-support-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context-support@6.2.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context-support",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.18/spring-context-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2IIFFJzeLY8kerVKS0Ein64urxQ6kgwbrwEmJjJJ02M/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.18/spring-core-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7dlhB4MvS-ix2-QalZ4i3vzVl2aYni55FWl-3LYL4t0/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.18/spring-expression-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/075xgnIqZ_DoQb8CNpnE9uTfZc6vCOhcG-Uk_2qddIQ/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.18/spring-jcl-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8T5u8kI9NI5dKQaquoGDawPe1ivh93_R5Kklcyjub-M/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.18/spring-web-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ipsqHTJWF6D5xeGypyFcV14crR8SsV9-5JvDcEyTF6E/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.18",
    "copyrightText" : "Copyright 2006-2026 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2026 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Taeik Lim; Thomas Risberg; Vedran Pavic; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.18/spring-webmvc-6.2.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.18",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/miw8ZdisGX0zpZdPOIM8DxTQuakMSt5C1CF1lWzepDY/spring-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-webmvc",
    "versionInfo" : "6.2.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-fast-restartable-store-1.6.10",
    "copyrightText" : "Copyright (c) 2012-2023 Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates\nCopyright (c) license.git.copyrightExistenceYears Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/fast-restartable-store/1.6.10/fast-restartable-store-1.6.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/fast-restartable-store@1.6.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WTkEMYKVveoQpY3y4BfS47HUP7p0zaSUe6LfNh5CA84/fast-restartable-store-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/fast-restartable-store",
    "versionInfo" : "1.6.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-offheap-store-2.5.5",
    "copyrightText" : "Copyright 2015-2023 Terracotta, Inc., a Software AG company\nCopyright license.git.copyrightExistenceYears Terracotta, Inc., a Software AG company\ncopyright (c) Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/offheap-store/2.5.5/offheap-store-2.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/offheap-store@2.5.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BPL72_eejnomVhyGSdsQwsQRgohgsF_w9OUkwHUAA9k/offheap-store-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Terracotta-OSS/offheap-store/",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/offheap-store",
    "versionInfo" : "2.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-statistics-2.1.2",
    "copyrightText" : "copyright Terracotta, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/statistics/2.1.2/statistics-2.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/statistics@2.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kP5J4FAqav6FbnoVylmgl5lDAmw4lXBLaheY0bE3h-I/statistics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Terracotta-OSS/statistics",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/statistics",
    "versionInfo" : "2.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.terracotta-terracotta-utilities-tools-0.0.17",
    "copyrightText" : "Copyright 2020 Terracotta, Inc., a Software AG company",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/terracotta/terracotta-utilities-tools/0.0.17/terracotta-utilities-tools-0.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nVoqFQoc4ElVy5dMJkpRMErjeghS9RGttX-4ft4ys6E/terracotta-utilities-tools-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.terracotta/terracotta-utilities-tools@0.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Terracotta-OSS/terracotta-utilities/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.terracotta/terracotta-utilities-tools",
    "versionInfo" : "0.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.webjars-swagger-ui-5.21.0",
    "copyrightText" : "Copyright Angel Marin, Paul Johnston 2000 - 2009. Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet\nCopyright Joyent, Inc. and other Node contributors\nCopyright Paul Johnston 2000 - 2002. Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet Distributed\nCopyright 2020-2021 SmartBear Software Inc.\nCopyright (c) 2013-2018 Viacheslav Lotsmanov\n(c) 2014-2025 Denis Pushkarev\n\nAuthors: Angel Marin, Paul Johnston - Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet; Denis Pushkarev; Feross Aboukhadijeh <https://feross.org>; Joyent, Inc. and other Node contributors; Paul Johnston - Other contributors Greg Holt, Andrew Kepert, Ydnar, Lostinet Distributed; SmartBear Software Inc.; Viacheslav Lotsmanov; Viacheslav Lotsmanov <lotsmanov89@gmail.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/webjars/swagger-ui/5.21.0/swagger-ui-5.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4OA3cyCKfW8CpSV8F3UsTZnLzrYERgqSPHt1n2n2wmE/v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.webjars/swagger-ui@5.21.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.webjars.org",
    "licenseConcluded" : "(BlueOak-1.0.0 AND CC-BY-4.0 AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND Apache-2.0 AND ISC AND CC0-1.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.webjars/swagger-ui",
    "versionInfo" : "5.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.webjars-webjars-locator-lite-1.1.3",
    "copyrightText" : "Copyright (c) 2013 James Ward",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/webjars/webjars-locator-lite/1.1.3/webjars-locator-lite-1.1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.webjars/webjars-locator-lite@1.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1p-P7JhYazV4D5b6TR45farOK0Q1A7VM_vd4W7gguPE/webjars-locator-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://webjars.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.webjars/webjars-locator-lite",
    "versionInfo" : "1.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO38iEj-NCzAqI21sz6Ktwg7iVuQ5IRLxSB8qyAgRHA/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-animations-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/animations/-/animations-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/animations@20.3.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z0O7DzEaCHL4pa2Uxaf8yqxvpRQqqCRE0AkyYk4SCOA/angular-animations-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/animations",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-cdk-20.2.14",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2025 Google LLC.",
    "downloadLocation" : "https://registry.npmjs.org/@angular/cdk/-/cdk-20.2.14.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/cdk@20.2.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YCuc5lPxxPlTem9Sxne0zwTvjk2JFVGXGruO796NlKA/angular-cdk-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/components#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/cdk",
    "versionInfo" : "20.2.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-common-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/common/-/common-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/common@20.3.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFZguJkX9_8Mhq0gBknGf_R-cHfdYfvte5FtA5LRDGQ/angular-common-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/common",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-compiler-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/compiler/-/compiler-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/compiler@20.3.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FxtF7ubk9KCwTIgjs6ovS926zgxO40D8ScAdcJSvpvw/angular-compiler-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/compiler",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-core-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev\n(c) 2010-2025 Google LLC. https://angular.io",
    "downloadLocation" : "https://registry.npmjs.org/@angular/core/-/core-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/core@20.3.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PjpptxAF5TV4_iTK0FjWskED9hqH79qyFba9UkOB3bY/angular-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/core",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-forms-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/forms/-/forms-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/forms@20.3.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TBuH-qwKkWAGEv7Z7-fM8XhulPxbg9GUgp3e0yY7KFw/angular-forms-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/forms",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-platform-browser-dynamic-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/platform-browser-dynamic@20.3.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nPgePUyqyV9eaWskw6S_9eS30eM1GegXw-PD-u6WR-A/angular-platform-browser-dynamic-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/platform-browser-dynamic",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-platform-browser-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Vm8mAUHQX31vqA9fdjXrt7uqVHTee7u_8VTd_VnF5Zw/angular-platform-browser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/platform-browser@20.3.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/platform-browser",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angular-router-20.3.25",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.dev",
    "downloadLocation" : "https://registry.npmjs.org/@angular/router/-/router-20.3.25.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nDG_Eb2JhQDH1QbXJRUYV4GFVxR_tOCQDca0LPyLDf0/angular-router-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40angular/router@20.3.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular/tree/main/packages/router",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@angular/router",
