{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-03-06T13:36:55Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "messaging-service-v3001.2.15",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-GPL-2.0-only-WITH-LicenseRef-scancode-npsl-exception-0.93",
    "extractedText" : "GNU GENERAL PUBLIC LICENSE\n                       Version 2, June 1991\n \n Copyright (C) 1989, 1991 Free Software Foundation, Inc.,\n 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA\n Everyone is permitted to copy and distribute verbatim copies\n of this license document, but changing it is not allowed.\n \n                            Preamble\n \n  The licenses for most software are designed to take away your\nfreedom to share and change it.  By contrast, the GNU General Public\nLicense is intended to guarantee your freedom to share and change free\nsoftware--to make sure the software is free for all its users.  This\nGeneral Public License applies to most of the Free Software\nFoundation's software and to any other program whose authors commit to\nusing it.  (Some other Free Software Foundation software is covered by\nthe GNU Lesser General Public License instead.)  You can apply it to\nyour programs, too.\n \n  When we speak of free software, we are referring to freedom, not\nprice.  Our General Public Licenses are designed to make sure that you\nhave the freedom to distribute copies of free software (and charge for\nthis service if you wish), that you receive source code or can get it\nif you want it, that you can change the software or use pieces of it\nin new free programs; and that you know you can do these things.\n \n  To protect your rights, we need to make restrictions that forbid\nanyone to deny you these rights or to ask you to surrender the rights.\nThese restrictions translate to certain responsibilities for you if you\ndistribute copies of the software, or if you modify it.\n \n  For example, if you distribute copies of such a program, whether\ngratis or for a fee, you must give the recipients all the rights that\nyou have.  You must make sure that they, too, receive or can get the\nsource code.  And you must show them these terms so they know their\nrights.\n \n  We protect your rights with two steps: (1) copyright the software, and\n(2) offer you this license which gives you legal permission to copy,\ndistribute and/or modify the software.\n \n  Also, for each author's protection and ours, we want to make certain\nthat everyone understands that there is no warranty for this free\nsoftware.  If the software is modified by someone else and passed on, we\nwant its recipients to know that what they have is not the original, so\nthat any problems introduced by others will not reflect on the original\nauthors' reputations.\n \n  Finally, any free program is threatened constantly by software\npatents.  We wish to avoid the danger that redistributors of a free\nprogram will individually obtain patent licenses, in effect making the\nprogram proprietary.  To prevent this, we have made it clear that any\npatent must be licensed for everyone's free use or not licensed at all.\n \n  The precise terms and conditions for copying, distribution and\nmodification follow.\n \n                    GNU GENERAL PUBLIC LICENSE\n   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n \n  0. This License applies to any program or other work which contains\na notice placed by the copyright holder saying it may be distributed\nunder the terms of this General Public License.  The \"Program\", below,\nrefers to any such program or work, and a \"work based on the Program\"\nmeans either the Program or any derivative work under copyright law:\nthat is to say, a work containing the Program or a portion of it,\neither verbatim or with modifications and/or translated into another\nlanguage.  (Hereinafter, translation is included without limitation in\nthe term \"modification\".)  Each licensee is addressed as \"you\".\n \nActivities other than copying, distribution and modification are not\ncovered by this License; they are outside its scope.  The act of\nrunning the Program is not restricted, and the output from the Program\nis covered only if its contents constitute a work based on the\nProgram (independent of having been made by running the Program).\nWhether that is true depends on what the Program does.\n \n  1. You may copy and distribute verbatim copies of the Program's\nsource code as you receive it, in any medium, provided that you\nconspicuously and appropriately publish on each copy an appropriate\ncopyright notice and disclaimer of warranty; keep intact all the\nnotices that refer to this License and to the absence of any warranty;\nand give any other recipients of the Program a copy of this License\nalong with the Program.\n \nYou may charge a fee for the physical act of transferring a copy, and\nyou may at your option offer warranty protection in exchange for a fee.\n \n  2. You may modify your copy or copies of the Program or any portion\nof it, thus forming a work based on the Program, and copy and\ndistribute such modifications or work under the terms of Section 1\nabove, provided that you also meet all of these conditions:\n \n    a) You must cause the modified files to carry prominent notices\n    stating that you changed the files and the date of any change.\n \n    b) You must cause any work that you distribute or publish, that in\n    whole or in part contains or is derived from the Program or any\n    part thereof, to be licensed as a whole at no charge to all third\n    parties under the terms of this License.\n \n    c) If the modified program normally reads commands interactively\n    when run, you must cause it, when started running for such\n    interactive use in the most ordinary way, to print or display an\n    announcement including an appropriate copyright notice and a\n    notice that there is no warranty (or else, saying that you provide\n    a warranty) and that users may redistribute the program under\n    these conditions, and telling the user how to view a copy of this\n    License.  (Exception: if the Program itself is interactive but\n    does not normally print such an announcement, your work based on\n    the Program is not required to print an announcement.)\n \nThese requirements apply to the modified work as a whole.  If\nidentifiable sections of that work are not derived from the Program,\nand can be reasonably considered independent and separate works in\nthemselves, then this License, and its terms, do not apply to those\nsections when you distribute them as separate works.  But when you\ndistribute the same sections as part of a whole which is a work based\non the Program, the distribution of the whole must be on the terms of\nthis License, whose permissions for other licensees extend to the\nentire whole, and thus to each and every part regardless of who wrote it.\n \nThus, it is not the intent of this section to claim rights or contest\nyour rights to work written entirely by you; rather, the intent is to\nexercise the right to control the distribution of derivative or\ncollective works based on the Program.\n \nIn addition, mere aggregation of another work not based on the Program\nwith the Program (or with a work based on the Program) on a volume of\na storage or distribution medium does not bring the other work under\nthe scope of this License.\n \n  3. You may copy and distribute the Program (or a work based on it,\nunder Section 2) in object code or executable form under the terms of\nSections 1 and 2 above provided that you also do one of the following:\n \n    a) Accompany it with the complete corresponding machine-readable\n    source code, which must be distributed under the terms of Sections\n    1 and 2 above on a medium customarily used for software interchange; or,\n \n    b) Accompany it with a written offer, valid for at least three\n    years, to give any third party, for a charge no more than your\n    cost of physically performing source distribution, a complete\n    machine-readable copy of the corresponding source code, to be\n    distributed under the terms of Sections 1 and 2 above on a medium\n    customarily used for software interchange; or,\n \n    c) Accompany it with the information you received as to the offer\n    to distribute corresponding source code.  (This alternative is\n    allowed only for noncommercial distribution and only if you\n    received the program in object code or executable form with such\n    an offer, in accord with Subsection b above.)\n \nThe source code for a work means the preferred form of the work for\nmaking modifications to it.  For an executable work, complete source\ncode means all the source code for all modules it contains, plus any\nassociated interface definition files, plus the scripts used to\ncontrol compilation and installation of the executable.  However, as a\nspecial exception, the source code distributed need not include\nanything that is normally distributed (in either source or binary\nform) with the major components (compiler, kernel, and so on) of the\noperating system on which the executable runs, unless that component\nitself accompanies the executable.\n \nIf distribution of executable or object code is made by offering\naccess to copy from a designated place, then offering equivalent\naccess to copy the source code from the same place counts as\ndistribution of the source code, even though third parties are not\ncompelled to copy the source along with the object code.\n \n  4. You may not copy, modify, sublicense, or distribute the Program\nexcept as expressly provided under this License.  Any attempt\notherwise to copy, modify, sublicense or distribute the Program is\nvoid, and will automatically terminate your rights under this License.\nHowever, parties who have received copies, or rights, from you under\nthis License will not have their licenses terminated so long as such\nparties remain in full compliance.\n \n  5. You are not required to accept this License, since you have not\nsigned it.  However, nothing else grants you permission to modify or\ndistribute the Program or its derivative works.  These actions are\nprohibited by law if you do not accept this License.  Therefore, by\nmodifying or distributing the Program (or any work based on the\nProgram), you indicate your acceptance of this License to do so, and\nall its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n \n  6. Each time you redistribute the Program (or any work based on the\nProgram), the recipient automatically receives a license from the\noriginal licensor to copy, distribute or modify the Program subject to\nthese terms and conditions.  You may not impose any further\nrestrictions on the recipients' exercise of the rights granted herein.\nYou are not responsible for enforcing compliance by third parties to\nthis License.\n \n  7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues),\nconditions are imposed on you (whether by court order, agreement or\notherwise) that contradict the conditions of this License, they do not\nexcuse you from the conditions of this License.  If you cannot\ndistribute so as to satisfy simultaneously your obligations under this\nLicense and any other pertinent obligations, then as a consequence you\nmay not distribute the Program at all.  For example, if a patent\nlicense would not permit royalty-free redistribution of the Program by\nall those who receive copies directly or indirectly through you, then\nthe only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n \nIf any portion of this section is held invalid or unenforceable under\nany particular circumstance, the balance of the section is intended to\napply and the section as a whole is intended to apply in other\ncircumstances.\n \nIt is not the purpose of this section to induce you to infringe any\npatents or other property right claims or to contest validity of any\nsuch claims; this section has the sole purpose of protecting the\nintegrity of the free software distribution system, which is\nimplemented by public license practices.  Many people have made\ngenerous contributions to the wide range of software distributed\nthrough that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing\nto distribute software through any other system and a licensee cannot\nimpose that choice.\n \nThis section is intended to make thoroughly clear what is believed to\nbe a consequence of the rest of this License.\n \n  8. If the distribution and/or use of the Program is restricted in\ncertain countries either by patents or by copyrighted interfaces, the\noriginal copyright holder who places the Program under this License\nmay add an explicit geographical distribution limitation excluding\nthose countries, so that distribution is permitted only in or among\ncountries not thus excluded.  In such case, this License incorporates\nthe limitation as if written in the body of this License.\n \n  9. The Free Software Foundation may publish revised and/or new versions\nof the General Public License from time to time.  Such new versions will\nbe similar in spirit to the present version, but may differ in detail to\naddress new problems or concerns.\n \nEach version is given a distinguishing version number.  If the Program\nspecifies a version number of this License which applies to it and \"any\nlater version\", you have the option of following the terms and conditions\neither of that version or of any later version published by the Free\nSoftware Foundation.  If the Program does not specify a version number of\nthis License, you may choose any version ever published by the Free Software\nFoundation.\n \n  10. If you wish to incorporate parts of the Program into other free\nprograms whose distribution conditions are different, write to the author\nto ask for permission.  For software which is copyrighted by the Free\nSoftware Foundation, write to the Free Software Foundation; we sometimes\nmake exceptions for this.  Our decision will be guided by the two goals\nof preserving the free status of all derivatives of our free software and\nof promoting the sharing and reuse of software generally.\n \n                            NO WARRANTY\n \n  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY\nFOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN\nOTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES\nPROVIDE THE PROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED\nOR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS\nTO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE\nPROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,\nREPAIR OR CORRECTION.\n \n  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING\nWILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR\nREDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,\nINCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING\nOUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED\nTO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY\nYOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER\nPROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE\nPOSSIBILITY OF SUCH DAMAGES.\n \n                     END OF TERMS AND CONDITIONS\n\nWITH exception:\n\nNmap Public Source License Version 0.93\nFor more information on this license, see https://nmap.org/npsl/\n\n0. Preamble\n\nThe intent of this license is to establish freedom to share and change\nthe software regulated by this license under the open source model. It\nalso includes a Contributor Agreement and disclaims any warranty on\nCovered Software. Companies wishing to use or incorporate Covered\nSoftware within their own products may find that our Nmap OEM product\n(https://nmap.org/oem/) better suits their needs. Open source\ndevelopers who wish to incorporate parts of Covered Software into free\nsoftware with conflicting licenses may write Licensor to request a\nwaiver of terms.\n\nIf the Nmap Project (directly or through one of its commercial\nlicensing customers) has granted you additional rights to Nmap or Nmap\nOEM, those additional rights take precedence where they conflict with\nthe terms of this license agreement.\n\nThis License represents the complete agreement concerning subject\nmatter hereof. It contains the license terms themselves, but not the\nreasoning behind them or detailed explanations. For further\ninformation about this License, see https://nmap.org/npsl/ . That page\nmakes a good faith attempt to explain this License, but it does not\nand can not modify its governing terms in any way.\n\n1. Definitions\n\n* \"Contribution\" means any work of authorship, including the original\n  version of the Work and any modifications or additions to that Work\n  or Derivative Works thereof, that is intentionally submitted to\n  Licensor by the copyright owner or by an individual or Legal Entity\n  authorized to submit on behalf of the copyright owner. For the\n  purposes of this definition, \"submitted\" means any form of\n  electronic, verbal, or written communication sent to the Licensor or\n  its representatives, including but not limited to communication on\n  electronic mailing lists, source code control systems, web sites,\n  and issue tracking systems that are managed by, or on behalf of, the\n  Licensor for the purpose of discussing and improving the Work, but\n  excluding communication that is conspicuously marked or otherwise\n  designated in writing by the copyright owner as \"Not a\n  Contribution.\"\n\n* \"Contributor\" means Licensor and any individual or Legal Entity on\n  behalf of whom a Contribution has been received by Licensor and\n  subsequently incorporated within the Work.\n\n* \"Covered Software\" means the work of authorship, whether in Source\n  or Object form, made available under the License, as indicated by a\n  copyright notice that is included in or attached to the work\n\n* \"Derivative Work\" or \"Collective Work\" means any work, whether in\n  Source or Object form, that is based on (or derived from) the Work\n  and for which the editorial revisions, annotations, elaborations, or\n  other modifications represent, as a whole, an original work of\n  authorship. It includes software as described in Section 3 of this\n  License.\n\n* \"Executable\" means Covered Software in any form other than Source Code.\n\n* \"Externally Deploy\" means to Deploy the Covered Software in any way\n  that may be accessed or used by anyone other than You, used to\n  provide any services to anyone other than You, or used in any way to\n  deliver any content to anyone other than You, whether the Covered\n  Software is distributed to those parties, made available as an\n  application intended for use over a computer network, or used to\n  provide services or otherwise deliver content to anyone other than\n  You.\n\n* \"GPL\" means the GNU General Public License Version 2, as published\n  by the Free Software Foundation and provided in Exhibit A.\n\n* \"Legal Entity\" means the union of the acting entity and all other\n  entities that control, are controlled by, or are under common\n  control with that entity. For the purposes of this definition,\n  \"control\" means (i) the power, direct or indirect, to cause the\n  direction or management of such entity, whether by contract or\n  otherwise, or (ii) ownership of fifty percent (50%) or more of the\n  outstanding shares, or (iii) beneficial ownership of such entity.\n\n* \"License\" means this document, including Exhibits.\n\n* \"Licensor\" means Insecure.Com LLC and its successors and assigns.\n\n* \"Main License Body\" means all of the terms of this document,\n  excluding Exhibits.\n\n* \"You\" (or \"Your\") means an individual or Legal Entity exercising\n  permissions granted by this License.\n\n2. General Terms\n\nCovered Software is licensed to you under the terms of the GPL\n(Exhibit A), with all the exceptions, clarifications, and additions\nnoted in this Main License Body. Where the terms in this Main License\nBody conflict in any way with the GPL, the Main License Body terms\nshall take precedence. These additional terms mean that You may not\ndistribute Covered Software or Derivative Works under plain GPL terms\nwithout special permission from Licensor.\n\nYou are not required to accept this License. However, nothing else\ngrants You permission to use, copy, modify or distribute the software\nor its derivative works. These actions are prohibited by law if You do\nnot accept this License. Therefore, by modifying, copying or\ndistributing the software (or any work based on the software), You\nindicate your acceptance of this License to do so, and all its terms\nand conditions. In addition, you agree to the terms of this License by\nclicking the Accept button or downloading the software.\n\n3. Derivative Works\n\nThis License (including the GPL portion) places important restrictions\non derived works. Licensor interprets that term quite broadly. To\navoid any misunderstandings, we consider software to constitute a\n\"derivative work\" of Covered Software for the purposes of this license\nif it does any of the following:\n\n* Integrates source code from Covered Software\n\n* Reads or includes Covered Software data files, such as nmap-os-db or\n  nmap-service-probes.\n\n* Is designed specifically to execute Covered Software and parse the\n  results (as opposed to typical shell or execution-menu apps, which\n  will execute anything you tell them to).\n\n* Includes Covered Software in a proprietary executable installer. The\n  installers produced by InstallShield are an example of\n  this. Including Nmap with other software in compressed or archival\n  form does not trigger this provision, provided appropriate open\n  source decompression or de-archiving software is widely available\n  for no charge. For the purposes of this license, an installer is\n  considered to include Covered Software even if it actually retrieves\n  a copy of Covered Software from another source during runtime (such\n  as by downloading it from the Internet).\n\n* Links (statically or dynamically) to a library which does any of the\n  above\n\n* Executes a helper program, module, or script to do any of the above.\n  This list is not exclusive, but is meant to clarify Licensor's\n  intentions with some common examples. Distribution of any works\n  which meet these criteria must be under the terms of this license\n  (including this Main License Body and GPL), with no additional\n  conditions or restrictions. They must abide by all restrictions that\n  the GPL places on derivative or collective works, including the\n  requirements for distributing their source code and allowing\n  royalty-free redistribution.\n\n4. Contributor Agreement (Grant of Copyright and Patent Licenses)\n\nEach Contributor hereby grants to Licensor a perpetual, worldwide,\nnon-exclusive, no-charge, royalty-free, irrevocable copyright license\nto reproduce, prepare Derivative Works of, publicly display, publicly\nperform, sublicense, and distribute the Contribution and such\nDerivative Works in Source or Object form.\n\nEach Contributor hereby grants to You and Licensor a perpetual,\nworldwide, non-exclusive, no-charge, royalty-free, irrevocable (except\nas stated in this section) patent license to make, have made, use,\noffer to sell, sell, import, and otherwise transfer the Work, where\nsuch license applies only to those patent claims licensable by such\nContributor that are necessarily infringed by their Contribution(s)\nalone or by combination of their Contribution(s) with the Work to\nwhich such Contribution(s) was submitted. If You institute patent\nlitigation against any entity (including a cross-claim or counterclaim\nin a lawsuit) alleging that the Work or a Contribution incorporated\nwithin the Work constitutes direct or contributory patent\ninfringement, then any patent licenses granted to You under this\nLicense for that Work shall terminate as of the date such litigation\nis filed.