    "versionInfo" : "20.3.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fontsource-public-sans-5.2.7",
    "copyrightText" : "Copyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans)\nCopyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans) OFL-1.1 (https://openfontlicense.org)\nCopyright 2015 The Public Sans Project Authors (https://github.com/uswds/public-sans) PublicSans-Italic\n\nAuthors: Google Inc , license' OFL-1.1 homepage' https://fontsource.org/fonts/public-sans; The Public Sans Project Authors; The Public Sans Project Authors OFL-1.1; The Public Sans Project Authors PublicSans-Italic",
    "downloadLocation" : "https://registry.npmjs.org/@fontsource/public-sans/-/public-sans-5.2.7.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40fontsource/public-sans@5.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kku5wD27cHouzwxJIZzboVW3Aj_QvCpCZ1dOFgkxtSU/fontsource-public-sans-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://fontsource.org/fonts/public-sans",
    "licenseConcluded" : "OFL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@fontsource/public-sans",
    "versionInfo" : "5.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-formly-core-6.1.3",
    "copyrightText" : "(c) Zeno Rocha\nCopyright (c) 2016 FormlyJS\nCopyright 2021 Formly\nCopyright Google LLC",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-formly/core/-/core-6.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-formly/core@6.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1K0C-6gCcy-8Zgrr632HBIx1JJYEqb9RMdXWbC5s3fg/ngx-formly-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-formly/ngx-formly#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-formly/core",
    "versionInfo" : "6.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-formly-core-6.3.5",
    "copyrightText" : "Copyright 2021 Formly\nCopyright Google LLC\nCopyright (c) 2016 FormlyJS\n(c) Zeno Rocha",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-formly/core/-/core-6.3.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-formly/core@6.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i66S2FdVTiePUSNyQb6peVuc8cyQMSRr3n5pIUd9B7g/ngx-formly-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-formly/ngx-formly#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-formly/core",
    "versionInfo" : "6.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-translate-core-15.0.0",
    "copyrightText" : "Copyright (c) 2023 Olivier Combe",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-translate/core/-/core-15.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-translate/core@15.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ea26UV37U3nkCDv2Wq2bNvw0shkBuLoy3SXUARb44Us/ngx-translate-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-translate/core",
    "versionInfo" : "15.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-translate-core-17.0.0",
    "copyrightText" : "Copyright (c) 2024 Andreas Low / CodeAndWeb GmbH\nCopyright (c) 2018 Olivier Combe",
    "downloadLocation" : "https://registry.npmjs.org/@ngx-translate/core/-/core-17.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40ngx-translate/core@17.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ravQZBc9oH3aBtP6-CR-q5VCYoanECa1EiKKtBBv0Fg/ngx-translate-core-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ngx-translate/core#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@ngx-translate/core",
    "versionInfo" : "17.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-cometd-4.0.8",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/@types/cometd/-/cometd-4.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/cometd@4.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jQ8uwmzCbSW9kj5DJ73srKG6XYQ24-6KfNpebDopTz4/types-cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cometd",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/cometd",
    "versionInfo" : "4.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-node-20.19.43",
    "copyrightText" : "Copyright Node.js contributors\nCopyright (c) Microsoft Corporation\n\nAuthors: (https://github.com/NodeJS), Linus Unneback (https://github.com/LinusU); Microsoft Corporation; Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias); Node.js contributors",
    "downloadLocation" : "https://registry.npmjs.org/@types/node/-/node-20.19.43.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/node@20.19.43",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hFU8ZKR-YH7SOAS7dPtp6DEhoujMOpifozEcBsLLfxo/types-node-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/node",
    "versionInfo" : "20.19.43"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-types-trusted-types-1.0.6",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-1.0.6.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40types/trusted-types@1.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1eM6bgi9CNkqbiAAM9S-S9EFFlxaA_0GJIXZa7dSPzY/types-trusted-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/trusted-types",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@types/trusted-types",
    "versionInfo" : "1.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zip.js-zip.js-2.7.71",
    "copyrightText" : "Copyright (c) 2023, Gildas Lormeau\n(c) Emily Stark, Mike Hamburg, Dan Boneh, Stanford University 2008-2010",
    "downloadLocation" : "https://registry.npmjs.org/@zip.js/zip.js/-/zip.js-2.7.71.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LFfHtwBBUtRxt7xa14YLGv9bfIBRxWtmo78zk-MqWcE/zip.js-zip.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/%40zip.js/zip.js@2.7.71",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gildas-lormeau.github.io/zip.js",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/@zip.js/zip.js",
    "versionInfo" : "2.7.71"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-formats-3.0.1",
    "copyrightText" : "Copyright (c) 2020 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DA7YDThbNVa2NueC5SlUxf2wZxEqzgCFJkYmxcQV9ho/ajv-formats-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv-formats@3.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ajv-validator/ajv-formats#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv-formats",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ajv-8.20.0",
    "copyrightText" : "Copyright (c) 2015-2021 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DCsSWdqddQGrTf-3fsOWKPDIJNFi-MMX1b1xlVRDmsw/ajv-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ajv@8.20.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://ajv.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ajv",
    "versionInfo" : "8.20.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-angularx-qrcode-20.0.0",
    "copyrightText" : "Copyright (c) 2018 - present Andreas Jacob\nCopyright (c) 2018 - present Andreas Jacob (Cordobo.com) (http://cordobo.com/)",
    "downloadLocation" : "https://registry.npmjs.org/angularx-qrcode/-/angularx-qrcode-20.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/angularx-qrcode@20.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Dpw4A8QNH0t4oTt8fkPr6UrS_D-VXecsGPtYyMi3H0g/angularx-qrcode-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/cordobo/angularx-qrcode#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/angularx-qrcode",
    "versionInfo" : "20.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ansi-regex-5.0.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ansi-regex@5.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pryCB1Os7QkXhh2Ow-Gcz_C2n0kWpF-wb_6j31zTc3Q/ansi-regex-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/ansi-regex#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ansi-regex",
    "versionInfo" : "5.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ansi-styles-4.3.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ansi-styles@4.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KsPzv9KezZT9s8gmvV44kKHdUD4ru2WLwdc0edbm8Gg/ansi-styles-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/ansi-styles#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ansi-styles",
    "versionInfo" : "4.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-asynckit-0.4.0",
    "copyrightText" : "Copyright (c) 2016 Alex Indigo",
    "downloadLocation" : "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/asynckit@0.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/S-GhWAct26Jqh6jXnKET6TV6iZkmZfM_Ay35-0Y2XrA/asynckit-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/alexindigo/asynckit#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/asynckit",
    "versionInfo" : "0.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-b2a-1.1.2",
    "copyrightText" : "Copyright (c) 2013 kaelzhang <i@kael.me> , contributors http://kael.me\n\nAuthors: kaelzhang , contributors",
    "downloadLocation" : "https://registry.npmjs.org/b2a/-/b2a-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/b2a@1.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6qECBYfF22Wx8lhj3VtD3EPPeqZJmddgsEnENsdRh7Y/b2a-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/kaelzhang/b2a#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/b2a",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-call-bind-apply-helpers-1.0.2",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/call-bind-apply-helpers@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RfyP9Rvdq1I1dVEo5pEORTIOoG1WWWHu7sDBgPQCq-I/call-bind-apply-helpers-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/call-bind-apply-helpers#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/call-bind-apply-helpers",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-camelcase-5.3.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/camelcase@5.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BJ845nXQzKTSGf7-MlouHsZxnC7ZUo5rUaI5g8GkHEY/camelcase-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/camelcase#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/camelcase",
    "versionInfo" : "5.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-chroma-js-3.1.2",
    "copyrightText" : "Copyright (c) 2002 Cynthia Brewer, Mark Harrower, and The Pennsylvania State University\nCopyright (c) 2011-2024, Gregor Aisch",
    "downloadLocation" : "https://registry.npmjs.org/chroma-js/-/chroma-js-3.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lcN95vTjxsUhZnt_SJUbkplgDoVRCMdwY2rJwbaOMiw/chroma-js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/chroma-js@3.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/gka/chroma.js",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/chroma-js",
    "versionInfo" : "3.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cliui-6.0.0",
    "copyrightText" : "Copyright (c) 2015, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lcKmc1rYLHdt_-RVZTP7ma5e-Vfwk_yOROxv9yJ2oUA/cliui-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cliui@6.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/cliui#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cliui",
    "versionInfo" : "6.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-color-convert-2.0.1",
    "copyrightText" : "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\nCopyright (c) 2011-2016, Heather Arthur and Josh Junon",
    "downloadLocation" : "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/REHQuu8ZG_MV0PNqyGYtSM-JzA9Rx0PCvu791qee-UQ/color-convert-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/color-convert@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Qix-/color-convert#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/color-convert",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-color-name-1.1.4",
    "copyrightText" : "Copyright (c) 2015 Dmitry Ivanov",
    "downloadLocation" : "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vqFwittjJcGQSn5lTjNKvvmt9SvKLdXRlcYtHEvmr_U/color-name-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/color-name@1.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/colorjs/color-name",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/color-name",
    "versionInfo" : "1.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-combined-stream-1.0.8",
    "copyrightText" : "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>",
    "downloadLocation" : "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/combined-stream@1.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sb98i_QpOB4KjfYDZeF2HN-Qz8pViO9Dt9-3xpzJWE8/combined-stream-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/felixge/node-combined-stream",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/combined-stream",
    "versionInfo" : "1.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cometd-nodejs-client-1.0.2",
    "copyrightText" : "Copyright (c) 2020 the original author or authors.\nCopyright (c) 2017 the original author or authors.",
    "downloadLocation" : "https://registry.npmjs.org/cometd-nodejs-client/-/cometd-nodejs-client-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cometd-nodejs-client@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KXPwysygtyexHGYee7YJHoCBTXL2tBOIpyex10XR1zM/cometd-nodejs-client-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cometd.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cometd-nodejs-client",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cometd-4.0.8",
    "copyrightText" : "Copyright (c) 2008-2020 the original author or authors",
    "downloadLocation" : "https://registry.npmjs.org/cometd/-/cometd-4.0.8.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cometd@4.0.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w_UUc94DVWCl3lQXfg6tnRL9AnHdCtrK_N0MQS7ZKq4/cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://cometd.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cometd",
    "versionInfo" : "4.0.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-cross-fetch-4.1.0",
    "copyrightText" : "Copyright (c) 2017 Leonardo Quixada\nCopyright (c) 2010 Thomas Fuchs (http://script.aculo.us/thomas)\n(c) Leonardo Quixada (https://twitter.com/lquixada/)",
    "downloadLocation" : "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/cross-fetch@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cSgzTunjfUQTmxzZ6v8wYpPDq-Cm1UM4O08V9xm4kTk/cross-fetch-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lquixada/cross-fetch",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/cross-fetch",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-decamelize-1.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/decamelize@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7hPNmksJGGUVNjqK4-xmM2ycsJ34XR6gA32AWLlWy0o/decamelize-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/decamelize#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/decamelize",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-delayed-stream-1.0.0",
    "copyrightText" : "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>",
    "downloadLocation" : "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/delayed-stream@1.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i91dPg39ZMhRC3k2m_QtfJoyGRRDbuXC2-tGtQVOdeQ/delayed-stream-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/felixge/node-delayed-stream",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/delayed-stream",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dijkstrajs-1.0.3",
    "copyrightText" : "Copyright (c) 2008 Wyatt Baldwin <self@wyattbaldwin.com>",
    "downloadLocation" : "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dijkstrajs@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mzVd8sQORR6Yo202Tar_VRn42ox_CoryGR1_WKr5Sqs/dijkstrajs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/tcort/dijkstrajs",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dijkstrajs",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-dunder-proto-1.0.1",
    "copyrightText" : "Copyright (c) 2024 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1QNTY6EwzDIuCxOBW7dMBbOBcmGN3TAY5erMzjq4EkY/dunder-proto-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/dunder-proto@1.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/dunder-proto#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/dunder-proto",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-echarts-6.0.0",
    "copyrightText" : "Copyright 2010-2016 Mike Bostock\nCopyright 2017-2025 The Apache Software Foundation",
    "downloadLocation" : "https://registry.npmjs.org/echarts/-/echarts-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8H81PNeZQckZZbsk3lFdWIA1uQtP1RhIM8xNQ3uTwk8/echarts-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/echarts@6.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://echarts.apache.org",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/echarts",
    "versionInfo" : "6.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-emoji-regex-8.0.0",
    "copyrightText" : "Copyright Mathias Bynens <https://mathiasbynens.be/>",
    "downloadLocation" : "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HrkmCoNKzCLs5PUK4Hy3ZAm6kBWIRObcx4ObE5b7k2s/emoji-regex-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/emoji-regex@8.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mths.be/emoji-regex",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/emoji-regex",
    "versionInfo" : "8.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-entities-8.0.0",
    "copyrightText" : "Copyright (c) Felix Bohm",
    "downloadLocation" : "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Zzsdt3EiRdFxe5cXgZuO7dUqIlQFEkHlQPaCy9DmMh8/entities-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/entities@8.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fb55/entities#readme",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/entities",
    "versionInfo" : "8.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-define-property-1.0.1",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-define-property@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PFZe90PGr0WHQK30ILi-715OUn2ecHkxbM33to9pY4g/es-define-property-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-define-property#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-define-property",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-errors-1.3.0",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-errors@1.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cz3mtFM70O79cu1F-3AFge82G5tlmelH5WzY0yijCf0/es-errors-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-errors#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-errors",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-object-atoms-1.1.2",
    "copyrightText" : "Copyright (c) 2024 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-object-atoms@1.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1oXbU8Ybs6rHC49s62H0GruBXQ8rXu_dakmAThAdbH8/es-object-atoms-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/es-object-atoms#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-object-atoms",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-es-set-tostringtag-2.1.0",
    "copyrightText" : "Copyright (c) 2022 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/es-set-tostringtag@2.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yi0UGdnXxdCeOPweR4bIsry9I9ssBUoHqGIB6Rf0iN8/es-set-tostringtag-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/es-set-tostringtag#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/es-set-tostringtag",
    "versionInfo" : "2.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fast-deep-equal-3.1.3",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fast-deep-equal@3.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tBpQ2NyVbSqoaOhBAL5hEAWFi6OWxdq98Rb28UGwQgg/fast-deep-equal-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/fast-deep-equal#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fast-deep-equal",