\n\nContributors may impose different terms on their Contributions by\nstating those terms in writing at the time the Contribution is\nmade. Contributors may withhold all authority from Licensor to\nincorporate submissions by conspicuously marking or otherwise\ndesignating them in writing as \"Not a Contribution\" at the time they\nmake the work available.\n\n5. Disclaimer of Warranty and Limitation of Liability\n\nUnless required by applicable law or agreed to in writing, Licensor\nprovides the Covered Software (and each Contributor provides its\nContributions) on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS\nOF ANY KIND, either express or implied, including, without limitation,\nany warranties or conditions of TITLE, NON-INFRINGEMENT,\nMERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely\nresponsible for determining the appropriateness of using or\nredistributing the Covered Software and assume any risks associated\nwith Your exercise of permissions under this License.\n\nIn no event and under no legal theory, whether in tort (including\nnegligence), contract, or otherwise, unless required by applicable law\n(such as deliberate and grossly negligent acts) or agreed to in\nwriting, shall any Contributor be liable to You for damages, including\nany direct, indirect, special, incidental, or consequential damages of\nany character arising as a result of this License or out of the use or\ninability to use the Covered Software (including but not limited to\ndamages for loss of goodwill, work stoppage, computer failure or\nmalfunction, or any and all other commercial damages or losses), even\nif such Contributor has been advised of the possibility of such\ndamages.\n\n6. External Deployment\n\nIf You Externally Deploy Covered Software, such as hosting a website\ndesigned to execute Nmap scans for users, the system and its\ndocumentation must, if technically feasible, prominently display a\nnotice stating that the system uses the Nmap Security Scanner to\nperform its tasks. If technically feasible, the notice must contain a\nhyperlink to https://nmap.org/ or provide that URL in the text.\n\n7. Trademarks\n\nThis License does not grant permission to use the trade names,\ntrademarks, service marks, or product names of the Licensor, except as\nrequired for reasonable and customary use in describing the origin of\nthe Covered Software.\n\n8. Termination for Patent Action\n\nThis License shall terminate automatically and You may no longer\nexercise any of the rights granted to You by this License as of the\ndate You commence an action, including a cross-claim or counterclaim,\nagainst Licensor or any licensee alleging that the Covered Software\ninfringes a patent. This termination provision shall not apply for an\naction alleging patent infringement by combinations of the Covered\nSoftware with other software or hardware.\n\n9. Jurisdiction, Venue and Governing Law\n\nThis License is governed by the laws of the State of Washington and\nthe intellectual property laws of the United States of America,\nexcluding the jurisdiction's conflict-of-law provisions. Any\nlitigation or other dispute resolution between You and Licensor\nrelating to this License shall take place in the Northern District of\nCalifornia, and You and Licensor hereby consent to the personal\njurisdiction of, and venue in, the state and federal courts within\nthat District with respect to this License. The application of the\nUnited Nations Convention on Contracts for the International Sale of\nGoods is expressly excluded.\n\n10. Npcap and the Official Nmap Windows Builds\n\nThe official Windows Nmap builds includes the Npcap driver and library\n(https://npcap.org) for packet capture and transmission on\nWindows. That software is under its own separate license terms rather\nthan this license. Therefore anyone wishing to use or redistribute\nboth pieces of software must comply with both licenses. Since Npcap\ndoes not allow for redistribution without special permission, the\nofficial Nmap Windows builds which include Npcap may not be\nredistributed without special permission. Such permission can be\nrequested by email to sales@nmap.com.\n\n11. Permission to link with OpenSSL\n\nLicensor grants permission to link Covered Software with any version\nof the OpenSSL library from OpenSSL.Org, and distribute linked\ncombinations including the two (assuming such distribution is\notherwise allowed by this agreement). You must obey this License in\nall respects for all code used other than OpenSSL.\n\n12. Waiver; Construction\n\nFailure by Licensor or any Contributor to enforce any provision of\nthis License will not be deemed a waiver of future enforcement of that\nor any other provision. Any law or regulation which provides that the\nlanguage of a contract shall be construed against the drafter will not\napply to this License.\n\n13. Enforceability\n\nIf any provision of this License is invalid or unenforceable under\napplicable law, it shall not affect the validity or enforceability of\nthe remainder of the terms of this License, and without further action\nby the parties hereto, such provision shall be reformed to the minimum\nextent necessary to make such provision valid and enforceable.\n\nExhibit A. The GNU General Public License Version 2\nGNU GENERAL PUBLIC LICENSE\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.  \n51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA\n\nEveryone is permitted to copy and distribute verbatim copies\nof this license document, but changing it is not allowed.\nPreamble\n\nThe licenses for most software are designed to take away your freedom\nto share and change it. By contrast, the GNU General Public License is\nintended to guarantee your freedom to share and change free\nsoftware--to make sure the software is free for all its users. This\nGeneral Public License applies to most of the Free Software\nFoundation's software and to any other program whose authors commit to\nusing it. (Some other Free Software Foundation software is covered by\nthe GNU Lesser General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not\nprice. Our General Public Licenses are designed to make sure that you\nhave the freedom to distribute copies of free software (and charge for\nthis service if you wish), that you receive source code or can get it\nif you want it, that you can change the software or use pieces of it\nin new free programs; and that you know you can do these things.\n\nTo protect your rights, we need to make restrictions that forbid\nanyone to deny you these rights or to ask you to surrender the\nrights. These restrictions translate to certain responsibilities for\nyou if you distribute copies of the software, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether\ngratis or for a fee, you must give the recipients all the rights that\nyou have. You must make sure that they, too, receive or can get the\nsource code. And you must show them these terms so they know their\nrights.\n\nWe protect your rights with two steps: (1) copyright the software, and\n(2) offer you this license which gives you legal permission to copy,\ndistribute and/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain\nthat everyone understands that there is no warranty for this free\nsoftware. If the software is modified by someone else and passed on,\nwe want its recipients to know that what they have is not the\noriginal, so that any problems introduced by others will not reflect\non the original authors' reputations.\n\nFinally, any free program is threatened constantly by software\npatents. We wish to avoid the danger that redistributors of a free\nprogram will individually obtain patent licenses, in effect making the\nprogram proprietary. To prevent this, we have made it clear that any\npatent must be licensed for everyone's free use or not licensed at\nall.\n\nThe precise terms and conditions for copying, distribution and\nmodification follow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a\nnotice placed by the copyright holder saying it may be distributed\nunder the terms of this General Public License. The \"Program\", below,\nrefers to any such program or work, and a \"work based on the Program\"\nmeans either the Program or any derivative work under copyright law:\nthat is to say, a work containing the Program or a portion of it,\neither verbatim or with modifications and/or translated into another\nlanguage. (Hereinafter, translation is included without limitation in\nthe term \"modification\".) Each licensee is addressed as \"you\".\n\nActivities other than copying, distribution and modification are not\ncovered by this License; they are outside its scope. The act of\nrunning the Program is not restricted, and the output from the Program\nis covered only if its contents constitute a work based on the Program\n(independent of having been made by running the Program). Whether that\nis true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source\ncode as you receive it, in any medium, provided that you conspicuously\nand appropriately publish on each copy an appropriate copyright notice\nand disclaimer of warranty; keep intact all the notices that refer to\nthis License and to the absence of any warranty; and give any other\nrecipients of the Program a copy of this License along with the\nProgram.\n\nYou may charge a fee for the physical act of transferring a copy, and\nyou may at your option offer warranty protection in exchange for a\nfee.\n\n2. You may modify your copy or copies of the Program or any portion of\nit, thus forming a work based on the Program, and copy and distribute\nsuch modifications or work under the terms of Section 1 above,\nprovided that you also meet all of these conditions:\n\na) You must cause the modified files to carry prominent notices\nstating that you changed the files and the date of any change.\n\nb) You must cause any work that you distribute or publish, that in\nwhole or in part contains or is derived from the Program or any part\nthereof, to be licensed as a whole at no charge to all third parties\nunder the terms of this License.\n\nc) If the modified program normally reads commands interactively when\nrun, you must cause it, when started running for such interactive use\nin the most ordinary way, to print or display an announcement\nincluding an appropriate copyright notice and a notice that there is\nno warranty (or else, saying that you provide a warranty) and that\nusers may redistribute the program under these conditions, and telling\nthe user how to view a copy of this License. (Exception: if the\nProgram itself is interactive but does not normally print such an\nannouncement, your work based on the Program is not required to print\nan announcement.)\n\nThese requirements apply to the modified work as a whole. If\nidentifiable sections of that work are not derived from the Program,\nand can be reasonably considered independent and separate works in\nthemselves, then this License, and its terms, do not apply to those\nsections when you distribute them as separate works. But when you\ndistribute the same sections as part of a whole which is a work based\non the Program, the distribution of the whole must be on the terms of\nthis License, whose permissions for other licensees extend to the\nentire whole, and thus to each and every part regardless of who wrote\nit.\n\nThus, it is not the intent of this section to claim rights or contest\nyour rights to work written entirely by you; rather, the intent is to\nexercise the right to control the distribution of derivative or\ncollective works based on the Program.\n\nIn addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.\n\n3. You may copy and distribute the Program (or a work based on it,\nunder Section 2) in object code or executable form under the terms of\nSections 1 and 2 above provided that you also do one of the following:\n\na) Accompany it with the complete corresponding machine-readable\nsource code, which must be distributed under the terms of Sections 1\nand 2 above on a medium customarily used for software interchange; or,\n\nb) Accompany it with a written offer, valid for at least three years,\nto give any third party, for a charge no more than your cost of\nphysically performing source distribution, a complete machine-readable\ncopy of the corresponding source code, to be distributed under the\nterms of Sections 1 and 2 above on a medium customarily used for\nsoftware interchange; or,\n\nc) Accompany it with the information you received as to the offer to\ndistribute corresponding source code. (This alternative is allowed\nonly for noncommercial distribution and only if you received the\nprogram in object code or executable form with such an offer, in\naccord with Subsection b above.)\n\nThe source code for a work means the preferred form of the work for\nmaking modifications to it. For an executable work, complete source\ncode means all the source code for all modules it contains, plus any\nassociated interface definition files, plus the scripts used to\ncontrol compilation and installation of the executable. However, as a\nspecial exception, the source code distributed need not include\nanything that is normally distributed (in either source or binary\nform) with the major components (compiler, kernel, and so on) of the\noperating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering\naccess to copy from a designated place, then offering equivalent\naccess to copy the source code from the same place counts as\ndistribution of the source code, even though third parties are not\ncompelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program\nexcept as expressly provided under this License. Any attempt otherwise\nto copy, modify, sublicense or distribute the Program is void, and\nwill automatically terminate your rights under this License. However,\nparties who have received copies, or rights, from you under this\nLicense will not have their licenses terminated so long as such\nparties remain in full compliance.\n\n5. You are not required to accept this License, since you have not\nsigned it. However, nothing else grants you permission to modify or\ndistribute the Program or its derivative works. These actions are\nprohibited by law if you do not accept this License. Therefore, by\nmodifying or distributing the Program (or any work based on the\nProgram), you indicate your acceptance of this License to do so, and\nall its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the\nProgram), the recipient automatically receives a license from the\noriginal licensor to copy, distribute or modify the Program subject to\nthese terms and conditions. You may not impose any further\nrestrictions on the recipients' exercise of the rights granted\nherein. You are not responsible for enforcing compliance by third\nparties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues),\nconditions are imposed on you (whether by court order, agreement or\notherwise) that contradict the conditions of this License, they do not\nexcuse you from the conditions of this License. If you cannot\ndistribute so as to satisfy simultaneously your obligations under this\nLicense and any other pertinent obligations, then as a consequence you\nmay not distribute the Program at all. For example, if a patent\nlicense would not permit royalty-free redistribution of the Program by\nall those who receive copies directly or indirectly through you, then\nthe only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under\nany particular circumstance, the balance of the section is intended to\napply and the section as a whole is intended to apply in other\ncircumstances.\n\nIt is not the purpose of this section to induce you to infringe any\npatents or other property right claims or to contest validity of any\nsuch claims; this section has the sole purpose of protecting the\nintegrity of the free software distribution system, which is\nimplemented by public license practices. Many people have made\ngenerous contributions to the wide range of software distributed\nthrough that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing\nto distribute software through any other system and a licensee cannot\nimpose that choice.\n\nThis section is intended to make thoroughly clear what is believed to\nbe a consequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in\ncertain countries either by patents or by copyrighted interfaces, the\noriginal copyright holder who places the Program under this License\nmay add an explicit geographical distribution limitation excluding\nthose countries, so that distribution is permitted only in or among\ncountries not thus excluded. In such case, this License incorporates\nthe limitation as if written in the body of this License.\n\n9. The Free Software Foundation may publish revised and/or new\nversions of the General Public License from time to time. Such new\nversions will be similar in spirit to the present version, but may\ndiffer in detail to address new problems or concerns.\n\nEach version is given a distinguishing version number. If the Program\nspecifies a version number of this License which applies to it and\n\"any later version\", you have the option of following the terms and\nconditions either of that version or of any later version published by\nthe Free Software Foundation. If the Program does not specify a\nversion number of this License, you may choose any version ever\npublished by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free\nprograms whose distribution conditions are different, write to the\nauthor to ask for permission. For software which is copyrighted by the\nFree Software Foundation, write to the Free Software Foundation; we\nsometimes make exceptions for this. Our decision will be guided by the\ntwo goals of preserving the free status of all derivatives of our free\nsoftware and of promoting the sharing and reuse of software generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO\nWARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE\nLAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS\nAND/OR OTHER PARTIES PROVIDE THE PROGRAM \"AS IS\" WITHOUT WARRANTY OF\nANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,\nTHE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\nPURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE\nPROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME\nTHE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN\nWRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY\nAND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU\nFOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR\nCONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE\nPROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING\nRENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF\nSUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH\nDAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\n[For brevity, we've cut out the GPL's final section on \"How to Apply\nTehse Terms to Your New Program\", but you can find that at\nhttps://www.gnu.org/licenses/gpl-2.0.html#SEC4 ]",
    "name" : "GPL-2.0-only WITH LicenseRef-scancode-npsl-exception-0.93"
  }, {
    "licenseId" : "LicenseRef-GPL-2.0-with-oracle-classpath-exception",
    "extractedText" : "The GNU General Public License (GPL)\n\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.\n59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nEveryone is permitted to copy and distribute verbatim copies of this license\ndocument, but changing it is not allowed.\n\nPreamble\n\nThe licenses for most software are designed to take away your freedom to share\nand change it.  By contrast, the GNU General Public License is intended to\nguarantee your freedom to share and change free software--to make sure the\nsoftware is free for all its users.  This General Public License applies to\nmost of the Free Software Foundation's software and to any other program whose\nauthors commit to using it.  (Some other Free Software Foundation software is\ncovered by the GNU Library General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not price.  Our\nGeneral Public Licenses are designed to make sure that you have the freedom to\ndistribute copies of free software (and charge for this service if you wish),\nthat you receive source code or can get it if you want it, that you can change\nthe software or use pieces of it in new free programs; and that you know you\ncan do these things.\n\nTo protect your rights, we need to make restrictions that forbid anyone to deny\nyou these rights or to ask you to surrender the rights.  These restrictions\ntranslate to certain responsibilities for you if you distribute copies of the\nsoftware, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether gratis or for\na fee, you must give the recipients all the rights that you have.  You must\nmake sure that they, too, receive or can get the source code.  And you must\nshow them these terms so they know their rights.\n\nWe protect your rights with two steps: (1) copyright the software, and (2)\noffer you this license which gives you legal permission to copy, distribute\nand/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain that\neveryone understands that there is no warranty for this free software.  If the\nsoftware is modified by someone else and passed on, we want its recipients to\nknow that what they have is not the original, so that any problems introduced\nby others will not reflect on the original authors' reputations.\n\nFinally, any free program is threatened constantly by software patents.  We\nwish to avoid the danger that redistributors of a free program will\nindividually obtain patent licenses, in effect making the program proprietary.\nTo prevent this, we have made it clear that any patent must be licensed for\neveryone's free use or not licensed at all.\n\nThe precise terms and conditions for copying, distribution and modification\nfollow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a notice\nplaced by the copyright holder saying it may be distributed under the terms of\nthis General Public License.  The \"Program\", below, refers to any such program\nor work, and a \"work based on the Program\" means either the Program or any\nderivative work under copyright law: that is to say, a work containing the\nProgram or a portion of it, either verbatim or with modifications and/or\ntranslated into another language.  (Hereinafter, translation is included\nwithout limitation in the term \"modification\".) Each licensee is addressed as\n\"you\".\n\nActivities other than copying, distribution and modification are not covered by\nthis License; they are outside its scope.  The act of running the Program is\nnot restricted, and the output from the Program is covered only if its contents\nconstitute a work based on the Program (independent of having been made by\nrunning the Program).  Whether that is true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source code as\nyou receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice and\ndisclaimer of warranty; keep intact all the notices that refer to this License\nand to the absence of any warranty; and give any other recipients of the\nProgram a copy of this License along with the Program.\n\nYou may charge a fee for the physical act of transferring a copy, and you may\nat your option offer warranty protection in exchange for a fee.\n\n2. You may modify your copy or copies of the Program or any portion of it, thus\nforming a work based on the Program, and copy and distribute such modifications\nor work under the terms of Section 1 above, provided that you also meet all of\nthese conditions:\n\n    a) You must cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change.