    "versionInfo" : "3.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-fast-uri-3.1.3",
    "copyrightText" : "Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae\nCopyright (c) 2021-present The Fastify team",
    "downloadLocation" : "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Itld_q2M9cbG52nfhpWxQdqzcwQf3liSzLYg7FtzljI/fast-uri-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/fast-uri@3.1.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fastify/fast-uri",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/fast-uri",
    "versionInfo" : "3.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-file-saver-2.0.5",
    "copyrightText" : "Copyright (c) 2016 Eli Grey",
    "downloadLocation" : "https://registry.npmjs.org/file-saver/-/file-saver-2.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c0wLlWRB4xRJCohCwLA1laadNw86wENbfecPYezKOBA/file-saver-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/file-saver@2.0.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eligrey/FileSaver.js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/file-saver",
    "versionInfo" : "2.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-find-up-4.1.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5KG9yfYrcV5fBCNkQ_9Tb9cbN3dCpVGQA1mAJr9r5fM/find-up-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/find-up@4.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/find-up#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/find-up",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-form-data-4.0.6",
    "copyrightText" : "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and contributors\n\nAuthors: Felix Geisendorfer <felix@debuggable.com> (http://debuggable.com/); Felix Geisendorfer and contributors",
    "downloadLocation" : "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4eTvrHVMlfeifQ0fpDqalxZF5oydK6lryid0JAgeK7Y/form-data-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/form-data@4.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/form-data/form-data#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/form-data",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-function-bind-1.1.2",
    "copyrightText" : "Copyright (c) 2013 Raynos",
    "downloadLocation" : "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gw_r-x56GGR_iCQSAKX196LkSvzy_mxTaqZp-tIrTI8/function-bind-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/function-bind@1.1.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Raynos/function-bind",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/function-bind",
    "versionInfo" : "1.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-caller-file-2.0.5",
    "copyrightText" : "Copyright 2018 Stefan Penner",
    "downloadLocation" : "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F4Rz8imZq-ZwesGtnC4vb-532H3QelMVZGeFvqBmeTg/get-caller-file-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-caller-file@2.0.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/stefanpenner/get-caller-file#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-caller-file",
    "versionInfo" : "2.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-intrinsic-1.3.0",
    "copyrightText" : "Copyright (c) 2020 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-intrinsic@1.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f7RZbQOg1FvJoXz0OVQlc3-keWPdNdJFMQPGy-w8OIw/get-intrinsic-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/get-intrinsic#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-intrinsic",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-get-proto-1.0.1",
    "copyrightText" : "Copyright (c) 2025 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/get-proto@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/U1iOG9iZsOafGaXrer6Nedo2yhHwsulXp1jflPiiT9U/get-proto-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/get-proto#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/get-proto",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-gopd-1.2.0",
    "copyrightText" : "Copyright (c) 2022 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/gopd@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AUkGxPD6_kY4CcR-QkLG0c_uQEaC6nBqtvRgGuiwzsM/gopd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/gopd#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/gopd",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-has-symbols-1.1.0",
    "copyrightText" : "Copyright (c) 2016 Jordan Harband",
    "downloadLocation" : "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/has-symbols@1.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bQLPFOOAkaqfEgly0Tyl_5GNyskFH2_vHfldPyJQ0xE/has-symbols-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ljharb/has-symbols#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/has-symbols",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-has-tostringtag-1.0.2",
    "copyrightText" : "Copyright (c) 2021 Inspect JS",
    "downloadLocation" : "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/has-tostringtag@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sjgHGehg5OUbkFAWfkfd_ghyl8lAcmMaSqr90KPrnxw/has-tostringtag-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/inspect-js/has-tostringtag#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/has-tostringtag",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-hasown-2.0.4",
    "copyrightText" : "Copyright (c) Jordan Harband and contributors\n\nAuthors: Jordan Harband <ljharb@gmail.com>; Jordan Harband and contributors",
    "downloadLocation" : "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fDcUh-NBcT6hXSgkbNrDGaddOLBHPEGAasjYUaBIkus/hasown-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/hasown@2.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/inspect-js/hasOwn#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/hasown",
    "versionInfo" : "2.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-is-fullwidth-code-point-3.0.0",
    "copyrightText" : "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kXs44MvKbWXpriYUVCC4C-hV7rATfN85z7h3l3P1jGo/is-fullwidth-code-point-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/is-fullwidth-code-point@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/is-fullwidth-code-point",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-isomorphic-cometd-1.1.0",
    "copyrightText" : "No copyright message found; known authors and contributors are: Jan Hommes",
    "downloadLocation" : "https://registry.npmjs.org/isomorphic-cometd/-/isomorphic-cometd-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zR7Y6JAQbCiJHt2YiGuVDj9BiOQ6259H4fX0YJt9DXw/isomorphic-cometd-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/isomorphic-cometd@1.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/isomorphic-cometd",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-json-schema-traverse-1.0.0",
    "copyrightText" : "Copyright (c) 2017 Evgeny Poberezkin",
    "downloadLocation" : "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GPH99ihjNbG6hhbEUATG2v76RrAZY1KvppTSpPw5Ou8/json-schema-traverse-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/json-schema-traverse@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/epoberezkin/json-schema-traverse#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/json-schema-traverse",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-libphonenumber-js-1.12.10",
    "copyrightText" : "Copyright (c) 2016 @catamphetamine <purecatamphetamine@gmail.com>",
    "downloadLocation" : "https://registry.npmjs.org/libphonenumber-js/-/libphonenumber-js-1.12.10.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t0v0ElsJQ65tY3VW0Gm-kfJxw7qTBdsEKp1KM6vA9O0/libphonenumber-js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/libphonenumber-js@1.12.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/catamphetamine/libphonenumber-js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/libphonenumber-js",
    "versionInfo" : "1.12.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-locate-path-5.0.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mcBu2daI6skkEbs5FYlH5IrhJvFvTjG-B4e640IwOKk/locate-path-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/locate-path@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/locate-path#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/locate-path",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-lodash-es-4.18.1",
    "copyrightText" : "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\nAuthors: Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors; John-David Dalton <john.david.dalton@gmail.com>; OpenJS Foundation and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/lodash-es@4.18.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iT-gURgWw6nYiQIujQlJWz4kTs46-w0FALgfMfdUm9U/lodash-es-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lodash.com/custom-builds",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/lodash-es",
    "versionInfo" : "4.18.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-lodash-4.18.1",
    "copyrightText" : "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\nAuthors: Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors; John-David Dalton <john.david.dalton@gmail.com>; OpenJS Foundation and other contributors",
    "downloadLocation" : "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/lodash@4.18.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/h-q1MYmOuMXv95GYn84GABjTh_8HrHJiO0DO82ubvzw/lodash-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lodash.com/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/lodash",
    "versionInfo" : "4.18.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-marked-16.3.0",
    "copyrightText" : "Copyright (c) 2011-2022, Christopher Jeffrey\nCopyright (c) 2011-2025, Christopher Jeffrey. (MIT Licensed) https://github.com/markedjs/marked\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2004, John Gruber http://daringfireball.net\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)",