\n\n    b) You must cause any work that you distribute or publish, that in whole or\n    in part contains or is derived from the Program or any part thereof, to be\n    licensed as a whole at no charge to all third parties under the terms of\n    this License.\n\n    c) If the modified program normally reads commands interactively when run,\n    you must cause it, when started running for such interactive use in the\n    most ordinary way, to print or display an announcement including an\n    appropriate copyright notice and a notice that there is no warranty (or\n    else, saying that you provide a warranty) and that users may redistribute\n    the program under these conditions, and telling the user how to view a copy\n    of this License.  (Exception: if the Program itself is interactive but does\n    not normally print such an announcement, your work based on the Program is\n    not required to print an announcement.)\n\nThese requirements apply to the modified work as a whole.  If identifiable\nsections of that work are not derived from the Program, and can be reasonably\nconsidered independent and separate works in themselves, then this License, and\nits terms, do not apply to those sections when you distribute them as separate\nworks.  But when you distribute the same sections as part of a whole which is a\nwork based on the Program, the distribution of the whole must be on the terms\nof this License, whose permissions for other licensees extend to the entire\nwhole, and thus to each and every part regardless of who wrote it.\n\nThus, it is not the intent of this section to claim rights or contest your\nrights to work written entirely by you; rather, the intent is to exercise the\nright to control the distribution of derivative or collective works based on\nthe Program.\n\nIn addition, mere aggregation of another work not based on the Program with the\nProgram (or with a work based on the Program) on a volume of a storage or\ndistribution medium does not bring the other work under the scope of this\nLicense.\n\n3. You may copy and distribute the Program (or a work based on it, under\nSection 2) in object code or executable form under the terms of Sections 1 and\n2 above provided that you also do one of the following:\n\n    a) Accompany it with the complete corresponding machine-readable source\n    code, which must be distributed under the terms of Sections 1 and 2 above\n    on a medium customarily used for software interchange; or,\n\n    b) Accompany it with a written offer, valid for at least three years, to\n    give any third party, for a charge no more than your cost of physically\n    performing source distribution, a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of Sections 1\n    and 2 above on a medium customarily used for software interchange; or,\n\n    c) Accompany it with the information you received as to the offer to\n    distribute corresponding source code.  (This alternative is allowed only\n    for noncommercial distribution and only if you received the program in\n    object code or executable form with such an offer, in accord with\n    Subsection b above.)\n\nThe source code for a work means the preferred form of the work for making\nmodifications to it.  For an executable work, complete source code means all\nthe source code for all modules it contains, plus any associated interface\ndefinition files, plus the scripts used to control compilation and installation\nof the executable.  However, as a special exception, the source code\ndistributed need not include anything that is normally distributed (in either\nsource or binary form) with the major components (compiler, kernel, and so on)\nof the operating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering access to copy\nfrom a designated place, then offering equivalent access to copy the source\ncode from the same place counts as distribution of the source code, even though\nthird parties are not compelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program except as\nexpressly provided under this License.  Any attempt otherwise to copy, modify,\nsublicense or distribute the Program is void, and will automatically terminate\nyour rights under this License.  However, parties who have received copies, or\nrights, from you under this License will not have their licenses terminated so\nlong as such parties remain in full compliance.\n\n5. You are not required to accept this License, since you have not signed it.\nHowever, nothing else grants you permission to modify or distribute the Program\nor its derivative works.  These actions are prohibited by law if you do not\naccept this License.  Therefore, by modifying or distributing the Program (or\nany work based on the Program), you indicate your acceptance of this License to\ndo so, and all its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the Program),\nthe recipient automatically receives a license from the original licensor to\ncopy, distribute or modify the Program subject to these terms and conditions.\nYou may not impose any further restrictions on the recipients' exercise of the\nrights granted herein.  You are not responsible for enforcing compliance by\nthird parties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues), conditions\nare imposed on you (whether by court order, agreement or otherwise) that\ncontradict the conditions of this License, they do not excuse you from the\nconditions of this License.  If you cannot distribute so as to satisfy\nsimultaneously your obligations under this License and any other pertinent\nobligations, then as a consequence you may not distribute the Program at all.\nFor example, if a patent license would not permit royalty-free redistribution\nof the Program by all those who receive copies directly or indirectly through\nyou, then the only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under any\nparticular circumstance, the balance of the section is intended to apply and\nthe section as a whole is intended to apply in other circumstances.\n\nIt is not the purpose of this section to induce you to infringe any patents or\nother property right claims or to contest validity of any such claims; this\nsection has the sole purpose of protecting the integrity of the free software\ndistribution system, which is implemented by public license practices.  Many\npeople have made generous contributions to the wide range of software\ndistributed through that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing to\ndistribute software through any other system and a licensee cannot impose that\nchoice.\n\nThis section is intended to make thoroughly clear what is believed to be a\nconsequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in certain\ncountries either by patents or by copyrighted interfaces, the original\ncopyright holder who places the Program under this License may add an explicit\ngeographical distribution limitation excluding those countries, so that\ndistribution is permitted only in or among countries not thus excluded.  In\nsuch case, this License incorporates the limitation as if written in the body\nof this License.\n\n9. The Free Software Foundation may publish revised and/or new versions of the\nGeneral Public License from time to time.  Such new versions will be similar in\nspirit to the present version, but may differ in detail to address new problems\nor concerns.\n\nEach version is given a distinguishing version number.  If the Program\nspecifies a version number of this License which applies to it and \"any later\nversion\", you have the option of following the terms and conditions either of\nthat version or of any later version published by the Free Software Foundation.\nIf the Program does not specify a version number of this License, you may\nchoose any version ever published by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free programs\nwhose distribution conditions are different, write to the author to ask for\npermission.  For software which is copyrighted by the Free Software Foundation,\nwrite to the Free Software Foundation; we sometimes make exceptions for this.\nOur decision will be guided by the two goals of preserving the free status of\nall derivatives of our free software and of promoting the sharing and reuse of\nsoftware generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR\nTHE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN OTHERWISE\nSTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE\nPROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND\nPERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE,\nYOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL\nANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE\nPROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER\nOR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\nHow to Apply These Terms to Your New Programs\n\nIf you develop a new program, and you want it to be of the greatest possible\nuse to the public, the best way to achieve this is to make it free software\nwhich everyone can redistribute and change under these terms.\n\nTo do so, attach the following notices to the program.  It is safest to attach\nthem to the start of each source file to most effectively convey the exclusion\nof warranty; and each file should have at least the \"copyright\" line and a\npointer to where the full notice is found.\n\n    One line to give the program's name and a brief idea of what it does.\n\n    Copyright (C) <year> <name of author>\n\n    This program is free software; you can redistribute it and/or modify it\n    under the terms of the GNU General Public License as published by the Free\n    Software Foundation; either version 2 of the License, or (at your option)\n    any later version.\n\n    This program is distributed in the hope that it will be useful, but WITHOUT\n    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\n    FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for\n    more details.\n\n    You should have received a copy of the GNU General Public License along\n    with this program; if not, write to the Free Software Foundation, Inc., 59\n    Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nAlso add information on how to contact you by electronic and paper mail.\n\nIf the program is interactive, make it output a short notice like this when it\nstarts in an interactive mode:\n\n    Gnomovision version 69, Copyright (C) year name of author Gnomovision comes\n    with ABSOLUTELY NO WARRANTY; for details type 'show w'.  This is free\n    software, and you are welcome to redistribute it under certain conditions;\n    type 'show c' for details.\n\nThe hypothetical commands 'show w' and 'show c' should show the appropriate\nparts of the General Public License.  Of course, the commands you use may be\ncalled something other than 'show w' and 'show c'; they could even be\nmouse-clicks or menu items--whatever suits your program.\n\nYou should also get your employer (if you work as a programmer) or your school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.  Here\nis a sample; alter the names:\n\n    Yoyodyne, Inc., hereby disclaims all copyright interest in the program\n    'Gnomovision' (which makes passes at compilers) written by James Hacker.\n\n    signature of Ty Coon, 1 April 1989\n\n    Ty Coon, President of Vice\n\nThis General Public License does not permit incorporating your program into\nproprietary programs.  If your program is a subroutine library, you may\nconsider it more useful to permit linking proprietary applications with the\nlibrary.  If this is what you want to do, use the GNU Library General Public\nLicense instead of this License.\n\n\n\"CLASSPATH\" EXCEPTION TO THE GPL\n\nCertain source files distributed by Oracle America and/or its affiliates are\nsubject to the following clarification and special exception to the GPL, but\nonly where Oracle has expressly included in the particular source file's header\nthe words \"Oracle designates this particular file as subject to the \"Classpath\"\nexception as provided by Oracle in the LICENSE file that accompanied this code.\"\n\n    Linking this library statically or dynamically with other modules is making\n    a combined work based on this library.  Thus, the terms and conditions of\n    the GNU General Public License cover the whole combination.\n\n    As a special exception, the copyright holders of this library give you\n    permission to link this library with independent modules to produce an\n    executable, regardless of the license terms of these independent modules,\n    and to copy and distribute the resulting executable under terms of your\n    choice, provided that you also meet, for each linked independent module,\n    the terms and conditions of the license of that module.  An independent\n    module is a module which is not derived from or based on this library.  If\n    you modify this library, you may extend this exception to your version of\n    the library, but you are not obligated to do so.  If you do not wish to do\n    so, delete this exception statement from your version.\n\n\n\n\nADDITIONAL INFORMATION ABOUT LICENSING\n\nCertain files distributed by Oracle America, Inc. and/or its affiliates are\nsubject to the following clarification and special exception to the GPLv2,\nbased on the GNU Project exception for its Classpath libraries, known as the\nGNU Classpath Exception.\n\nNote that Oracle includes multiple, independent programs in this software\npackage.  Some of those programs are provided under licenses deemed\nincompatible with the GPLv2 by the Free Software Foundation and others.\nFor example, the package includes programs licensed under the Apache\nLicense, Version 2.0 and may include FreeType. Such programs are licensed\nto you under their original licenses.\n\nOracle facilitates your further distribution of this package by adding the\nClasspath Exception to the necessary parts of its GPLv2 code, which permits\nyou to use that code in combination with other independent modules not\nlicensed under the GPLv2. However, note that this would not permit you to\ncommingle code under an incompatible license with Oracle's GPLv2 licensed\ncode by, for example, cutting and pasting such code into a file also\ncontaining Oracle's GPLv2 licensed code and then distributing the result.\n\nAdditionally, if you were to remove the Classpath Exception from any of the\nfiles to which it applies and distribute the result, you would likely be\nrequired to license some or all of the other code in that distribution under\nthe GPLv2 as well, and since the GPLv2 is incompatible with the license terms\nof some items included in the distribution by Oracle, removing the Classpath\nException could therefore effectively compromise your ability to further\ndistribute the package.\n\nFailing to distribute notices associated with some files may also create\nunexpected legal consequences.\n\nProceed with caution and we recommend that you obtain the advice of a lawyer\nskilled in open source matters before removing the Classpath Exception or\nmaking modifications to this package which may subsequently be redistributed\nand/or involve the use of third party software.",
    "name" : "GPL 2.0 with oracle classpath exception"
  }, {
    "licenseId" : "LicenseRef-Inner-Net-2.0-GLIBC",
    "extractedText" : "The Inner Net License, Version 2.00\n\nThe author(s) grant permission for redistribution and use in source and\nbinary forms, with or without modification, of the software and documentation\nprovided that the following conditions are met:\n\n0. If you receive a version of the software that is specifically labelled\n   as not being for redistribution (check the version message and/or README),\n   you are not permitted to redistribute that version of the software in any\n   way or form.\n1. All terms of the all other applicable copyrights and licenses must be\n   followed.\n2. Redistributions of source code must retain the authors' copyright\n   notice(s), this list of conditions, and the following disclaimer.\n3. Redistributions in binary form must reproduce the authors' copyright\n   notice(s), this list of conditions, and the following disclaimer in the\n   documentation and/or other materials provided with the distribution.\n4. [The copyright holder has authorized the removal of this clause.]\n5. Neither the name(s) of the author(s) nor the names of its contributors\n   may be used to endorse or promote products derived from this software\n   without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY ITS AUTHORS AND CONTRIBUTORS ``AS IS'' AND ANY\nEXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE FOR ANY\nDIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\nANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n  If these license terms cause you a real problem, contact the author.",
    "name" : "Inner Net 2.0 GLIBC"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-RedHat-UBI-EULA",
    "extractedText" : "END USER LICENSE AGREEMENT\nRED HAT UNIVERSAL BASE IMAGE\n\nPLEASE READ THIS END USER LICENSE AGREEMENT CAREFULLY BEFORE USING SOFTWARE FROM RED HAT. BY USING RED HAT \nSOFTWARE, YOU SIGNIFY YOUR ASSENT TO AND ACCEPTANCE OF THIS END USER LICENSE AGREEMENT AND ACKNOWLEDGE YOU \nHAVE READ AND UNDERSTAND THE TERMS. AN INDIVIDUAL ACTING ON BEHALF OF AN ENTITY REPRESENTS THAT HE OR SHE HAS THE \nAUTHORITY TO ENTER INTO THIS END USER LICENSE AGREEMENT ON BEHALF OF THAT ENTITY. IF YOU DO NOT ACCEPT THE TERMS \nOF THIS AGREEMENT, THEN YOU MUST NOT USE THE RED HAT SOFTWARE. THIS END USER LICENSE AGREEMENT DOES NOT PROVIDE \nANY RIGHTS TO RED HAT SERVICES SUCH AS SOFTWARE MAINTENANCE, UPGRADES OR SUPPORT. PLEASE REVIEW YOUR SERVICE \nOR SUBSCRIPTION AGREEMENT(S) THAT YOU MAY HAVE WITH RED HAT OR OTHER AUTHORIZED RED HAT SERVICE PROVIDERS \nREGARDING SERVICES AND ASSOCIATED PAYMENTS. \n\nThis end user license agreement (“EULA”) governs the use of Red Hat Universal Base Image and associated software supporting such container(s) \nand any related updates, source code, including the appearance, structure and organization (the “Programs”), regardless of the delivery mechanism. \nIf a Red Hat Universal Base Image is included in another Red Hat product, the EULA terms of such other Red Hat product will apply and supersede \nthis EULA. If a Red Hat Universal Base Image is included in a third party work, the terms of this EULA will continue to govern the Red Hat Universal \nBase Image. \n\n1. License Grant. Subject to the terms of this EULA, Red Hat, Inc. (“Red Hat”) grants to you a perpetual, worldwide license to the Programs (each \nof which may include multiple software components). With the exception of the Red Hat trademark identified in Section 2 below, each software \ncomponent is governed by a license that permits you to run, copy, modify, and redistribute (subject to certain obligations in some cases) the \nsoftware components. This EULA pertains solely to the Programs and does not limit your rights under, or grant you rights that supersede, the \nlicense terms applicable to any particular component. The license terms applicable to each software component are provided in the source code \nof that component.\n\n2. Intellectual Property Rights. The Programs and each of their components are owned by Red Hat and other licensors and are protected under \ncopyright law and other laws as applicable. Title to the Programs and any component shall remain with Red Hat and other licensors, subject to \nthe applicable license, excluding any independently developed and licensed work. The “Red Hat” trademark is a registered trademark of Red \nHat and its affiliates in the U.S. and other countries. Subject to Red Hat’s trademark usage guidelines (set forth at\nhttp://www.redhat.com/about/corporate/trademark/), this EULA permits you to distribute the Programs that include the Red Hat trademark, \nprovided you do not make any statements on behalf of Red Hat, including but not limited to, stating or in any way suggesting (in any public, \nprivate and/or confidential statement (whether written or verbal)) that Red Hat supports or endorses software built and delivered with a Red Hat \nUniversal Base Image(s) (such derivative works referred to as a “Red Hat Based Container Images”); provided if a Red Hat Based Container \nImage is Red Hat Certified and deployed on a Red Hat supported configuration as set forth at https://access.redhat.com/articles/2726611 then \nyou may state that the Red Hat Universal Base Image is supported by Red Hat. You agree to include this unmodified EULA in all distributions of \ncontainer images sourced, built or otherwise derived from the Programs. If you modify the Red Hat Universal Base Image(s), you must remove \nany Red Hat trademark(s) prior to any subsequent distribution. Any breach of this Section 2 is a material breach of the EULA and you may no \nlonger use and/or distribute the Red Hat trademark(s). Modifications to the software may corrupt the Programs. \n\n3. Limited Warranty. Except as specifically stated in this Section 3, a separate agreement with Red Hat, or a license for a particular component,\nto the maximum extent permitted under applicable law, the Programs and the components are provided and licensed “as is” without \nwarranty of any kind, expressed or implied, including the implied warranties of merchantability, non-infringement or fitness for a \nparticular purpose. Neither Red Hat nor its affiliates warrant that the functions contained in the Programs will meet your requirements or that \nthe operation of the Programs will be entirely error free, appear or perform precisely as described in the accompanying documentation, or comply \nwith regulatory requirements. Red Hat warrants that the media on which the Programs and the components are provided will be free from defects \nin materials and manufacture under normal use for a period of 30 days from the date of delivery to you. This warranty extends only to the party \nthat purchases subscription services for the supported configurations from Red Hat and/or its affiliates or a Red Hat authorized \ndistributor. \n\n4. Limitation of Remedies and Liability. To the maximum extent permitted by applicable law, your exclusive remedy under this EULA is to return \nany defective media within 30 days of delivery along with a copy of your payment receipt and Red Hat, at its option, will replace it or refund the \nmoney you paid for the media. To the maximum extent permitted under applicable law, under no circumstances will Red Hat, its affiliates, \nany Red Hat authorized distributor, or the licensor of any component provided to you under this EULA be liable to you for any incidental \nor consequential damages, including lost profits or lost savings arising out of the use or inability to use the Programs or any \ncomponent, even if Red Hat, its affiliates, an authorized distributor, and/or licensor has been advised of the possibility of such \ndamages. In no event shall Red Hat's or its affiliates’ liability, an authorized distributor’s liability or the liability of the licensor of a \ncomponent provided to you under this EULA exceed the amount that you paid to Red Hat for the media under this EULA.\n\n5. Export Control. As required by the laws of the United States and other countries, you represent and warrant that you: (a) understand that the\nPrograms and their components may be subject to export controls under the U.S. Commerce Department’s Export Administration Regulations \n(“EAR”); (b) are not located in a prohibited destination country under the EAR or U.S. sanctions regulations (currently Cuba, Iran, North Korea, \nSudan, Syria, and the Crimea Region of Ukraine, subject to change as posted by the United States government); (c) will not export, re-export, or \ntransfer the Programs to any prohibited destination, persons or entities on the U.S. Bureau of Industry and Security Denied Parties List or Entity \nList, or the U.S. Office of Foreign Assets Control list of Specially Designated Nationals and Blocked Persons, or any similar lists maintained by \nother countries, without the necessary export license(s) or authorizations(s); (d) will not use or transfer the Programs for use in connection with \nany nuclear, chemical or biological weapons, missile technology, or military end-uses where prohibited by an applicable arms embargo, unless \nauthorized by the relevant government agency by regulation or specific license; (e) understand and agree that if you are in the United States and \nexport or transfer the Programs to eligible end users, you will, to the extent required by EAR Section 740.17(e), submit semi-annual reports to \nthe Commerce Department’s Bureau of Industry and Security, which include the name and address (including country) of each transferee; and \n(f) understand that countries including the United States may restrict the import, use, or export of encryption products (which may include the \nPrograms and the components) and agree that you shall be solely responsible for compliance with any such import, use, or export restrictions.\nRed Hat Universal Base Image\n\n6. Third Party Software. The Program may be provided with third party software programs subject to their own license terms. The license terms \neither accompany the third party software programs or, in some instances, may be viewed at www.registry.redhat.com. If you do not agree to \nabide by the applicable license terms for the third party software programs, then you may not install, distribute or use them. \n\n7. General. If any provision of this EULA is held to be unenforceable, the enforceability of the remaining provisions shall not be affected. Any claim, \ncontroversy or dispute arising under or relating to this EULA shall be governed by the laws of the State of New York and of the United States, \nwithout regard to any conflict of laws provisions. The rights and obligations of the parties to this EULA shall not be governed by the United \nNations Convention on the International Sale of Goods.\n\nCopyright © 2019 Red Hat, Inc. All rights reserved. “Red Hat,” is a registered trademark of Red Hat, Inc. All other trademarks are the property of their respective \nowners. \n\nSee https://www.redhat.com/licenses/EULA_Red_Hat_Universal_Base_Image_English_20190422.pdf",
    "name" : "RedHat UBI EULA"
  }, {
    "licenseId" : "LicenseRef-scancode-bsd-new-tcpdump",
    "extractedText" : "* Redistribution and use in source and binary forms, with or without\n * modification, are permitted provided that: (1) source code\n * distributions retain the above copyright notice and this paragraph\n * in its entirety, and (2) distributions including binary code include\n * the above copyright notice and this paragraph in its entirety in\n * the documentation or other materials provided with the distribution.\n * The name of author may not be used to endorse or\n * promote products derived from this software without specific prior\n * written permission.  THIS SOFTWARE IS PROVIDED ``AS IS'' AND\n * WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT\n * LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS\n * FOR A PARTICULAR PURPOSE.",
    "name" : "LicenseRef-scancode-bsd-new-tcpdump"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-messaging-service-v3001.2.15-6055120b-03ee-470e-b03a-2dd97d4ead5a",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/messaging-service@3001.2.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "messaging-service",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "3001.2.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-c8ycustom-pulsar-helm-chart-3001.2.15",
    "copyrightText" : "Copyright 2017-2021 The Apache Software Foundation",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iHTbH_ci7cFRIlb2-S52VTOOtp2sudamF3OjnK2wkb4/pulsar-helm-chart-~.tgz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/c8ycustom/pulsar-helm-chart@3001.2.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/c8ycustom/pulsar-helm-chart",
    "versionInfo" : "3001.2.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-github-apache-pulsar-helm-chart-pulsar-2.7.1",
    "copyrightText" : "Copyright 2017-2021 The Apache Software Foundation",
    "downloadLocation" : "https://github.com/apache/pulsar-helm-chart/archive/refs/tags/pulsar-2.7.1.tar.gz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l-yVCwawRXF1gTftWr-OqP_SBIQwyteUewtbsqcj6v0/sources.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:github/apache/pulsar-helm-chart@pulsar-2.7.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/apache/pulsar-helm-chart",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "github/apache/pulsar-helm-chart",
    "versionInfo" : "pulsar-2.7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.auth0-java-jwt-4.3.0",
    "copyrightText" : "Copyright (c) 2015 Auth0, Inc. <support@auth0.com> (http://auth0.com)\nCopyright 2015 the original author or authors\n\nAuthors: Auth0, Inc.; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/auth0/java-jwt/4.3.0/java-jwt-4.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/00PUh8Cp8_5jUQZ3UnzqUcInC2_R-Y-wKeoeTAbRn7g/java-jwt-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.auth0/java-jwt@4.3.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/auth0/java-jwt",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.auth0/java-jwt",
    "versionInfo" : "4.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.auth0-jwks-rsa-0.22.0",
    "copyrightText" : "Copyright (c) 2016 Auth0, Inc. <support@auth0.com> (http://auth0.com)\nCopyright 2015 the original author or authors\n\nAuthors: Auth0, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/auth0/jwks-rsa/0.22.0/jwks-rsa-0.22.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bb0DZzKwpA7tzYsWIabbZmLV4RIypMFRu55PXf0AQXo/jwks-rsa-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.auth0/jwks-rsa@0.22.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/auth0/jwks-rsa-java",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.auth0/jwks-rsa",
    "versionInfo" : "0.22.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.beust-jcommander-1.82",
    "copyrightText" : "Copyright (c) 2010 the original author or authors\n\nAuthors: Angus Smithson; Cedric Beust <cedric@beust.com>; Gary Gregory; Markus KARG (markus@headcrashing.eu); Tim Gallagher; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/beust/jcommander/1.82/jcommander-1.82.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.beust/jcommander@1.82",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nIceyuzz3QcuKgi3o10vrlt9jE4tNgoCouIYKJbmQzI/jcommander-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://jcommander.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.beust/jcommander",
    "versionInfo" : "1.82"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.carrotsearch-hppc-0.9.1",
    "copyrightText" : "Copyright 2010-2013, Carrot Search\nCopyright (c) 2010-2022 Carrot Search s.c.\nCopyright (c) 2017 Ivan Kochurkin\nCopyright (c) 2013 Terence Parr, Sam Harwell\nCopyright 2015 the original author or authors\n(c) Carrot Search s.c., http://carrotsearch.com\n\nAuthors: Carrot Search; Carrot Search s.c.; Ivan Kochurkin; Terence Parr, Sam Harwell; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/carrotsearch/hppc/0.9.1/hppc-0.9.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.carrotsearch/hppc@0.9.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KzWYLzs00JN6d8FFDtj8QhquOantvHH31VJIsnZtSQ0/~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.carrotsearch/hppc",
    "versionInfo" : "0.9.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2",
    "copyrightText" : "Copyright 2007-present the original author or authors\n\nAuthors: Pascal Gelinas; Tatu Saloranta (tatu.saloranta@iki.fi); a community of developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.14.2/jackson-annotations-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YFc3lhWr6xOexYQYn9xQr9CUFwvoGQYfVHB-i0D6U60/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.14.2",
    "copyrightText" : "Copyright (c) 2021, 2022, Oracle and/or its affiliates\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) Werner Randelshofer. Apache",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.14.2/jackson-core-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5I9ELMtEEwGoN8wF2E5wbxCKkYt77s2xi6nOLTZrkTg/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.14.2",
    "copyrightText" : "Copyright 2010 Google Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.14.2/jackson-databind-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rQfAXF3KlU7K3uH_InfWQtS2dmpd9t10mPb_r6k3qdY/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.14.2",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2012 FasterXML.com\nCopyright (c) Gerwin Klein, Steve Rowe, Regis Decamps, Google LLC.\nCopyright (c) Tom Preston-Werner\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.14.2/jackson-dataformat-yaml-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cH5veiE_GzR56MfK8S7s4JhX3DQA5UtVUxF4iJFCNTc/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.14.2",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.14.2/jackson-datatype-jdk8-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AU_ZgxYDAmVB5-GqvYiXT6uLh7-hUckKfs44lVtPP_s/jackson-datatype-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.14.2",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.14.2/jackson-datatype-jsr310-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x5LQcouTqDsKGrhj8XtcJig81u-ze3m-pUDy6ElA-YU/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.14.2",
    "copyrightText" : "Copyright (c) 2012 2013 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.14.2/jackson-jaxrs-base-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dNvV2iYZTC0wqEWoM5aRYNMxV8VN6C-vpImXf9i78Ck/jackson-jaxrs-base-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.14.2",
    "copyrightText" : "Copyright (c) 2012 2013 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.14.2/jackson-jaxrs-json-provider-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-jtESVpk8YGo4lJf6oXcvYsa5no09dxnydTEMSEzTv0/jackson-jaxrs-json-provider-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.14.2",
    "copyrightText" : "Copyright (c), Data Geekery GmbH, contact@datageekery.com\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2016 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.14.2/jackson-module-jaxb-annotations-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vNLqYRaqLhnDAwMXBf1PFDklJtzkmZ5B3UYx7RlBWBo/jackson-module-jaxb-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.14.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-base",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jsonSchema-2.14.2",
    "copyrightText" : "Copyright 2013 FasterXML.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jsonSchema/2.14.2/jackson-module-jsonSchema-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wibMlJ9MhPKyiT9bXRbz8qBV2r-BqvUo93c_s-q4oCw/jackson-module-jsonSchema-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jsonSchema@2.14.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-module-jsonSchema",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jsonSchema",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.14.2",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.14.2/jackson-module-parameter-names-2.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5xSDPXhYrnX3JYjyiJazD_qE5H8jlQkpxfxsKxwowiI/jackson-module-parameter-names-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.14.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names",
    "versionInfo" : "2.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.ben-manes.caffeine-caffeine-2.9.1",
    "copyrightText" : "Copyright 2014 Ben Manes",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/ben-manes/caffeine/caffeine/2.9.1/caffeine-2.9.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sBdrBmHvK641j9aypCR3U2dXJXgqMbkBG0EQJzitTEU/caffeine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ben-manes/caffeine",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.ben-manes.caffeine/caffeine",
    "versionInfo" : "2.9.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.oshi-oshi-core-java11-6.4.0",
    "copyrightText" : "Copyright 2010 - 2022 Eclipse-SourceBundle\nCopyright 2010 - 2022 Git-Revision 1e4d13dda264339904dd69733f0f07d217b42340 Os-Arch\nCopyright 2016-2022 The OSHI Project Contributors\nCopyright (c) 2016-2022 The OSHI Project Contributors\n\nAuthors: Eclipse-SourceBundle; Git-Revision 1e4d13dda264339904dd69733f0f07d217b42340 Os-Arch; Sun Microsystems; The OSHI Project Contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/oshi/oshi-core-java11/6.4.0/oshi-core-java11-6.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sCC6iGOVvZWOREfmB0BTenzOZ39ZHZCM36kobsB8jKE/oshi-core-java11-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.oshi/oshi-core-java11@6.4.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.oshi/oshi-core-java11",
    "versionInfo" : "6.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.seancfoley-ipaddress-5.3.3",
    "copyrightText" : "Copyright 2016-2018 Sean C Foley",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/seancfoley/ipaddress/5.3.3/ipaddress-5.3.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MFRm0QJ9k9Q8_oBHj4yZe9sgFv3vhs4gue9o_53XtsI/ipaddress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.seancfoley/ipaddress@5.3.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://seancfoley.github.io/IPAddress/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.seancfoley/ipaddress",
    "versionInfo" : "5.3.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.zafarkhaja-java-semver-0.9.0",
    "copyrightText" : "Copyright 2012-2015 Zafar Khaja <zafarkhaja@gmail.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/zafarkhaja/java-semver/0.9.0/java-semver-0.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.zafarkhaja/java-semver@0.9.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5zImOmZMNqC8_ipFz1BlpkyvknG5_SFQrbDP_BJKdUw/java-semver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/zafarkhaja/jsemver",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.zafarkhaja/java-semver",
    "versionInfo" : "0.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.api.grpc-proto-google-common-protos-2.9.0",
    "copyrightText" : "Copyright 2015 Google LLC",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/api/grpc/proto-google-common-protos/2.9.0/proto-google-common-protos-2.9.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.api.grpc/proto-google-common-protos@2.9.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/j9xNbd1aDjAKWF-UR_Im2yehbe7_cCBPvghWRflA7Ec/proto-google-common-protos-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/googleapis/java-iam/proto-google-common-protos",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.api.grpc/proto-google-common-protos",
    "versionInfo" : "2.9.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.auth-google-auth-library-credentials-1.4.0",
    "copyrightText" : "Copyright 2015, Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/auth/google-auth-library-credentials/1.4.0/google-auth-library-credentials-1.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.auth/google-auth-library-credentials@1.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QHhROZPcrTGnU1K879FSIEC6dnvCvzHO8TNO3ZjsU6E/google-auth-library-credentials-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.auth/google-auth-library-credentials",
    "versionInfo" : "1.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.auth-google-auth-library-oauth2-http-1.4.0",
    "copyrightText" : "Copyright 2015, Google Inc.\nCopyright 2019, Google LLC",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/auth/google-auth-library-oauth2-http/1.4.0/google-auth-library-oauth2-http-1.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.4.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y8RU0Q1BozKEDsJOcOaM1y7BXnHDz_cVIvMRLht6zqI/google-auth-library-oauth2-http-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.auth/google-auth-library-oauth2-http",
    "versionInfo" : "1.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.auto.value-auto-value-annotations-1.9",
    "copyrightText" : "Copyright 2012 Google LLC",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/auto/value/auto-value-annotations/1.9/auto-value-annotations-1.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2ZJ0PbHELdCPCFij5zaO7ODQE5b5ADanFq_e4QKBjbs/auto-value-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/auto/tree/master/value",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.auto.value/auto-value-annotations",
    "versionInfo" : "1.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UQuG5-vHXi2MjGeL4DdvxtCv9MA177o15GvTUTfIVeo/jsr305-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://findbugs.sourceforge.net/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.findbugs/jsr305",
    "versionInfo" : "3.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.8.9",
    "copyrightText" : "Copyright (c) 2008 Google Inc\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.8.9/gson-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gK7O8dDAucenkSgESCsICkQvBJR6FQQHZ9zeN57r_eU/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.8.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.5.1",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.5.1/error_prone_annotations-2.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RshZenj1bC7z4KIiAJUwVAcWc6pJ7oyQggakHxWlkEQ/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.1",
    "copyrightText" : "Copyright (c) 2018 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pPLAIlpoC8UbDm74TS1P2HCgsbVI8IXQqicX5eLB-p4/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-32.1.2-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2005 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nick Piepmeier; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/32.1.2-jre/guava-32.1.2-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z5vMdGP55Iue9BWwicdcQ5F6HoeIq2vaZ1KkMxSLVnw/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@32.1.2-jre",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "32.1.2-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-1.0",
    "copyrightText" : "Copyright (c) 2007 The Guava Authors\n\nAuthors: Nishant Thakkar; Sven Mawson; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/1.0/listenablefuture-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Xl-odoW3bwROFxKXRntvpo27DX_vqIgpesPJcY918ms/listenablefuture-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.http-client-google-http-client-gson-1.41.0",
    "copyrightText" : "Copyright (c) 2011 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/http-client/google-http-client-gson/1.41.0/google-http-client-gson-1.41.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.http-client/google-http-client-gson@1.41.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TUmm1j_PtZ-mpbJpmjOxZb_VAyXydF0gvUrwhGItYzc/google-http-client-gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.http-client/google-http-client-gson",
    "versionInfo" : "1.41.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.http-client-google-http-client-1.41.0",
    "copyrightText" : "Copyright 2012 Google LLC\nCopyright (c) 2010 Google\nCopyright (c) 2010 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/http-client/google-http-client/1.41.0/google-http-client-1.41.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.http-client/google-http-client@1.41.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CkgCP8ZPRJXmab9axdM-IYaaBUvCrQxZCs6QsAs--Xo/google-http-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.http-client/google-http-client",
    "versionInfo" : "1.41.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-1.3",
    "copyrightText" : "Copyright 2012 Google Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/1.3/j2objc-annotations-1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IwS_T-b4a-nC09INJDQTpaQytOSqMfseOvobEVnWhG8/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-util-3.19.6",
    "copyrightText" : "Copyright 2008 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/protobuf/protobuf-java-util/3.19.6/protobuf-java-util-3.19.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.19.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dS7HiIW25uQvnfZxDLWMIISO2CLpqky5fvkfgjFmLiQ/protobuf-java-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.protobuf/protobuf-java-util",
    "versionInfo" : "3.19.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-3.19.6",
    "copyrightText" : "Copyright 2008 Google Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/protobuf/protobuf-java/3.19.6/protobuf-java-3.19.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fjsQRwZIyZ3SglI33flXmh_sOCa0GJXGChRlUEbrpa4/protobuf-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.protobuf/protobuf-java@3.19.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.protobuf/protobuf-java",
    "versionInfo" : "3.19.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.re2j-re2j-1.6",
    "copyrightText" : "Copyright (c) 2020 The Go Authors\n\nAuthors: The Go Authors; adonovan@google.com (Alan Donovan); rsc@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/re2j/re2j/1.6/re2j-1.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kDA6K4hphiiwPm6eEVbsZKJpzGmgm3KvEHSXBeTzlLw/re2j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.re2j/re2j@1.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/google/re2j",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.re2j/re2j",
    "versionInfo" : "1.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-logging-interceptor-4.9.3",
    "copyrightText" : "Copyright (c) 2015 Square, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/logging-interceptor/4.9.3/logging-interceptor-4.9.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okhttp3/logging-interceptor@4.9.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xPLFKcBrKiP3W0RidB0Wj0WjpPjqTbIsS1jrtZoOtbI/logging-interceptor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://square.github.io/okhttp/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okhttp3/logging-interceptor",
    "versionInfo" : "4.9.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-4.9.3",
    "copyrightText" : "Copyright 2013 Twitter, Inc.\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2010 The Android Open Source Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp/4.9.3/okhttp-4.9.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5vRfFMnPXie3ZXXkju-3zrRnNN243LsMkXQySNRAj_U/okhttp-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okhttp3/okhttp@4.9.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://square.github.io/okhttp/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okhttp3/okhttp",
    "versionInfo" : "4.9.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okio-okio-jvm-3.4.0",
    "copyrightText" : "Copyright 2014 Square Inc.\nCopyright (c) 2014 Square, Inc.\nCopyright (c) 2020 Square, Inc. and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okio/okio-jvm/3.4.0/okio-jvm-3.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Md8qLwCf6GFS30AIEsa1gBCGb4vYIeOfjW2OM8XdMqE/okio-jvm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okio/okio-jvm@3.4.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/square/okio/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okio/okio-jvm",
    "versionInfo" : "3.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.squareup.okio-okio-3.4.0",