    "downloadLocation" : "https://registry.npmjs.org/marked/-/marked-16.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/marked@16.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9dSTAQ9jQlTYu--7TXO4dRdD9E94n6pFTw2S9FdZZHk/marked-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://marked.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/marked",
    "versionInfo" : "16.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-math-intrinsics-1.1.0",
    "copyrightText" : "Copyright (c) 2024 ECMAScript Shims",
    "downloadLocation" : "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/math-intrinsics@1.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Y2VBWKony1SYYg4uJVBUGcNaLjI56LXm5-jSvOa80yA/math-intrinsics-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/es-shims/math-intrinsics#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/math-intrinsics",
    "versionInfo" : "1.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-mime-db-1.52.0",
    "copyrightText" : "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015-2022 Douglas Christopher Wilson\nCopyright (c) 2015-2022 Douglas Christopher Wilson <doug@somethingdoug.com>",
    "downloadLocation" : "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fd5ykVcP7_FHdgw-uLZkE-dFCxVOw3HD-VYb0gtpstQ/mime-db-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/mime-db@1.52.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jshttp/mime-db#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/mime-db",
    "versionInfo" : "1.52.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-mime-types-2.1.35",
    "copyrightText" : "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>",
    "downloadLocation" : "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BoNR1JDeSvAHz0ic9MmzYP4Mqj642ofEydT5y0ohymA/mime-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/mime-types@2.1.35",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jshttp/mime-types#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/mime-types",
    "versionInfo" : "2.1.35"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-monaco-editor-0.53.0",
    "copyrightText" : "Copyright Drifty Co. http://drifty.com/\nCopyright Joyent, Inc. and other Node contributors\nCopyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)\nCopyright (c) 2015 David Owens II\nCopyright (c) 2007-2017 Einar Lielmanis, Liam Newman, and contributors\nCopyright (c) 2018+, MarkedJS (https://github.com/markedjs/)\nCopyright (c) Microsoft Corporation\nCopyright (c) 2018 The Khronos Group Inc.\nCopyright (c) 1991-2017 Unicode, Inc.\nCopyright (c) 2015 W3C(r) (MIT, ERCIM, Keio, Beihang)\nCopyright (c) 2018 WHATWG\nCopyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang) Disclaimers\nCopyright (c) 2016 - present Microsoft Corporation\n(c) by W3C\n\nAuthors: Christopher Jeffrey; David Owens II; Drifty Co.; Einar Lielmanis, Liam Newman, and contributors; Joyent, Inc. and other Node contributors; MarkedJS; Microsoft Corporation; The Khronos Group Inc.; Unicode, Inc.; W3C; W3C(r) (MIT, ERCIM, Keio, Beihang); W3C(r) (MIT, ERCIM, Keio, Beihang) Disclaimers; WHATWG; the Project",
    "downloadLocation" : "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.53.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jgsERscFZgwZ1w7wjAAqc5OaHfo3_GuC-yjvYvtKVKk/monaco-editor-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/monaco-editor@0.53.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/microsoft/monaco-editor",
    "licenseConcluded" : "(CC-BY-4.0 AND LicenseRef-scancode-unicode AND Apache-2.0 AND MIT AND LicenseRef-scancode-khronos)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/monaco-editor",
    "versionInfo" : "0.53.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-bootstrap-20.0.2",
    "copyrightText" : "Copyright Google Inc.\nCopyright Google LLC\nCopyright (c) 2015-2020 Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) Dmitriy Shekhovtsov <valorkin@gmail.com>\nCopyright (c) JS Foundation and other contributors\nCopyright (c) 2015-2020 Valor Software\nCopyright (c) Valor Software\ncopyright Angular ng-bootstrap team\ncopyright Federico Zivolo and contributors\ncopyright Valor Software\n\nAuthors: Abdel Said https://github.com/abdelsaid; Adam Brunner https://github.com/adambrunner; Agon Cecelia https://github.com/agoncecelia; Ahmed Elkhatib; Ali Hasan https://github.com/alihasan00; Angular ng-bootstrap team; Caio Ribeiro Pereira https://github.com/caio-ribeiro-pereira; Chris Gedrim https://github.com/a90machado; Chris Gedrim https://github.com/chrisgedrim; Danijel Grmec https://github.com/cobaltsis; Dario Beiro https://github.com/quinobravo; Dmitriy Shekhovtsov; Dmitriy Shekhovtsov <valorkin@gmail.com>; Erhan Gundogan https://github.com/erhangundogan; Espen Hovlandsdal https://github.com/rexxars; Federico Zivolo and contributors; Google Inc.; Google LLC; Irakli Janiashvili https://github.com/irakli-janiashvili; Isaac Cambron https://github.com/icambron; Iskren Ivov Chernev https://github.com/ichernev; JS Foundation and other contributors; Jacob Middag https://github.com/middagj; Javkhlantugs Nyamdorj https://github.com/javkhaanj7; Jeeeyul Lee <jeeeyul@gmail.com>; Jens Alm https://github.com/ulmus; John Fischer https://github.com/jfroffice; Joris Roling https://github.com/jorisroling; Jozef Pazin https://github.com/atiris; Julio Napuri https://github.com/julionc; Korenberg Mark https://github.com/socketpair; Kunal Marwaha https://github.com/marwahaha; Kyungwook, Park https://github.com/kyungw00k; LI Long https://github.com/baryon; Levan Tskipuri https://github.com/tskipa; Lorenzo https://github.com/aliem; Matiss Janis Aboltins https://github.com/matissjanis; Matt Grande https://github.com/mattgrande; Mattia Larentis https://github.com/nostalgiaz; Mayank Singhal https://github.com/mayanksinghal; Menelion Elensule https://github.com/Oire; Meysam Bahadori https://github.com/MeysamBahadori; Mikolaj Dadela https://github.com/mik01aj; Moshe Simantov https://github.com/DevelopmentIL; Nurlan Rakhimzhanov https://github.com/nurlan; Per Hansen https://github.com/perhp; Rafal Hirsz https://github.com/evoL; Romy Kusuma https://github.com/rkusuma; Romy Kusuma https://github.com/rkusuma ! reference https://github.com/moment/moment/blob/develop/locale/id.js; Stanislavas Guk https://github.com/ixoster; Tal Ater https://github.com/TalAter; Tim Wood, Iskren Chernev; Tomer Cohen https://github.com/tomer; Valentin Agachi https://github.com/avaly; Valor Software; Venelin Manchev https://github.com/vmanchev; Viktorminator https://github.com/Viktorminator; Vlad Gurdiga https://github.com/gurdiga; Watcharapol Sanitwong https://github.com/tumit; Xavier Arbat https://github.com/XavisaurusRex; Zeno Zeng https://github.com/zenozeng; bustta https://github.com/bustta; forabi https://github.com/forabi; lluchs https://github.com/lluchs; mihan https://github.com/mihan; petrbela https://github.com/petrbela; suupic https://github.com/suupic; zemlanin https://github.com/zemlanin",
    "downloadLocation" : "https://registry.npmjs.org/ngx-bootstrap/-/ngx-bootstrap-20.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_sV50YFC9ewdACjvfrpPqQ06UQ5eE2pHiFSCKrGs1Xs/ngx-bootstrap-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-bootstrap@20.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/valor-software/ngx-bootstrap#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-bootstrap",
    "versionInfo" : "20.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-ngx-echarts-20.0.2",
    "copyrightText" : "Copyright (c) 2025 Xie, Ziyu",
    "downloadLocation" : "https://registry.npmjs.org/ngx-echarts/-/ngx-echarts-20.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nhuUMFhF0EjNLmtmkplclA2GIJ443KSg-JMwM7-GGpI/ngx-echarts-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/ngx-echarts@20.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://xieziyu.github.io/ngx-echarts",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/ngx-echarts",
    "versionInfo" : "20.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-node-fetch-2.7.0",
    "copyrightText" : "Copyright (c) 2016 David Frank",
    "downloadLocation" : "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kzqQGMX5X_0CUqeS2pORNCTeMit5nxqHkwlHDM0Q0vI/node-fetch-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/node-fetch@2.7.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/bitinn/node-fetch",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/node-fetch",
    "versionInfo" : "2.7.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-limit-2.3.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wLs3QJGAmPkLvvyEQpgvoLANaa5jEDcIkTHGSrEkkz8/p-limit-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-limit@2.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-limit#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-limit",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-locate-4.1.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-locate@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/syjTyWlfsYCoToyZodbpqdLtosK4O9Cd7qqB3DQCH6w/p-locate-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-locate#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-locate",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-p-try-2.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/p-try@2.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lp63hYL0oKqQ8jSAJOlL9E3pD2-_zQC3SpD3Ed3xY1w/p-try-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/p-try#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/p-try",
    "versionInfo" : "2.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-parse5-8.0.1",
    "copyrightText" : "Copyright (c) 2013-2019 Ivan Nikulin (ifaaan@gmail.com, https://github.com/inikulin)",
    "downloadLocation" : "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/parse5@8.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LY_swi-7MS0Cc8CljPK1x1y-LRvfX4LKV8GW4mzwVNE/parse5-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://parse5.js.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/parse5",
    "versionInfo" : "8.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-path-exists-4.0.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n(c) Sindre Sorhus (https://sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/path-exists@4.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C7r66BXJOEPh19AqRa8fw7nhiiAef3HObD6DvSaqjdA/path-exists-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/path-exists#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/path-exists",
    "versionInfo" : "4.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-pngjs-5.0.0",
    "copyrightText" : "(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 2014-2017 Vitaly Puzrin and Andrey Tupitsin\nCopyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c) 2012 Kuba Niegowski\nCopyright (c) 2015 Luke Page & Original Contributors\nCopyright Joyent, Inc. and other Node contributors\n\nAuthors: Feross Aboukhadijeh <feross@feross.org> <http://feross.org>; Feross Aboukhadijeh <https://feross.org>; Jean-loup Gailly and Mark Adler; Joyent, Inc. and other Node contributors; Kuba Niegowski; Luke Page & Original Contributors; Thomas Robinson; Vitaly Puzrin and Andrey Tupitsin",
    "downloadLocation" : "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vEkC7M5nP6XDPyn9IS8TK-U_v12OOzTjqQTVYkwOo34/pngjs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/pngjs@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/lukeapage/pngjs",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/pngjs",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-qrcode-1.5.4",
    "copyrightText" : "Copyright (c) 2009 Kazuhiko Arase\nCopyright (c) 2012 Ryan Day\ncopyright Ryan Day 2012",
    "downloadLocation" : "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NpwQp6yRMBvCBd8bZSZnaQfSwMyLpEySe6WM2Ya4vC0/qrcode-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/qrcode@1.5.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/soldair/node-qrcode",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/qrcode",
    "versionInfo" : "1.5.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-directory-2.1.1",
    "copyrightText" : "Copyright (c) 2011 Troy Goode <troygoode@gmail.com>",
    "downloadLocation" : "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DAJ4a-DMEyDNrzJULU3q6ySfg3AI1NlA-pDU9Xu90hE/require-directory-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-directory@2.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/troygoode/node-require-directory/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-directory",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-from-string-2.0.2",
    "copyrightText" : "Copyright (c) Vsevolod Strukchinsky <floatdrop@gmail.com>\n(c) Vsevolod Strukchinsky (http://github.com/floatdrop)",
    "downloadLocation" : "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cQtf5Zgn9qZfx_92S7ti2FKoNI5lybyu4_QVUFh5Iq0/require-from-string-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-from-string@2.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/floatdrop/require-from-string#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-from-string",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-require-main-filename-2.0.0",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bgDO-b4BOJ6Z0YUw0jAcEYU4QoH7-pddhAfaMoJnlMU/require-main-filename-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/require-main-filename@2.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/require-main-filename#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/require-main-filename",
    "versionInfo" : "2.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-rxjs-7.8.2",
    "copyrightText" : "Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors\nCopyright (c) Microsoft Corporation\n\nAuthors: Ben Lesh <ben@benlesh.com>; Google, Inc., Netflix, Inc., Microsoft Corp. and contributors; Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BEsdYpvPKAEf0JgUwcp8y_sPn-3yC3HKDY6POQPP-90/rxjs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/rxjs@7.8.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rxjs.dev",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/rxjs",
    "versionInfo" : "7.8.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-semver-7.7.4",
    "copyrightText" : "Copyright Isaac Z. Schlueter\nCopyright (c) Isaac Z. Schlueter and Contributors\n\nAuthors: GitHub Inc; Isaac Z. Schlueter; Isaac Z. Schlueter and Contributors",
    "downloadLocation" : "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5T8jUM8fOmbljf5YrnTgFhwTgRxs519ioPTHu1N2MlA/semver-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/semver@7.7.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/npm/node-semver#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/semver",
    "versionInfo" : "7.7.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-set-blocking-2.0.0",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/set-blocking@2.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/95osy2eui_wslCftAi-3_B1ROMmuOZdlo14wsmRHV64/set-blocking-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/set-blocking#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/set-blocking",
    "versionInfo" : "2.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-string-width-4.2.3",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/string-width@4.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aOe6nFolINz9X6dNdifzm2b26iL8va3DDIvEb2hqloQ/string-width-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/sindresorhus/string-width#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/string-width",
    "versionInfo" : "4.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-strip-ansi-6.0.1",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/strip-ansi@6.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E_u39o5xvLJiX-8V-_oxZ4a43ud2_HUJX7w-TxQzt4Y/strip-ansi-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/strip-ansi#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/strip-ansi",
    "versionInfo" : "6.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-three-0.173.0",
    "copyrightText" : "Copyright 2014 David Bau\nCopyright 2010-2025 Three.js Authors\nCopyright @ 2004 by MAGENTA Ltd.\nCopyright (c) 2002, Industrial Light & Magic\nCopyright (c) Magenta ltd\nCopyright (c) 2018, Mapbox\nCopyright (c) SIL International, 2003-2008\nCopyright (c) 2003-2008, SIL International (http://www.sil.org/)\nCopyright (c) 2014 - 2017, Syoyo Fujita\nCopyright (c) 2005-2008, The Android Open Source Project\nCopyright (c) 2008 The Android Open Source Project\nCopyright (c) 2016-2022, by Arseny Kapoulkine (arseny.kapoulkine@gmail.com)\nCopyright (c) 2004 by MAGENTA Ltd.\nCopyright (c) 2010-2025 three.js authors\nMikola Lysenko (c) 2012\n(c) 2017 Axel Kittenberger\n(c) 2005 Elsevier Inc.\n(c) Epistemex 2014-2015 www.epistemex.com By Ken Fyrstenberg\n(c) Frederik De Bleser and other contributors\n(c) 2018 bryc (github.com/bryc)\ncopyright (c) 2006, Google Corporation\n\nAuthors: Arseny Kapoulkine; Axel Kittenberger; David Bau; Elsevier Inc.; Epistemex www.epistemex.com By Ken Fyrstenberg; Frederik De Bleser and other contributors; George Michael Brower; Google Corporation; Industrial Light & Magic; MAGENTA Ltd.; Mapbox; Mikola Lysenko; Nell Waliczek; SIL International; Syoyo Fujita; The Android Open Source Project; bryc (github.com/bryc); three.js authors",
    "downloadLocation" : "https://registry.npmjs.org/three/-/three-0.173.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/three@0.173.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G4udhu_DnpHUg119frSq-D4_wT9Ktf6SqA1nFckUlIQ/three-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://threejs.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/three",
    "versionInfo" : "0.173.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tr46-0.0.3",
    "copyrightText" : "Copyright (c) Sebastian Mayr",
    "downloadLocation" : "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tr46@0.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xF4JHg7USKF9wyhePcPCl8rx7-gbaI9ja3AHVvWjWNE/tr46-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/Sebmaster/tr46.js#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tr46",
    "versionInfo" : "0.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tslib-2.3.0",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/tslib/-/tslib-2.3.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tslib@2.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBBVGTAaGwmsT77KIhX32aCs04VvG_f2HvutSidXTE0/tslib-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.typescriptlang.org/",
    "licenseConcluded" : "0BSD",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tslib",
    "versionInfo" : "2.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-tslib-2.8.1",
    "copyrightText" : "Copyright (c) Microsoft Corporation",
    "downloadLocation" : "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/tslib@2.8.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XByM4fNNo8NgMDAw84f7GqemGiog0TGZ_DTpJ8ENT2o/tslib-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.typescriptlang.org/",
    "licenseConcluded" : "0BSD",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/tslib",
    "versionInfo" : "2.8.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-undici-types-6.21.0",
    "copyrightText" : "Copyright (c) Matteo Collina and Undici contributors\n\nAuthors: Matteo Collina and Undici contributors",
    "downloadLocation" : "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/undici-types@6.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xQx_ww8uQYEtf0oXaIgPZerbciig0h76NvibTNkYugo/undici-types-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://undici.nodejs.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/undici-types",