    "copyrightText" : "Copyright 2014 Square Inc.\nCopyright (c) 2023 Block Inc.\nCopyright (c) 2014 Square, Inc.\nCopyright (c) 2020 Square, Inc. and others",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/squareup/okio/okio/3.4.0/okio-3.4.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C74wJ28Bqx-IwdxVCK_L7aQ_qvVRrUhxPpPFd65ruG4/okio-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.squareup.okio/okio@3.4.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/square/okio/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.squareup.okio/okio",
    "versionInfo" : "3.4.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.activation-javax.activation-1.2.0",
    "copyrightText" : "Copyright (c) 2017 Oracle America, Inc.\nCopyright (c) 1997-2017 Oracle and/or its affiliates\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/activation/javax.activation/1.2.0/javax.activation-1.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.activation/javax.activation@1.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1E89isqLeM7s3NIcC1xhI4Flg_cjn0I4zepWL81UeFI/javax.activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.activation/javax.activation",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.typesafe.netty-netty-reactive-streams-2.0.6",
    "copyrightText" : "Copyright (c) 2015 Typesafe",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/typesafe/netty/netty-reactive-streams/2.0.6/netty-reactive-streams-2.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DnlQjHjKc5J8CmtP9Bis6ZEQHhgOM0Ne0XXDgIDAxkE/netty-reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.typesafe.netty/netty-reactive-streams",
    "versionInfo" : "2.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.yahoo.datasketches-memory-0.8.3",
    "copyrightText" : "Copyright 2015, Yahoo! Inc.\nCopyright 2015-16, Yahoo! Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/yahoo/datasketches/memory/0.8.3/memory-0.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.yahoo.datasketches/memory@0.8.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9RpyhKAMdm5lIRQDagNGtk-CmJbr38sq3x24H6aUcb8/memory-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.yahoo.datasketches/memory",
    "versionInfo" : "0.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.yahoo.datasketches-sketches-core-0.8.3",
    "copyrightText" : "Copyright 2015, Yahoo! Inc.\nCopyright 2015-16, Yahoo! Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/yahoo/datasketches/sketches-core/0.8.3/sketches-core-0.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.yahoo.datasketches/sketches-core@0.8.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FlgD5DxDDB7WFgJYG5DmqCyck00QdkZaS--0Dhx55Ic/sketches-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.yahoo.datasketches/sketches-core",
    "versionInfo" : "0.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-cli-commons-cli-1.5.0",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-cli/commons-cli/1.5.0/commons-cli-1.5.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-cli/commons-cli@1.5.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cZmdKXioFQCTB3tcS0nYkznGkpDCI5PRw9USjYKbsso/commons-cli-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-cli/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-cli/commons-cli",
    "versionInfo" : "1.5.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15",
    "copyrightText" : "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright 2002-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ixaigc-CIpOk1obS2CfOggbfsdbSMtK8RxZPzy_A9Gc/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-configuration-commons-configuration-1.10",
    "copyrightText" : "Copyright 2001-2013 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-configuration/commons-configuration/1.10/commons-configuration-1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-configuration/commons-configuration@1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jS0ba70VwlvDaCZRMb373UciP2IstAVC3MdPhOozQO4/commons-configuration-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/configuration/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-configuration/commons-configuration",
    "versionInfo" : "1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.8.0",
    "copyrightText" : "Copyright 2002-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.8.0/commons-io-2.8.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JSDHtsgDB2XDncmKnms--KD3Mw2YSFKksv51TvB7UP8/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.8.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.8.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6",
    "copyrightText" : "Copyright 2001-2011 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xcmxx2ur1Z8EXrIzeYGnDv6NHJiK8KdtV-k6BBn2-9w/commons-lang-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-lang/commons-lang@2.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-lang/commons-lang",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.1.1",
    "copyrightText" : "Copyright 2001-2007 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.1.1/commons-logging-1.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ln1h1WQDtAgMAfXltSPVfD0yEoaI2Ty6zbKNJydq2uo/commons-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/logging",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-logging/commons-logging",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.airlift-aircompressor-2.0.3",
    "copyrightText" : "Copyright 2011 Dain Sundstrom <dain@iq80.com>\nCopyright 2011, Google Inc.\nCopyright 2011, Google Inc. <opensource@google.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/airlift/aircompressor/2.0.3/aircompressor-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CRY3eWNc93EbjgnWTP0lwPRoXHKY6kaw0UEiV-ImocY/aircompressor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.airlift/aircompressor@2.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/airlift/aircompressor",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.airlift/aircompressor",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.1.12.1",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-core/4.1.12.1/metrics-core-4.1.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Q6hwdLw3Pc3QTLoYP0z32UplUlIF26JU5i_HPexAxbU/metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-core",
    "versionInfo" : "4.1.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-graphite-4.1.12.1",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-graphite/4.1.12.1/metrics-graphite-4.1.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.1.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dN5MIGLoWNNtrYGwF74tN3tKgnyO6dyTTHy1DTSquXk/metrics-graphite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-graphite",
    "versionInfo" : "4.1.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jmx-4.1.12.1",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-jmx/4.1.12.1/metrics-jmx-4.1.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.1.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4T0IdBfiOQh0YNqH2Ofmia1ATPodGxvVY5Sgl0KSMcE/metrics-jmx-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-jmx",
    "versionInfo" : "4.1.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jvm-4.1.12.1",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-jvm/4.1.12.1/metrics-jvm-4.1.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.1.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7POncbxM2BS2k_emBR0uSZR-CPGee1woilmUQlfIzQE/metrics-jvm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-jvm",
    "versionInfo" : "4.1.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.etcd-jetcd-api-0.7.5",
    "copyrightText" : "Copyright 2018 CoreOS, Inc\nCopyright 2017 Google Inc.\nCopyright 2016-2021 The jetcd authors\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: CoreOS, Inc; Google Inc.; The Linux Foundation and its contributors; The jetcd authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/etcd/jetcd-api/0.7.5/jetcd-api-0.7.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.etcd/jetcd-api@0.7.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JJXUJkpjnF8p8wtmO7ziNCooMqxYUmh2TvKtAis1AQA/jetcd-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.etcd/jetcd-api",
    "versionInfo" : "0.7.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.etcd-jetcd-common-0.7.5",
    "copyrightText" : "Copyright 2018 CoreOS, Inc\nCopyright 2017 Google Inc.\nCopyright 2016-2021 The jetcd authors\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: CoreOS, Inc; Google Inc.; The Linux Foundation and its contributors; The jetcd authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/etcd/jetcd-common/0.7.5/jetcd-common-0.7.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JJXUJkpjnF8p8wtmO7ziNCooMqxYUmh2TvKtAis1AQA/jetcd-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.etcd/jetcd-common@0.7.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.etcd/jetcd-common",
    "versionInfo" : "0.7.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.etcd-jetcd-core-0.7.5",
    "copyrightText" : "Copyright 2018 CoreOS, Inc\nCopyright 2017 Google Inc.\nCopyright 2016-2021 The jetcd authors\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: CoreOS, Inc; Google Inc.; The Linux Foundation and its contributors; The jetcd authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/etcd/jetcd-core/0.7.5/jetcd-core-0.7.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JJXUJkpjnF8p8wtmO7ziNCooMqxYUmh2TvKtAis1AQA/jetcd-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.etcd/jetcd-core@0.7.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.etcd/jetcd-core",
    "versionInfo" : "0.7.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.etcd-jetcd-grpc-0.7.5",
    "copyrightText" : "Copyright 2018 CoreOS, Inc\nCopyright 2017 Google Inc.\nCopyright 2016-2021 The jetcd authors\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: CoreOS, Inc; Google Inc.; The Linux Foundation and its contributors; The jetcd authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/etcd/jetcd-grpc/0.7.5/jetcd-grpc-0.7.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JJXUJkpjnF8p8wtmO7ziNCooMqxYUmh2TvKtAis1AQA/jetcd-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.etcd/jetcd-grpc@0.7.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.etcd/jetcd-grpc",
    "versionInfo" : "0.7.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-all-1.55.3",
    "copyrightText" : "Copyright 2019 Envoy Project\nCopyright 2020 Google LLC\nCopyright 2015 Higher Frequency Trading http://www.higherfrequencytrading.com\nCopyright 2016-2020 Istio Authors\nCopyright The Envoy Project\nCopyright 2014 The Netty Project\nCopyright 2014 The gRPC Authors\nCopyright 2015 The gRPC Authors\nCopyright 2017 The gRPC Authors\nCopyright 2013 Twitter, Inc.\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2011 The Android Open Source Project\nCopyright (c) 2015-2021 the original\nCopyright 2015 gRPC\nCopyright 2018, gRPC Authors\nCopyright 2015 the original author or authors\n\nAuthors: Envoy Project; Google LLC; Higher Frequency Trading; Istio Authors; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; Perfetto SDK; Square, Inc.; The Android Open Source Project; The Envoy Project; The Netty Project; The gRPC Authors; Twitter, Inc.; gRPC; gRPC Authors; https://www.google.com; organizationUrl https://www.google.com; the BlockPool; the original; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-all/1.55.3/grpc-all-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cAXbfUxBG_kuUKwrhlEeuVUVfAoai95Gf1MY1kNa6CU/grpc-all-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-all@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-all",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-alts-1.55.3",
    "copyrightText" : "Copyright 2018 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-alts/1.55.3/grpc-alts-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RrGWia0wJ-2KvMxf4WfREbpiLmJ4yubh51pHEeviv8A/grpc-alts-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-alts@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-alts",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-api-1.55.3",
    "copyrightText" : "Copyright 2014 The gRPC Authors\nCopyright 2018, gRPC Authors\n\nAuthors: The gRPC Authors; gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-api/1.55.3/grpc-api-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qOA2wql8471DPxL-YzmXgC2WIRUN93P-byoKAYpComk/grpc-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-api@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-api",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-auth-1.55.3",
    "copyrightText" : "Copyright 2014 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-auth/1.55.3/grpc-auth-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-auth@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E0TFf6fSQdejYHouirfnoIphhwUK8yGH-EzPgI8tSuc/grpc-auth-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-auth",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-context-1.55.3",
    "copyrightText" : "Copyright 2015 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-context/1.55.3/grpc-context-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-context@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D5PB5O8L0V-tf8dnWioiWMsPFvNsKZyGJ3JQtSdorcU/grpc-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-context",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-core-1.55.3",
    "copyrightText" : "Copyright 2014 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-core/1.55.3/grpc-core-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-core@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Jvf-ykm6_LBHsT_Q79mNP2Uj7CissQE0kBF1bxmdy8Y/grpc-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-core",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-grpclb-1.55.3",
    "copyrightText" : "Copyright 2015 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-grpclb/1.55.3/grpc-grpclb-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-grpclb@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hNQFhvOMj9Qppkup2sBUVS4iMYZXNs9acgI3jjD9xMM/grpc-grpclb-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-grpclb",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-netty-shaded-1.55.3",
    "copyrightText" : "Copyright 2015 The Chromium Authors\nCopyright 2016 The Netty Project\nCopyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\nCopyright (c) 2015, Google Inc.\nCopyright (c) 2009 The Go Authors\nCopyright (c) 1998-2011 The OpenSSL Project\nCopyright (c) 1998-2019 The OpenSSL Project\nCopyright (c) 2015-2016 the fiat-crypto authors (see https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS)\nholder is Tim Hudson (tjh@cryptsoft.com)\n\nAuthors: <appro@openssl.org>; Eric Young; Eric Young (eay@cryptsoft.com); Google Inc.; The Chromium Authors; The Go Authors; The Netty Project; The OpenSSL Project; Tim Hudson; Tim Hudson (tjh@cryptsoft.com); https://www.google.com; the fiat-crypto authors see",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-netty-shaded/1.55.3/grpc-netty-shaded-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PYG3zlskMu2kV1ocsWomli5-UF_CRQg_fQSAEYwiuq0/grpc-netty-shaded-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-netty-shaded@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "(Apache-2.0 AND OpenSSL-standalone)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-netty-shaded",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-netty-1.55.3",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2014 The gRPC Authors\n\nAuthors: The Netty Project; The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-netty/1.55.3/grpc-netty-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yxV-C292TDAbCrVVvzRzBSuJ5s1h-YTCMArdtIQqy7w/grpc-netty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-netty@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-netty",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-protobuf-lite-1.55.3",
    "copyrightText" : "Copyright 2014 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-protobuf-lite/1.55.3/grpc-protobuf-lite-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jfEZg2-wf1IWB4ozEFG3k9fhCydQd-b4rudN1UEmZkU/grpc-protobuf-lite-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-protobuf-lite@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-protobuf-lite",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-protobuf-1.55.3",
    "copyrightText" : "Copyright 2014 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-protobuf/1.55.3/grpc-protobuf-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ukWmRyzB6JNhLCKFUsDY-WIb82-Djr6S2tTBPOU5z2U/grpc-protobuf-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-protobuf@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-protobuf",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-rls-1.55.3",
    "copyrightText" : "Copyright 2020 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-rls/1.55.3/grpc-rls-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BMXj5Z5cRUnrYoqALmHBaJFZtVguaWMfZDBuLfwfro0/grpc-rls-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-rls@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-rls",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-services-1.55.3",
    "copyrightText" : "Copyright 2015 The gRPC Authors\nCopyright 2018, gRPC Authors\n\nAuthors: The gRPC Authors; gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-services/1.55.3/grpc-services-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cKkb-TZSqOpzFbq48y42e0_WSJl7GRDOZ2ACqI6psY8/grpc-services-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-services@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-services",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-servlet-jakarta-1.55.3",
    "copyrightText" : "Copyright 2018 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-servlet-jakarta/1.55.3/grpc-servlet-jakarta-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZCGfN-vbH4Nr5MbTHFSRjLiNfSLhtoq0pZcZvWYF5Nc/grpc-servlet-jakarta-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-servlet-jakarta@1.55.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-servlet-jakarta",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-servlet-1.55.3",
    "copyrightText" : "Copyright 2018 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-servlet/1.55.3/grpc-servlet-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-servlet@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KX2IadaC5glXhWxJ-MJ2UH-TpBdXXyUF5Gq51ZJOSl8/grpc-servlet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-servlet",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-stub-1.55.3",
    "copyrightText" : "Copyright 2014 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-stub/1.55.3/grpc-stub-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-stub@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iJ5psW9UYiPW3zhIiOI-gdRjPPYHGcLcwQv84kWKo18/grpc-stub-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-stub",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.grpc-grpc-xds-1.55.3",
    "copyrightText" : "Copyright 2019 The gRPC Authors\n\nAuthors: The gRPC Authors; https://www.google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/grpc/grpc-xds/1.55.3/grpc-xds-1.55.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.grpc/grpc-xds@1.55.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M4RcstCZXr6I_ej2JLYYqSrSB5336rOIMbje_H8YWKY/grpc-xds-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/grpc/grpc-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.grpc/grpc-xds",
    "versionInfo" : "1.55.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.gsonfire-gson-fire-1.8.5",
    "copyrightText" : "Copyright 2015 Julio Viera",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/gsonfire/gson-fire/1.8.5/gson-fire-1.8.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.gsonfire/gson-fire@1.8.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/st_pRCH1HfhXYMhkCjUt_mOUSZv7XVydd5KE7wRkusQ/gson-fire-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gsonfire.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.gsonfire/gson-fire",
    "versionInfo" : "1.8.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-api-0.11.1",
    "copyrightText" : "Copyright 2018 JWTK\nCopyright (c) 2014 jsonwebtoken.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/jsonwebtoken/jjwt-api/0.11.1/jjwt-api-0.11.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zj7OzazYW2y0EhDL7tQct0ep1o-JJzQwBa34Rgqgxks/jjwt-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.jsonwebtoken/jjwt-api@0.11.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.jsonwebtoken/jjwt-api",
    "versionInfo" : "0.11.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-impl-0.11.1",
    "copyrightText" : "Copyright 2018 JWTK\nCopyright (c) 2014 jsonwebtoken.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/jsonwebtoken/jjwt-impl/0.11.1/jjwt-impl-0.11.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R9VFcLmDUVvKt4UZE7jpS61GUSj3AwcIJMsNPWhRB6w/jjwt-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.jsonwebtoken/jjwt-impl@0.11.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.jsonwebtoken/jjwt-impl",
    "versionInfo" : "0.11.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-jackson-0.11.1",
    "copyrightText" : "Copyright 2018 JWTK\nCopyright (c) 2014 jsonwebtoken.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/jsonwebtoken/jjwt-jackson/0.11.1/jjwt-jackson-0.11.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SGpFszRvBkeBVSjpzJLel58up2WnN2gWUwxCJIVi0hU/jjwt-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.11.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.jsonwebtoken/jjwt-jackson",
    "versionInfo" : "0.11.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.kubernetes-client-java-api-18.0.0",
    "copyrightText" : "Copyright 2020 The Kubernetes Authors\n\nAuthors: The Kubernetes Authors; the Job; the StatefulSet",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/kubernetes/client-java-api/18.0.0/client-java-api-18.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pOgmoPsO4bQvJehzuURcJ3A4khWex0bnfyGuZ0W4Eqw/client-java-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.kubernetes/client-java-api@18.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/kubernetes-client/java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.kubernetes/client-java-api",
    "versionInfo" : "18.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.kubernetes-client-java-proto-18.0.0",
    "copyrightText" : "Copyright 2020 The Kubernetes Authors\n\nAuthors: The Kubernetes Authors; the Job; the StatefulSet",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/kubernetes/client-java-proto/18.0.0/client-java-proto-18.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VIgaqaedh3SA6oHvJyzOYyaXzXX9LaPPEHVi-Q7APb0/client-java-proto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.kubernetes/client-java-proto@18.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/kubernetes-client/java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.kubernetes/client-java-proto",
    "versionInfo" : "18.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.kubernetes-client-java-18.0.0",
    "copyrightText" : "Copyright 2020 The Kubernetes Authors\n\nAuthors: The Kubernetes Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/kubernetes/client-java/18.0.0/client-java-18.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/U5Oq6UcK3iV92rNjj50iVV_QmsC1ck5K31pJfSvgcyM/client-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.kubernetes/client-java@18.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/kubernetes-client/java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.kubernetes/client-java",