    "versionInfo" : "6.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-webidl-conversions-3.0.1",
    "copyrightText" : "Copyright (c) 2014, Domenic Denicola",
    "downloadLocation" : "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/webidl-conversions@3.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/91QuK6uggISIHalBOm_Evv8Kz3fkwfUquWy0SCrEpTs/webidl-conversions-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsdom/webidl-conversions#readme",
    "licenseConcluded" : "BSD-2-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/webidl-conversions",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-whatwg-url-5.0.0",
    "copyrightText" : "Copyright (c) 2015-2016 Sebastian Mayr",
    "downloadLocation" : "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0uF9VagijOPXB6Fe7UjmtIam9cacVfeVYzBkuaiLOBY/whatwg-url-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/whatwg-url@5.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jsdom/whatwg-url#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/whatwg-url",
    "versionInfo" : "5.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-which-module-2.0.1",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Contributors",
    "downloadLocation" : "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dDMT1nCOXogL3FBC8irfivv8B9XwW4OSZu8CIRpt6Nw/which-module-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/which-module@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/nexdrew/which-module#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/which-module",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-wrap-ansi-6.2.0",
    "copyrightText" : "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
    "downloadLocation" : "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HnEGWBdLrV9Df4kmXdde4HqfamvAwS3plkZL5nI0UqY/wrap-ansi-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/wrap-ansi@6.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/chalk/wrap-ansi#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/wrap-ansi",
    "versionInfo" : "6.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-y18n-4.0.3",
    "copyrightText" : "Copyright (c) 2015, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/y18n@4.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F0_8sGgf4psegyPRoZbAK7BwETiDyzRSR7iopYpMCxo/y18n-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/y18n",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/y18n",
    "versionInfo" : "4.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-yargs-parser-18.1.3",
    "copyrightText" : "Copyright (c) 2016, Contributors\n\nAuthors: Ben Coe <ben@npmjs.com>; Contributors",
    "downloadLocation" : "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/yargs-parser@18.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GOKQTIHNCyE7dWqFM8Jrkrii-QbzItcYTaJL5Qdh68U/yargs-parser-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yargs/yargs-parser#readme",
    "licenseConcluded" : "ISC",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/yargs-parser",
    "versionInfo" : "18.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-yargs-15.4.1",
    "copyrightText" : "Copyright 2014 Contributors (ben@npmjs.com)\nCopyright 2010 James Halliday (mail@substack.net)\nCopyright (c) 2011 Andrei Mackenzie\n\nAuthors: Andrei Mackenzie; Contributors; James Halliday",
    "downloadLocation" : "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/yargs@15.4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WtKoC0kqqpbc62yn9HPnb2159NAh1IvI-nloxIFlQpM/yargs-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://yargs.js.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/yargs",
    "versionInfo" : "15.4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zone.js-0.15.1",
    "copyrightText" : "Copyright Google LLC\nCopyright (c) 2010-2025 Google LLC. https://angular.dev/license\n(c) 2010-2025 Google LLC. https://angular.io",
    "downloadLocation" : "https://registry.npmjs.org/zone.js/-/zone.js-0.15.1.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/zone.js@0.15.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vV1UlclM71sfi7B_NEGT3EE18Zq8BV1WCVlezAe51bY/zone.js-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/angular/angular#readme",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/zone.js",
    "versionInfo" : "0.15.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-npm-zrender-6.0.0",
    "copyrightText" : "Copyright (c) 2017, Baidu Inc.\nCopyright (c) Microsoft Corporation\n(c) 2010-2013 Thomas Fuchs",
    "downloadLocation" : "https://registry.npmjs.org/zrender/-/zrender-6.0.0.tgz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:npm/zrender@6.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iU7ROiGPAfGvGA0FcUU2-Ezf08Uf-IuO8HOIdfvjd9Q/zrender-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ecomfe/zrender#readme",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "npm/zrender",
    "versionInfo" : "6.0.0"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.client5-httpclient5-5.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-trusted-types-1.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-h2-5.3.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zip.js-zip.js-2.7.71"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.28.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-cometd-4.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-types-node-20.19.43"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.cache-cache-api-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-translate-core-15.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.servlet-javax.servlet-api-4.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-translate-core-17.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jodah-expiringmap-0.5.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.activation-javax.activation-api-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-formly-core-6.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.sourceforge.argparse4j-argparse4j-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-formly-core-6.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-router-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fontsource-public-sans-5.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.14.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents.core5-httpcore5-5.3.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.54"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-chroma-js-3.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat-tomcat-annotations-api-10.1.54"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.54"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-call-bind-apply-helpers-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.54"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-camelcase-5.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-asynckit-0.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-b2a-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ansi-regex-5.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpmime-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ansi-styles-4.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-8.20.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angularx-qrcode-20.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ajv-formats-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-offheap-store-2.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-statistics-2.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-fast-restartable-store-1.6.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.terracotta-terracotta-utilities-tools-0.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.webjars-swagger-ui-5.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-forms-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-platform-browser-dynamic-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-compiler-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-core-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-cdk-20.2.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-common-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-animations-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.webjars-webjars-locator-lite-1.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-angular-platform-browser-20.3.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache-sizeof-0.4.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-has-symbols-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.expressly-expressly-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-has-tostringtag-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-proto-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache-ehcache-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-gopd-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-impl-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-caller-file-2.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-xml-spi-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-get-intrinsic-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-api-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-form-data-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-core-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-function-bind-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-file-saver-2.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ehcache.modules-ehcache-107-3.10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-find-up-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-base-files-13.8PLUSdeb13u7-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-math-intrinsics-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-txw2-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-lodash-4.18.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-marked-16.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-core-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-locate-path-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jaxb-jaxb-runtime-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-lodash-es-4.18.