    "versionInfo" : "18.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-classes-io-uring-0.0.24.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/incubator/netty-incubator-transport-classes-io_uring/0.0.24.Final/netty-incubator-transport-classes-io_uring-0.0.24.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QOmB3lGbW49v-PVVX2wySPG_l_sG9o7ATPkH22c3n5A/netty-incubator-transport-classes-io_uring-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty.incubator/netty-incubator-transport-classes-io_uring@0.0.24.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty.incubator/netty-incubator-transport-classes-io_uring",
    "versionInfo" : "0.0.24.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-native-io-uring-0.0.24.Final",
    "copyrightText" : "Copyright 2016 The Netty Project\nCopyright 2020 The Netty Project\nCopyright 2021 The Netty Project\nCopyright (c) 2019 Christoph Hellwig\nCopyright (c) 2019 Jens Axboe",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/incubator/netty-incubator-transport-native-io_uring/0.0.24.Final/netty-incubator-transport-native-io_uring-0.0.24.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty.incubator/netty-incubator-transport-native-io_uring@0.0.24.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1qPOMtrSKRUawwENIQels4_IjuMu3moSSZgYHNaq3bE/netty-incubator-transport-native-io_uring-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty.incubator/netty-incubator-transport-native-io_uring",
    "versionInfo" : "0.0.24.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.108.Final/netty-buffer-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IuzY4F1AA_EzvFWFDxOK6qpJObuNGxrL_t6OuzNN5yQ/netty-buffer-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-buffer/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-buffer",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.108.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.108.Final/netty-codec-dns-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZMsVImxkuFcA-ate6d1__mLV6zPJFUxmG9HGoEgATVg/netty-codec-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-dns",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-haproxy-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-haproxy/4.1.108.Final/netty-codec-haproxy-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/43NxC78dU8Nr27BD1ZhQOFXYudNF3cVUDLjp6ndyAAk/netty-codec-haproxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-haproxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-haproxy",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.108.Final",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2019 The Netty Project\nCopyright 2014 Twitter, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http2/4.1.108.Final/netty-codec-http2-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PGRuDAtbq8Sglv204D2t7tf7KM6hqMIvRcWrTJSKLn4/netty-codec-http2-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http2/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http2",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright 2019 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.108.Final/netty-codec-http-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C3qyxVLsUfct1oW3EHA_QEeyCiRfmPPzNuhJIFb3ppw/netty-codec-http-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-socks/4.1.108.Final/netty-codec-socks-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AmFVJPS47dOJ8K4_ELDDOrKg-lvdQQA3AuvKWey0GGQ/netty-codec-socks-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-socks@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-socks/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-socks",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright 2022 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.108.Final/netty-codec-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gPwOLA3HoEkw8AtjqF_JoynjHPK68JrEyb6G1VKQygo/netty-codec-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright 2019 The Netty Project\nCopyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.108.Final/netty-common-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1o7_T9X-lsQEsWGDd8HC9hE49XlGBWuLDHCB_-zdnws/netty-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-common",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.108.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler-proxy/4.1.108.Final/netty-handler-proxy-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_Yj-JMqrH8fjZHOJ-zWtYPf8_5qH2gE16MgoSZHS_5I/netty-handler-proxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler-proxy@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler-proxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler-proxy",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.108.Final/netty-handler-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AmZtMmi2Fw4CQH0jebVKUnTy1gdzVEzJoW4C_KcGTu8/netty-handler-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.108.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.108.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-classes-macos/4.1.108.Final/netty-resolver-dns-classes-macos-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0ZUztXfTNNCM6PR80Q5HdEPH3oOOQtgbcv8GguVGAp0/netty-resolver-dns-classes-macos-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-classes-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-classes-macos",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.108.Final",
    "copyrightText" : "Copyright 2011, Google Inc.\nCopyright 2013 Google Inc.\nCopyright 2009-2010 Ning, Inc.\nCopyright 2006, 2010 The Apache Software Foundation\nCopyright 2014 The Netty Project\nCopyright 2019 The Netty Project\nCopyright 2014 Twitter, Inc.\nCopyright (c) 2004-2006, 2008, 2009, 2011 Apple Inc.\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2009 Carl Bystrsm\nCopyright (c) 2014 Cory Benfield\nCopyright (c) 2012 FuseSource, Inc. (https://fusesource.com)\nCopyright (c) 2010-2013 Jeff Mesnil (http://jmesnil.net/)\nCopyright (c) 2011, Joe Walnes, Aslak Hellesoy and contributors\nCopyright (c) 2011, Joe Walnes and contributors\nCopyright (c) 2010-2011 Matthew J. Francis and Contributors\nCopyright (c) 2004-2007 QOS.ch\nCopyright (c) 2012, 2014, 2015, 2016 Tatsuhiro Tsujikawa\nCopyright (c) 2000 - 2013 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2009 William Kinney\nCopyright (c) 2003-2008 Yuta Mori\nCopyright (c) 2020 ../../../../index.html' The Netty project\nCopyright (c) 2012, 2014, 2015, 2016 nghttp2 contributors\nCopyright (c) 2015-present, Luben Karavelov\nCopyright (c) 2000,2001,2002,2003,2004 ymnk, JCraft,Inc.\n\nAuthors: Adrien Grand; Apple Inc.; Bjoern Hoehrmann; Carl Bystrsm; Cory Benfield; Doug Lea; FuseSource, Inc.; Google Inc.; Jeff Mesnil; Joe Walnes and contributors; Joe Walnes, Aslak Hellesoy and contributors; Luben Karavelov; Matthew J. Francis; Matthew J. Francis and Contributors; Ning, Inc.; QOS.ch; Robert Harder; Tatsuhiro Tsujikawa; Tatu Saloranta; The Apache Software Foundation; The Legion of the Bouncy Castle Inc.; The Netty Project; Twitter, Inc.; William Kinney; Yuta Mori; index.html' The Netty project; nghttp2 contributors; ymnk, JCraft,Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-native-macos/4.1.108.Final/netty-resolver-dns-native-macos-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YgKecf0BHuBCqJ9hus-t1oRO6L-wPn9thnalCUD0D2w/netty-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-native-macos",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.108.Final",
    "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2020 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.108.Final/netty-resolver-dns-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/K_UHFIc9Rn6ePqgiukGsg298K1M0jDW11Itadwcr_qo/netty-resolver-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.108.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.108.Final/netty-resolver-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DFdknuf-7zXYFWuxe-8Gc2YqU3WXc7NLKDGGK9Eqpao/netty-resolver-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.65.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MWC8Y-5550t7rm2fozWYq78dpXmpQprh3uktvI7rMQM/netty-tcnative-parent-~.Final.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.65.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.65.Final",
    "copyrightText" : "Copyright 2021 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-classes/2.0.65.Final/netty-tcnative-classes-2.0.65.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.65.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QZV9CL3CBnrnBPmsaYqn8iqXSp-GHlaBTBmVYjtd2w0/netty-tcnative-classes-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-classes",
    "versionInfo" : "2.0.65.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.108.Final",
    "copyrightText" : "Copyright 2021 The Netty Project\nCopyright 2023 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.108.Final/netty-transport-classes-epoll-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PWDBwAI2ZVqbu_i-8sYUsoGCh6S5_etTsEmMFgU_6pE/netty-transport-classes-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-classes-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-epoll",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.108.Final",
    "copyrightText" : "Copyright 2013 The Netty Project\nCopyright 2014 The Netty Project\nCopyright 2016 The Netty Project\nCopyright 2023 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.108.Final/netty-transport-native-epoll-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DbhTgNWkozZpa57HUM4UxUXEiLHKNGVcsuvHe4gHUcI/netty-transport-native-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-epoll",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.108.Final",
    "copyrightText" : "Copyright 2015 The Netty Project\nCopyright 2016 The Netty Project\nCopyright 2017 The Netty Project\nCopyright 2018 The Netty Project\nCopyright 2020 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.108.Final/netty-transport-native-unix-common-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Bg93c6jg-62aUp8svsnMpnrwILJdxR3e4zrPL-oxv1U/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.108.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.108.Final/netty-transport-4.1.108.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.108.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Emoca-KXlPxz4xmhjefa-ql_ZVZZZIlFaKO9iAsiJcE/netty-transport-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport",
    "versionInfo" : "4.1.108.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opencensus-opencensus-api-0.28.0",
    "copyrightText" : "Copyright 2016-17, OpenCensus Authors\nCopyright 2017, OpenCensus Authors\n\nAuthors: OpenCensus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opencensus/opencensus-api/0.28.0/opencensus-api-0.28.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opencensus/opencensus-api@0.28.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9ok6w4ReTBqMyIc-m0N991_cLi4GfPzbBJBbY6H1xcg/opencensus-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/census-instrumentation/opencensus-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opencensus/opencensus-api",
    "versionInfo" : "0.28.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opencensus-opencensus-contrib-http-util-0.28.0",
    "copyrightText" : "Copyright 2017, OpenCensus Authors\n\nAuthors: OpenCensus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opencensus/opencensus-contrib-http-util/0.28.0/opencensus-contrib-http-util-0.28.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tTmZjgg8sb10gNJgrTqUAilbk4f7HTmBGjGz1bklXQY/opencensus-contrib-http-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.28.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/census-instrumentation/opencensus-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opencensus/opencensus-contrib-http-util",
    "versionInfo" : "0.28.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.opencensus-opencensus-proto-0.2.0",
    "copyrightText" : "Copyright 2016-18, OpenCensus Authors\nCopyright 2017, OpenCensus Authors\n\nAuthors: OpenCensus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/opencensus/opencensus-proto/0.2.0/opencensus-proto-0.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/V9uccFv2ECcQ2O3oe0zZOjvjK88z14HtUpWtp2YzNh4/opencensus-proto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.opencensus/opencensus-proto@0.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/census-instrumentation/opencensus-proto",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.opencensus/opencensus-proto",
    "versionInfo" : "0.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.perfmark-perfmark-api-0.26.0",
    "copyrightText" : "Copyright 2019 Google LLC",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/perfmark/perfmark-api/0.26.0/perfmark-api-0.26.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.perfmark/perfmark-api@0.26.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gmxqYK_374_AQapPqGhe1CuUdCKPEO_osg81lhL8sLk/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/perfmark/perfmark",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.perfmark/perfmark-api",
    "versionInfo" : "0.26.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus.jmx-collector-0.16.1",
    "copyrightText" : "Copyright 2012-2015 The Prometheus Authors\n\nAuthors: The Prometheus Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/jmx/collector/0.16.1/collector-0.16.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus.jmx/collector@0.16.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SBESri7IO30nNgjwXmOQ0i1koewrah6QyNA29KVY9Sg/collector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/prometheus/jmx_exporter",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus.jmx/collector",
    "versionInfo" : "0.16.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient/0.16.0/simpleclient-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dCuTYdORtIVAFkdeShVaF-JpgZ0VrNSnsAZivIjWMJ0/simpleclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/io.prometheus/simpleclient/0.16.0",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-caffeine-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_caffeine/0.16.0/simpleclient_caffeine-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_caffeine@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/54jdF_6a-L-448e04yGi5tDsvLtOX1Z83L_PwhGGd3A/simpleclient_caffeine-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_caffeine",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_common/0.16.0/simpleclient_common-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_common@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_common",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-hotspot-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_hotspot/0.16.0/simpleclient_hotspot-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_hotspot@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b6k8cFnoYiiVNwWu-hLYtTVW0oYs4HQrubY7-2HrXnw/simpleclient_hotspot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_hotspot",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-httpserver-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_httpserver/0.16.0/simpleclient_httpserver-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_httpserver@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QjglKJgaUguYqaoNZ42cdS3y_bTp8atN1ZlxoKbW-HQ/simpleclient_httpserver-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_httpserver",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-jetty-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_jetty/0.16.0/simpleclient_jetty-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_jetty@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6M72v9jodVRWvkCC71gScEQpxjS7g1smjVqPyYrSbb4/simpleclient_jetty-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_jetty",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-log4j2-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_log4j2/0.16.0/simpleclient_log4j2-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b29cEdX2EWWsIkV_LMx3oqQlj_PJSCC50eivufH2kKU/simpleclient_log4j2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_log4j2@0.16.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_log4j2",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_servlet/0.16.0/simpleclient_servlet-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_servlet@0.16.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_servlet",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-common-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_servlet_common/0.16.0/simpleclient_servlet_common-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4oOBNKGQhgEqkqqy5nW_Qzp32rAm7DArVTmXB7pgasA/simpleclient_servlet_common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_servlet_common@0.16.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_servlet_common",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_common/0.16.0/simpleclient_tracer_common-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_common",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel/0.16.0/simpleclient_tracer_otel-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel_agent/0.16.0/simpleclient_tracer_otel_agent-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel_agent",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.reactivex.rxjava3-rxjava-3.0.1",
    "copyrightText" : "Copyright (c) 2016-present, RxJava Contributors\n\nAuthors: RxJava Contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/reactivex/rxjava3/rxjava/3.0.1/rxjava-3.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.reactivex.rxjava3/rxjava@3.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/04-KtCZngtXZuFQ-VrqMT2sKcdJkps1e225CjJR4lTw/rxjava-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/ReactiveX/RxJava",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.reactivex.rxjava3/rxjava",
    "versionInfo" : "3.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger-swagger-annotations-1.6.2",
    "copyrightText" : "Copyright 2016 SmartBear Software",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/swagger-annotations/1.6.2/swagger-annotations-1.6.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VgWmRc03fONEDLiihv1ry_7DQFB46q0OaXaV1FSMYN0/swagger-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://swagger.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger/swagger-annotations",
    "versionInfo" : "1.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger-swagger-core-1.6.2",
    "copyrightText" : "Copyright 2016 SmartBear Software",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/swagger-core/1.6.2/swagger-core-1.6.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger/swagger-core@1.6.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hpB6SXdPaPhEQg11Rjz1l8FsngFy7S88-gIabXcBLa4/swagger-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://swagger.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger/swagger-core",
    "versionInfo" : "1.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.swagger-swagger-models-1.6.2",
    "copyrightText" : "Copyright 2016 SmartBear Software",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/swagger/swagger-models/1.6.2/swagger-models-1.6.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.swagger/swagger-models@1.6.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/luWc8ba7S5ASdmH9Zwt7y0k77ma1N2XVN2EwCXNzBsA/swagger-models-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://swagger.io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.swagger/swagger-models",
    "versionInfo" : "1.6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vertx-vertx-auth-common-4.3.8",
    "copyrightText" : "Copyright 2014 Red Hat, Inc.\nCopyright (c) 2019 Stephane Bastian\nCopyright (c) 2011-2019 The original author or authors\n\nAuthors: Paulo Lopes; Red Hat, Inc.; Stephane Bastian; The original author or authors; http://tfox.org Tim Fox; julien@julienviet.com Julien Viet; lgao@redhat.com Lin Gao; plopes@redhat.com Paulo Lopes; pmlopes@gmail.com Paulo Lopes; stephane.bastian.dev@gmail.com Stephane Bastian",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vertx/vertx-auth-common/4.3.8/vertx-auth-common-4.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZiwP3P_PtUB_AMGvJgZ_ZThbNcCUucrWZFKJNDThTcc/vertx-auth-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vertx/vertx-auth-common@4.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-auth/vertx-auth-common",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vertx/vertx-auth-common",
    "versionInfo" : "4.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vertx-vertx-bridge-common-4.3.8",
    "copyrightText" : "Copyright (c) 2011-2015 The original author or authors\n\nAuthors: The original author or authors; http://escoffier.me' Clement Escoffier; http://tfox.org Tim Fox",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vertx/vertx-bridge-common/4.3.8/vertx-bridge-common-4.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_fJpaS8Sxic9B0xtXJ3bzGI3h5JQCmtZuhJxhNFWYP4/vertx-bridge-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vertx/vertx-bridge-common@4.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vertx/vertx-bridge-common",
    "versionInfo" : "4.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vertx-vertx-core-4.3.8",
    "copyrightText" : "Copyright 2015 Red Hat, Inc., and individual contributors\nCopyright (c) 1998-2010 AOL Inc.\nCopyright (c) 2009 Carl Bystrm\nCopyright (c) 2011-2017 Contributors to the Eclipse Foundation\nCopyright (c) 2011-2019 Contributors to the Eclipse Foundation\n\nAuthors: AOL Inc.; Alain Penders; Carl Bystrm; Clement Escoffier; Clement Escoffier <clement@apache.org>; Contributors to the Eclipse Foundation; Francesco Guardiani; Francesco Guardiani https://slinkydeveloper.github.io; Gordon Hutchison; Jason T. Greene; Juergen Donnerstag; Red Hat, Inc., and individual contributors; Thomas Segismont; Zhihong Zhang; andy.taylor@jboss.org Andy Taylor; ddimensia@gmail.com Gil Markham; hakangoudberg@hotmail.com Hakan Altindag; http://escoffier.me' Clement Escoffier; http://gleamynode.net/ Trustin Lee; http://oss.lehmann.cx/ Alexander Lehmann; http://pmlopes@gmail.com Paulo Lopes; http://tfox.org Tim Fox; http://www.jboss.org/netty/ The Netty Project; https://github.com/rworsnop/ Rob Worsnop; https://julien.ponge.org/ Julien Ponge; julien@julienviet.com Julien Viet; larsdtimm@gmail.com Lars Timm; nmaurer@redhat.com Norman Maurer; nscavell@redhat.com Nick Scavelli; plopes@redhat.com Paulo Lopes; tim.fox@jboss.com Tim Fox; wangjunbo924@gmail.com Junbo Wang",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vertx/vertx-core/4.3.8/vertx-core-4.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XhtWP-GzLmRGG9QLUFIOeQiP2Q7_O1LNw9rIp6WOi_g/vertx-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vertx/vertx-core@4.3.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vertx/vertx-core",
    "versionInfo" : "4.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vertx-vertx-grpc-4.3.5",
    "copyrightText" : "Copyright 2019 Eclipse\nCopyright 2015, Google Inc.\nCopyright (c) 2011-2014 The original author or authors\n\nAuthors: Eclipse; Eduard Catala; Google Inc.; Rogelio Orts; The original author or authors; julien@julienviet.com Julien Viet; pkopachevskiy@corp.finam.ru' Pavel Kopachevskiy; ruslan.sennov@gmail.com Ruslan Sennov",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vertx/vertx-grpc/4.3.5/vertx-grpc-4.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JzI0Ws4hBGbTeDbVIIffcOUxObuE5vcVOE5UXppc-hE/vertx-grpc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vertx/vertx-grpc@4.3.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vertx/vertx-grpc",
    "versionInfo" : "4.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vertx-vertx-web-common-4.3.8",
    "copyrightText" : "Copyright 2014 Red Hat, Inc.\nCopyright (c) 2011-2013 The original author or authors\n\nAuthors: Red Hat, Inc.; The original author or authors; http://tfox.org Tim Fox; julien@julienviet.com Julien Viet; plopes@redhat.com Paulo Lopes",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vertx/vertx-web-common/4.3.8/vertx-web-common-4.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vertx/vertx-web-common@4.3.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jsqxnw48IUm9gEuS80-UekMIVO3AFqg01zMp837iIbM/vertx-web-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-web-parent/vertx-web-common",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vertx/vertx-web-common",
    "versionInfo" : "4.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vertx-vertx-web-4.3.8",
    "copyrightText" : "Copyright 2014 Red Hat, Inc.\nCopyright 2021, 2022 The Eclipse foundation\nCopyright (c) 2011-2019 Contributors to the Eclipse Foundation\nCopyright (c) 2019 Stephane Bastian\nCopyright (c) 2011-2013 The original author or authors\n\nAuthors: Antony Riley; Apache Jakarta Turbine; Apache Software Foundation; Contributors to the Eclipse Foundation; Helge Tesgaard; Paulo Lopes; Pete Gieser; Phil Steitz; Purple Technology; Red Hat, Inc.; Sanne Grinovero; Stephane Bastian; The Eclipse foundation; The original author or authors; Thomas Segismont; alex@purpletech.com Alexander Day Chaffee; ggregory@seagullsw.com Gary Gregory; http://pmlopes@gmail.com Paulo Lopes; http://tfox.org Tim Fox; https://wissel.net Stephan Wissel; julien@julienviet.com Julien Viet; plopes@redhat.com Paulo Lopes; pmlopes@gmail.com Paulo Lopes; stephane.bastian.dev@gmail.com Stephane Bastian; thced82@gmail.com Thomas Cederholm; victorqrsilva@gmail.com Victor Quezado",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vertx/vertx-web/4.3.8/vertx-web-4.3.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vertx/vertx-web@4.3.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SWGwueLNlI8tykjfRapE5zDHARE0C_jXpdIhpNsk9sg/vertx-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-web-parent/vertx-web",
    "licenseConcluded" : "(Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vertx/vertx-web",
    "versionInfo" : "4.3.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-1.2.2",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q49I0pRC3pz_Y_WI6pJsy5uWkxpFvdRI2idbVv9yIog/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "1.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-1.3.5",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2005, 2018 Oracle and/or its affiliates\nCopyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HkDN_Gowc-fzbLhO2Xn_oaSZWi24vTMVLQb-LotgxVM/jakarta.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "1.3.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-2.0.2",
    "copyrightText" : "Copyright (c) 2019 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/2.0.2/jakarta.validation-api-2.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ssIsex-ZMjXxpQ-d-bTn-DD-U5X1FH_-ksvPsn2rt2Y/jakarta.validation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "2.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-2.1.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2006 Google Inc\nCopyright (c) 2010, 2017 Oracle and/or its affiliates\nCopyright (c) 2011, 2017 Oracle and/or its affiliates\nCopyright (c) 2011, 2019 Oracle and/or its affiliates\nCopyright (c) 2012, 2017 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2017 Oracle and/or its affiliates\nCopyright (c) 2015, 2017 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/2.1.6/jakarta.ws.rs-api-2.1.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y0WFVTb_nZBtnrdw0VBY3L0dEVr17Jspe7E7a09tCwo/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "2.1.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-2.3.3",
    "copyrightText" : "Copyright (c) 2019, 2020 Eclipse Foundation\nCopyright (c) 2005, 2019 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2020 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HFR-DCqoP85_EdCEMEFSbdsjTzZ414h0LDQ-jW4pN9g/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "2.3.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2009-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EsDiBfvenrC3SxvU0AYOhakhWVqJRn8aEg4kQMZwUTw/javax.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcp.org/en/jsr/detail?id=250",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.annotation/javax.annotation-api",
    "versionInfo" : "1.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.servlet-javax.servlet-api-3.1.0",
    "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\nCopyright 2004 The Apache Software Foundation\nCopyright (c) 1997-2010 Oracle and/or its affiliates\nCopyright (c) 1999-2013, http://www.oracle.com Oracle and/or its affiliates\nPortions Copyright (c) 1999-2002 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4Zg0WwBHnUOKQ2IYUwm2LzfFccw5QO7cdAT5R3Q8xwM/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://servlet-spec.java.net",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.servlet/javax.servlet-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.validation-validation-api-1.1.0.Final",
    "copyrightText" : "Copyright 2009, Red Hat, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/validation/validation-api/1.1.0.Final/validation-api-1.1.0.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bpg4WpBXHwPNIkagyDtN-elaI8BXIyMi80I9rBKsiMs/validation-api-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.validation/validation-api@1.1.0.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.validation/validation-api",
    "versionInfo" : "1.1.0.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.websocket-javax.websocket-client-api-1.0",
    "copyrightText" : "Copyright (c) 2012-2013 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/websocket/javax.websocket-client-api/1.0/javax.websocket-client-api-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zRXA-FCIAn1Lp-K0dWojldAqHMmSUnRRSO3Y7vnR_Ws/javax.websocket-client-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.websocket/javax.websocket-client-api@1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://websocket-spec.java.net",
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.websocket/javax.websocket-client-api",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.ws.rs-javax.ws.rs-api-2.1",
    "copyrightText" : "Copyright (c) 2006 Google Inc.\nCopyright (c) 2011-2017 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/ws/rs/javax.ws.rs-api/2.1/javax.ws.rs-api-2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pqmbXiSv8SXDXQfLgsb8iq5O22YZG7jZc0bAlVzkR7I/javax.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jax-rs-spec.java.net",
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.ws.rs/javax.ws.rs-api",
    "versionInfo" : "2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2004-2017 Oracle\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2017-2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CNpJdhH9y3bc9jEUmHT-DeW5wAhzb0WKAnGhbQ4q1gc/jaxb-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.xml.bind/jaxb-api",
    "versionInfo" : "2.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jline-jline-2.14.6",
    "copyrightText" : "Copyright 2013, Red Hat, Inc. and/or its subsidiaries or affiliates\nCopyright (c) 2002-2016, the original author or authors\n\nAuthors: Jline 1.x Developer Emeritus; Red Hat, Inc. and/or its subsidiaries or affiliates; Scott C. Gray <scottgray1@gmail.com>; Stale W. Pedersen <stale.pedersen@jboss.org>; arun.neelicattu@gmail.com Arun Neelicattu; dwkemp@gmail.com Dale Kemp; gnodet@gmail.com Guillaume Nodet; jason@planet57.com Jason Dillon; jbonofre@apache.org Jean-Baptiste Onofr; jbonofre@apache.org Jean-Baptiste Onofre; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/jline/jline/2.14.6/jline-2.14.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jline/jline@2.14.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6wqRLJOBETd5JD1WDQFIpd6IhS9-dChyIQe6TYWgc6U/jline-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jline/jline",
    "versionInfo" : "2.14.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.bytebuddy-byte-buddy-1.14.12",
    "copyrightText" : "Copyright 2014 - Present Rafael Winterhalter\nCopyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/bytebuddy/byte-buddy/1.14.12/byte-buddy-1.14.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CAHnvX7GWqg8bTURJTTA4lfUYl0kTqQvztiJn9xvgs0/byte-buddy-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.bytebuddy/byte-buddy",
    "versionInfo" : "1.14.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-jpms-5.12.1",
    "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-jpms/5.12.1/jna-jpms-5.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-jpms@5.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/myAtIj2A3dP2cfv9nruL6KeMqaHeyr8KS-72EjXv29w/jna-jpms-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-jpms",
    "versionInfo" : "5.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.12.1",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2015 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2015 Goldstein Lyor, 2021 Daniel Widdis\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2020 Torbjorn Svensson\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.12.1/jna-platform-5.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RBieW9tju6fpBosx_uhH8YImvi-oB_AJ8Mlj2Q8n99g/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.12.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-or-later AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jcip-jcip-annotations-1.0",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz and Tim Peierls",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jcip/jcip-annotations/1.0/jcip-annotations-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TDG8oCDwQtc3vPSBwp0bycUDcAFaquft_xesydctTdw/jcip-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jcip/jcip-annotations@1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcip.net/",
    "licenseConcluded" : "CC-BY-2.5",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jcip/jcip-annotations",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jodah-failsafe-2.4.4",
    "copyrightText" : "Copyright 2016 the original author or authors\n\nAuthors: Ben Manes; Jonathan Halterman; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jodah/failsafe/2.4.4/failsafe-2.4.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bMUiYFRcCrrZe3uvdVyJyq2LbfnjLVrhplzH3bm3leQ/failsafe-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jodah/failsafe@2.4.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://failsafe.dev",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jodah/failsafe",
    "versionInfo" : "2.4.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jodah-typetools-0.5.0",
    "copyrightText" : "Copyright 2002-2017 the original author or authors\n\nAuthors: Jonathan Halterman; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jodah/typetools/0.5.0/typetools-0.5.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GTqaJVv_3nSwFrLhovMQ6JCVrZmCzBzdYfyEpdXBgi8/typetools-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jodah/typetools@0.5.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jhalterman/typetools/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jodah/typetools",
    "versionInfo" : "0.5.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-one.gfw-jaxb-api-2.3.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2004-2017 Oracle\nCopyright (c) 2017-2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/one/gfw/jaxb-api/2.3.1/jaxb-api-2.3.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CNpJdhH9y3bc9jEUmHT-DeW5wAhzb0WKAnGhbQ4q1gc/jaxb-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/one.gfw/jaxb-api@2.3.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/one.gfw/jaxb-api",
    "versionInfo" : "2.3.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-protobuf-1.11.3",
    "copyrightText" : "Copyright 2009-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro-protobuf/1.11.3/avro-protobuf-1.11.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TxdAR_g1lIjyZguY_PYcKhcJCP4pFpJ6gFRVdIwrmG0/avro-protobuf-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro-protobuf@1.11.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro-protobuf",
    "versionInfo" : "1.11.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.11.3",
    "copyrightText" : "Copyright 2009-2023 The Apache Software Foundation\nCopyright 2002-2020 the original author or authors\n\nAuthors: Chris Beams; Colin Sampaleanu; Juergen Hoeller; Keith Donald; Rob Harrop; Rod Johnson; Sam Brannen; The Apache Software Foundation; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro/1.11.3/avro-1.11.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro@1.11.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D3zdE03q1OYESffaLaFvUA8AHEDWXYIUHgr7qAfd3U4/avro-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://avro.apache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro",
    "versionInfo" : "1.11.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper.http-http-server-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/http/http-server/4.16.5/http-server-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper.http/http-server@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9Nk1Q_zICPAHBgTi_KxLZJB7AnGVOyRjP7NL9c-klvg/http-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://maven.apache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper.http/http-server",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper.http-vertx-http-server-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/http/vertx-http-server/4.16.5/vertx-http-server-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper.http/vertx-http-server@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/al7AbrT6Ut3v60BRGAuyzJdDk5CPUqdwwtyaBsP3Gko/vertx-http-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://maven.apache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper.http/vertx-http-server",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper.stats-bookkeeper-stats-api-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stats/bookkeeper-stats-api/4.16.5/bookkeeper-stats-api-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper.stats/bookkeeper-stats-api@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6wIQ_eRs4RLXckGXHS0y0SpyFkZ2Hy-rIqWvXkegGbw/bookkeeper-stats-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://maven.apache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper.stats/bookkeeper-stats-api",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper.stats-codahale-metrics-provider-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stats/codahale-metrics-provider/4.16.5/codahale-metrics-provider-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper.stats/codahale-metrics-provider@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KlReA0TXfSzxYeL4VhdsVHVagBqJCdHj1GV1whteN-U/codahale-metrics-provider-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://maven.apache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper.stats/codahale-metrics-provider",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper.stats-prometheus-metrics-provider-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stats/prometheus-metrics-provider/4.16.5/prometheus-metrics-provider-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b8mkEbLqhadfcqR7LoY8tA3hmvMzjGREIe7o39DY72A/prometheus-metrics-provider-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper.stats/prometheus-metrics-provider@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper.stats/prometheus-metrics-provider",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-allocator-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-common-allocator/4.16.5/bookkeeper-common-allocator-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jVkrMDZ7xuftONyIqFE1VXwLe-t2ta5CpS2BEvOkDqQ/bookkeeper-common-allocator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-common-allocator@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-common-allocator",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation\nCopyright 2013 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-common/4.16.5/bookkeeper-common-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x2u1MNVxaOn48rSa4cI1e-RUSxSJpPeJhHPvAmDsQmU/bookkeeper-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-common@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-common",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-proto-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-proto/4.16.5/bookkeeper-proto-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AcR4TFXSpfgfZg-rrOFwX97-rTEe1gKUow4Hj_uVqd8/bookkeeper-proto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-proto@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-proto",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-server-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-server/4.16.5/bookkeeper-server-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GsOLXWgQMS1iU4qpzqsgOwhsgWVd6kj-P6A7l_3zYcM/bookkeeper-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-server@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-server",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-slogger-api-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-slogger-api/4.16.5/bookkeeper-slogger-api-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i4t1sGJWLlWbbI1pWEU_XOBFHaUpSAPT0UD28jGqPss/bookkeeper-slogger-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-slogger-api@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-slogger-api",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-slogger-slf4j-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-slogger-slf4j/4.16.5/bookkeeper-slogger-slf4j-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-slogger-slf4j@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SyY_E5roWaUT73_o5gxDMCOXiYkMNawY34yW4Ir39IU/bookkeeper-slogger-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-slogger-slf4j",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-tools-framework-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-tools-framework/4.16.5/bookkeeper-tools-framework-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-tools-framework@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/O6rvgGyE9ZeoVfQ1CW4yrBSvFJ22-plNg0DqzG-uo2Q/bookkeeper-tools-framework-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-tools-framework",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-circe-checksum-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation\nCopyright 2014 Trevor Robinson",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/circe-checksum/4.16.5/circe-checksum-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/circe-checksum@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/V8_NFbmk4piUGPzLO1YiImnMNIim87NOFkTI4h5tyzk/circe-checksum-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/circe-checksum",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-cpu-affinity-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/cpu-affinity/4.16.5/cpu-affinity-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/cpu-affinity@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ltEZ8GAT9ekr1766yVqRnAKk1J_m8Ba5ToHOsHbF24o/cpu-affinity-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/cpu-affinity",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-native-io-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/native-io/4.16.5/native-io-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6_bIgKhCZgWdLYu8SxkZ-7vEfYtEucOck9yoP0vQZ-8/native-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/native-io@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/native-io",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-statelib-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/statelib/4.16.5/statelib-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WYfKL9f5DVYvKGAnyXiD_mKpGd--n94-Psb16XL5z2A/statelib-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/statelib@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/statelib",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-api-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-api/4.16.5/stream-storage-api-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s0obtUQ4_-NSyCuMc62jGtQtthvkgNxdTxu-8zljAjU/stream-storage-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-api@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-api",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-common-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-common/4.16.5/stream-storage-common-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NVghMjAZqDUoDylcbVIfwOPP0EwXJ-qnf_LbyYEjHqo/stream-storage-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-common@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-common",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-java-client-base-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-java-client-base/4.16.5/stream-storage-java-client-base-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3uu1abPT6lX_DcrPENhcI8uZyUdmUisl3GJLuw1Kx_M/stream-storage-java-client-base-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-java-client-base@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-java-client-base",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-java-client-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-java-client/4.16.5/stream-storage-java-client-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EuLf6el1p4BgQiB1e9gOnXc227BmSdgsIQBL__D6MKo/stream-storage-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-java-client@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-java-client",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-java-kv-client-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-java-kv-client/4.16.5/stream-storage-java-kv-client-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w2X_qoQkG4nUPLF0ckgy-SvAqjfrNK4KQUwEb8TYl2U/stream-storage-java-kv-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-java-kv-client@4.16.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-java-kv-client",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-proto-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-proto/4.16.5/stream-storage-proto-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-proto@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lvPu_mx3gGbtIHyFhiIRDZSkxfkOjsBoKmHO_gLyfBY/stream-storage-proto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-proto",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-server-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-server/4.16.5/stream-storage-server-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-server@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/am1zzkdGaVSABGjiJrQcVjc1yBCDq_g-htmn9Vl2mGk/stream-storage-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-server",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-service-api-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-service-api/4.16.5/stream-storage-service-api-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-service-api@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vcmTegLjDDSLLwdANs1E80JFXBWg_Wyn3E8sSk12QV4/stream-storage-service-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-service-api",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-service-impl-4.16.5",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/stream-storage-service-impl/4.16.5/stream-storage-service-impl-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/stream-storage-service-impl@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zCccBw89iezQ9xvkIIhS_huhYUZ_OACvz2Nz_Z1YIPs/stream-storage-service-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/stream-storage-service-impl",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.4",