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-json-schema-traverse-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-libphonenumber-js-1.12.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-is-fullwidth-code-point-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-isomorphic-cometd-1.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-hasown-2.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-proxy2-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.angus-angus-activation-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-delayed-stream-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-californium-core-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dijkstrajs-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cross-fetch-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-decamelize-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.84"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cometd-nodejs-client-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cometd-4.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.84"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-color-name-1.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.84"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-combined-stream-1.0.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-cliui-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aspectj-aspectjweaver-1.8.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-color-convert-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-core-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fast-uri-3.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-redis-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-set-tostringtag-2.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-server-cf-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-fast-deep-equal-3.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-errors-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.leshan-leshan-core-cf-2.0.0-M9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-object-atoms-1.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-scandium-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-entities-8.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-es-define-property-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-cf-oscore-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-echarts-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.californium-element-connector-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-emoji-regex-8.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-dunder-proto-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libexpat1-2.9.0-1-deb13u1-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libfontconfig1-2.15.0-2.3-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-validation-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libcrypt1-4.4.38-1-arch-amd64-distro-debian-13-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-security-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libjpeg62-turbo-2.1.5-4-arch-amd64-distro-debian-13-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-cache-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-liblcms2-2-2.16-2PLUSdeb13u2-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libfreetype6-2.13.3PLUSdfsg-1PLUSdeb13u1-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libgcc-s1-14.2.0-19-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libuuid1-2.41.5-0PLUSdeb13u1-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libpng16-16t64-1.6.48-1PLUSdeb13u6-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libstdcPLUSPLUS6-14.2.0-19-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-temurin-17-jre-17.0.21.0.0PLUS9-0-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-support-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-tzdata-legacy-2026c-0PLUSdeb13u1-arch-all-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-media-types-13.0.0-arch-all-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-netbase-6.5-arch-all-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-org.eclipse.californium-californium-legal-3.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-tzdata-2026c-0PLUSdeb13u1-arch-all-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-zlib1g-1.3.dfsgPLUSreally1.3.1-1PLUSb1-arch-amd64-distro-debian-13-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.21"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.json-json-20231013"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-try-2.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jsoup-jsoup-1.22.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-parse5-8.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-limit-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.3.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-p-locate-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-echarts-20.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-node-fetch-2.7.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-monaco-editor-0.53.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-annotation-support-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-ngx-bootstrap-20.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-mime-db-1.52.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-mime-types-2.1.35"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-path-exists-4.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jr-jackson-jr-objects-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.21.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-ui-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-string-width-4.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-common-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-semver-7.7.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-generator-4.37.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springdoc-springdoc-openapi-starter-webmvc-api-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-set-blocking-2.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.erosb-everit-json-schema-1.14.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-main-filename-2.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.peteroupc-numbers-1.8.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.snakeyaml-snakeyaml-engine-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-rxjs-7.8.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-directory-2.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-1.7.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-require-from-string-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jackson-4.37.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-pngjs-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.victools-jsonschema-module-jakarta-validation-4.37.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-qrcode-1.5.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libbrotli1-1.1.0-2PLUSb7-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-undici-types-6.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libbz2-1.0-1.0.8-6-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-webidl-conversions-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libc-bin-2.41-12PLUSdeb13u4-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tslib-2.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-libc6-2.41-12PLUSdeb13u4-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tslib-2.8.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-ca-certificates-20250419PLUSdeb13u1-arch-all-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.41.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-three-0.173.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-fontconfig-config-2.15.0-2.3-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-tr46-0.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-fonts-dejavu-core-2.37-8-arch-all-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-deb-debian-gcc-14-base-14.2.0-19-arch-amd64-distro-debian-13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-strip-ansi-6.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-tpc-engine-5.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hazelcast-hazelcast-5.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.kstruct-gethostname4j-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-wrap-ansi-6.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-whatwg-url-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-which-module-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zrender-6.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.zaxxer-HikariCP-4.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-yargs-15.4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-zone.js-0.15.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.istack-istack-commons-runtime-4.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-y18n-4.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.upokecenter-cbor-4.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-npm-yargs-parser-18.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-dev.failsafe-failsafe-3.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.classgraph-classgraph-4.8.158"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-annotations-jakarta-2.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vavr-vavr-match-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vavr-vavr-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-core-jakarta-2.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger.core.v3-swagger-models-jakarta-2.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.el-jakarta.el-api-5.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-lwm2m-agent-1021.11.46",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1"
  } ]
}