    "copyrightText" : "Copyright 2001-2019 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JlhNu07nVRs4Pu0VRyRtyoNZzRwAc3IBNcTx63LEAc4/commons-collections4-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-collections4@4.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-collections4",
    "versionInfo" : "4.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.0",
    "copyrightText" : "Copyright 2002-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.26.0/commons-compress-1.26.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iFZcbnX8nJnrIcqcwCkwbrfoxBZnJkHan3lvXxi3Cik/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.26.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.26.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.11",
    "copyrightText" : "Copyright 2001-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.11/commons-lang3-3.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wj05t4UmdTxjHqqBS-qVFcm1_qA7OEp1ti1c99vBoiE/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.10.0",
    "copyrightText" : "Copyright 2014-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.10.0/commons-text-1.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J62J0kPVzf6BPhiPa__5LqqXznLvRRSrZ09cWOO8sp4/commons-text-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-text@1.10.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-text",
    "versionInfo" : "1.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.curator-curator-client-5.1.0",
    "copyrightText" : "Copyright 2011-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/curator/curator-client/5.1.0/curator-client-5.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/89wCw0vLcrAF-nwQscJQYX0gzwK5_gHz45bLeMdh79A/curator-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.curator/curator-client@5.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.curator/curator-client",
    "versionInfo" : "5.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.curator-curator-framework-5.1.0",
    "copyrightText" : "Copyright 2011-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/curator/curator-framework/5.1.0/curator-framework-5.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KjW8-XUdGNBMErJyolVh4JAVgIVWf2lZefIY4UiONlI/curator-framework-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.curator/curator-framework@5.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.curator/curator-framework",
    "versionInfo" : "5.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.curator-curator-recipes-5.1.0",
    "copyrightText" : "Copyright 2011-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/curator/curator-recipes/5.1.0/curator-recipes-5.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cA3r0KncZYDwc5BH8FF5FLIXr_cnVQCofYhFBkhIvqo/curator-recipes-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.curator/curator-recipes@5.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.curator/curator-recipes",
    "versionInfo" : "5.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.distributedlog-distributedlog-common-4.16.5",
    "copyrightText" : "Copyright 2016-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/distributedlog/distributedlog-common/4.16.5/distributedlog-common-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.distributedlog/distributedlog-common@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kKlQfax9vR2bLDgRHfkTjerMNnp2WgDcf7Vtwb1EpII/distributedlog-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.distributedlog/distributedlog-common",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.distributedlog-distributedlog-core-4.16.5",
    "copyrightText" : "Copyright 2016-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/distributedlog/distributedlog-core/4.16.5/distributedlog-core-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.distributedlog/distributedlog-core@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q6W1ovzCbhn3i3XATXa7jZKcTHADmWGDKjbsdxbj7R0/distributedlog-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.distributedlog/distributedlog-core",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.distributedlog-distributedlog-protocol-4.16.5",
    "copyrightText" : "Copyright 2016-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/distributedlog/distributedlog-protocol/4.16.5/distributedlog-protocol-4.16.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.distributedlog/distributedlog-protocol@4.16.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iiYLz2k1RpPUtl1rqHGGCUGh09X3WaWl28OirV3pfgI/distributedlog-protocol-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.distributedlog/distributedlog-protocol",
    "versionInfo" : "4.16.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.13",
    "copyrightText" : "Copyright 1999-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.13/httpclient-4.5.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WU0s2T_wlLNz-1vei88CzigYsnNzAzbEzyU9X_bfRhE/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.15",
    "copyrightText" : "Copyright 2005-2021 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.15/httpcore-4.4.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BfXQF482vJqzYyBscc-m9dp13VvmOIeHCXQ-bRC_uww/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.18.0",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.18.0/log4j-api-2.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hlDJmjDXtJZqKqDdMLxIQzFaL898IJJS7E3iZ9-A6UQ/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-core-2.18.0",
    "copyrightText" : "Copyright 1999-2012 Apache Software Foundation\nCopyright 2011 LMAX Ltd\nCopyright Terracotta, Inc\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2005-2006 Tim Fennell\nCopyright (c) 2017 public",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.18.0/log4j-core-2.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZCrS_lKaPwPOntkUAfPjH8SOJkKN0A0DGXi9psRXo00/log4j-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-core",
    "versionInfo" : "2.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-slf4j-impl-2.18.0",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-slf4j-impl/2.18.0/log4j-slf4j-impl-2.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OjLIS9yUOBFO8jmWKlzikor1Ca0y8ILjJfPdspE0Los/log4j-slf4j-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-slf4j-impl",
    "versionInfo" : "2.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-web-2.18.0",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-web/2.18.0/log4j-web-2.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3zltrj6j64E2-2_xaElILXhOX-TSb0O90WhBhLdXVzw/log4j-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-web@2.18.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-web",
    "versionInfo" : "2.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/bouncy-castle-bc/3.2.3/bouncy-castle-bc-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ss5iCq0Y89cGdCVOYXGILrnYSd2dus3Sqfzf270Y5-g/bouncy-castle-bc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/bouncy-castle-bc@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/bouncy-castle-bc",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-managed-ledger-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation\nCopyright 2013 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/managed-ledger/3.2.3/managed-ledger-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yAoX3moATmHY1b8POzGMoy14xuC-6DmSDd87jq4Jix0/managed-ledger-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/managed-ledger@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/managed-ledger",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-auth-oidc-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-broker-auth-oidc/3.2.3/pulsar-broker-auth-oidc-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-broker-auth-oidc@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FLUvWRFoDdcanB0O0dhFVEKqBpg4LYO5aM1yPDJ5rNU/pulsar-broker-auth-oidc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-broker-auth-oidc",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-auth-sasl-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-broker-auth-sasl/3.2.3/pulsar-broker-auth-sasl-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-broker-auth-sasl@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7RSICCmCYqCzVzC-DJgu-TIj2pqByeX1JiL0Ecrfvc8/pulsar-broker-auth-sasl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-broker-auth-sasl",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-common-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-broker-common/3.2.3/pulsar-broker-common-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-broker-common@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HmtsVRi2m05Bmx0nB6_i_vIpWHPpM_WErAJ6y4lT6-E/pulsar-broker-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-broker-common",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation\nCopyright 2020 Splunk Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-broker/3.2.3/pulsar-broker-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-broker@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-SxBwbGn9ljW0rKmr56agyEH87ySsqi9TU_Q166899I/pulsar-broker-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-broker",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-cli-utils-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-cli-utils/3.2.3/pulsar-cli-utils-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-cli-utils@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TE6g0fNYe7pxLtKiT79DId17AOjXNt157vrgDGuhzTg/pulsar-cli-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-cli-utils",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-admin-api/3.2.3/pulsar-client-admin-api-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-admin-api@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TVoIbish5lw6Xrget6ed2fvynNYEq1YpX8XsYSDIx5k/pulsar-client-admin-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-admin-api",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-original-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-admin-original/3.2.3/pulsar-client-admin-original-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-admin-original@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SvfK6ih1Q-CORFdYAWGspgbkx9aEvIM3tniKt9J7bg/pulsar-client-admin-original-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-admin-original",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-api/3.2.3/pulsar-client-api-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-api@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TBtLGHD5Bn6GctdDRUk9QpBMz2WntJrzAKmog2o--jY/pulsar-client-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-api",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-auth-sasl-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-auth-sasl/3.2.3/pulsar-client-auth-sasl-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-auth-sasl@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lxLIeLUCUFwXNJj0h-8pNS8y6YiOKaMuPJhuE55dJ9M/pulsar-client-auth-sasl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-auth-sasl",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-messagecrypto-bc-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-messagecrypto-bc/3.2.3/pulsar-client-messagecrypto-bc-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9hE6xz6UcljOSX-YcUTgGMxo-yYlPNpK96s3AwOIabk/pulsar-client-messagecrypto-bc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-messagecrypto-bc@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-messagecrypto-bc",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-original-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-original/3.2.3/pulsar-client-original-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5kLHyrx_TRQ4bSrSqxqlvhPD2_G4VDYIzgLPp2sn6Rk/pulsar-client-original-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-original@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-original",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-tools-api-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-tools-api/3.2.3/pulsar-client-tools-api-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-tools-api@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p69xhVRhaObb2wwSpKxWJmKmijHjyZ_iJvfbaOxiLTw/pulsar-client-tools-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-tools-api",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-tools-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-tools/3.2.3/pulsar-client-tools-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-tools@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dBKgfQXiU9axskh1TW82aanqeYwzZs1B2XQ3yQ2rx8M/pulsar-client-tools-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-tools",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-common-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation\nCopyright 2020 Splunk Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-common/3.2.3/pulsar-common-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-common@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-uHHBti3_sBLbzVnQYao-XEFNpMVJjMl5DAI8syGWUA/pulsar-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-common",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-config-validation-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-config-validation/3.2.3/pulsar-config-validation-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-config-validation@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5kfg3gsB6ObMDyW-SPpxQOiJPBR2DLXT07dCdSCAPEQ/pulsar-config-validation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-config-validation",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-docs-tools-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-docs-tools/3.2.3/pulsar-docs-tools-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-docs-tools@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HpIMQa8XgUPTDcLtINTsf4BulHMgk-7_pfO5XoPk5lg/pulsar-docs-tools-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-docs-tools",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-api-examples-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-api-examples/3.2.3/pulsar-functions-api-examples-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-api-examples@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jm8fIt0FxuU-XkG0gXI1qs8Yqx02z2oz_2MYzUBVs0s/pulsar-functions-api-examples-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-api-examples",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-api-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-api/3.2.3/pulsar-functions-api-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-api@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/atwO9myuqf5wh4H30Sid60uB2IapSYFUkOVKtbmo_1M/pulsar-functions-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-api",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-instance-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-instance/3.2.3/pulsar-functions-instance-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-instance@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bPE5MtGaTvYZpmWZpLRD9WbfKd8fI8odhbJUicv0NiY/pulsar-functions-instance-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-instance",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-local-runner-original-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-local-runner-original/3.2.3/pulsar-functions-local-runner-original-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-local-runner-original@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jRwBTWk4KCxdMFBEvNRBU-4QE1A5Auj5_ckCJr4wyI0/pulsar-functions-local-runner-original-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-local-runner-original",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-proto-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-proto/3.2.3/pulsar-functions-proto-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p9x_iq90cjHVzqNKZLhBUsQyy_mk6Fw8DCT9Sw3jQbo/pulsar-functions-proto-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-proto@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-proto",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-runtime-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-runtime/3.2.3/pulsar-functions-runtime-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1uGenulfA2hkx4XcHTKkIE-vNGIjlpthjs2eNa98awc/pulsar-functions-runtime-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-runtime@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-runtime",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-secrets-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-secrets/3.2.3/pulsar-functions-secrets-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-secrets@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IwSyooq1dyvojM2MZk5GrdWvwXH-fXjwRpgJQAWg_QU/pulsar-functions-secrets-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-secrets",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-utils-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-utils/3.2.3/pulsar-functions-utils-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-utils@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fWGuybU3_Gxu6-7sqMuBhldum1qY37YeCUK0qrSUeTY/pulsar-functions-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-utils",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-worker-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-functions-worker/3.2.3/pulsar-functions-worker-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-functions-worker@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sriMf1mPs591g-c1uadlGxE-tDoYvnr0vhj6SUnXGY8/pulsar-functions-worker-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-functions-worker",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-io-core-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-io-core/3.2.3/pulsar-io-core-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-io-core@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Xzw6BK1fU0HJdX9rmvLy-bbQmDMDK8wDRbjSj0c674g/pulsar-io-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-io-core",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-metadata-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-metadata/3.2.3/pulsar-metadata-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-metadata@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b1wbyhQp9Ot5eZRd544LJLnEFf4fTmYy93SQ_6VT0wk/pulsar-metadata-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-metadata",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-bookkeeper-storage-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-package-bookkeeper-storage/3.2.3/pulsar-package-bookkeeper-storage-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-package-bookkeeper-storage@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hMh6OU8wqxB3JXT_zb-soNlMYroxK8GWoK_h-1HoH7g/pulsar-package-bookkeeper-storage-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-package-bookkeeper-storage",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-core-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-package-core/3.2.3/pulsar-package-core-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-package-core@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9uA1RHkyxSOvb8D_yAsOZ_2E4qVaCAAicJoQA6tdB5A/pulsar-package-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-package-core",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-filesystem-storage-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-package-filesystem-storage/3.2.3/pulsar-package-filesystem-storage-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-package-filesystem-storage@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UtnLKXNHnFuJvZRXGD-HTcowDy4fZPn3g4EYqigVGyc/pulsar-package-filesystem-storage-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-package-filesystem-storage",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-proxy-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-proxy/3.2.3/pulsar-proxy-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UEBgF_tEPiSrnUFsGym8kA3iUY0YnzEzRkZWQGJy2Ug/pulsar-proxy-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-proxy@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-proxy",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-testclient-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-testclient/3.2.3/pulsar-testclient-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wguMQ4vwL084uXhy0by7_urhGt4laXO1l_V6vUalmoQ/pulsar-testclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-testclient@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-testclient",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-transaction-common-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-transaction-common/3.2.3/pulsar-transaction-common-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Nd9cSxPRlsqs-t3RtZZEnT430l2gWECS2xJNCF5FYXc/pulsar-transaction-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-transaction-common@3.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-transaction-common",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-transaction-coordinator-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation\nCopyright 2020 Splunk Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-transaction-coordinator/3.2.3/pulsar-transaction-coordinator-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-transaction-coordinator@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/35znDta7yS7YYDmi7zxp3PL6UasFokNeoWZJouS8uN4/pulsar-transaction-coordinator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-transaction-coordinator",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-websocket-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-websocket/3.2.3/pulsar-websocket-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-websocket@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RETXjefRVXwzlGxa8cwTXuOVRG71LDEDgD4KTEcpTiU/pulsar-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-websocket",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-testmocks-3.2.3",
    "copyrightText" : "Copyright 2017-2024 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/testmocks/3.2.3/testmocks-3.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/testmocks@3.2.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GH8zxfz9jgRH2cW0zazIlfaPPPuPZI0D9MG2Wr3OP38/testmocks-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/testmocks",
    "versionInfo" : "3.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.thrift-libthrift-0.14.2",
    "copyrightText" : "Copyright 2012 Twitter, Inc\nCopyright 2007 by Nathan C. Myers <ncm@cantrip.org>\nCopyright (c) 2006-2008 Alexander Chemeris\nCopyright (c) 2006- Facebook\nCopyright (c) 2008- Patrick Collison <patrick@collison.ie>\nCopyright (c) 2006 - 2019, The Apache Software Foundation\nCopyright (c) 2007 Thomas Porschberg <thomas@randspringer.de>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/thrift/libthrift/0.14.2/libthrift-0.14.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.thrift/libthrift@0.14.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WaQ9jKndX8VPapMyo6AjVi4PeFfOk8B9iY-JZdIAKh0/libthrift-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://thrift.apache.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.thrift/libthrift",
    "versionInfo" : "0.14.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.yetus-audience-annotations-0.12.0",
    "copyrightText" : "Copyright 2015-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/yetus/audience-annotations/0.12.0/audience-annotations-0.12.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ty95giKcbM25jKYuwgQjtdtu2KiSBFiMDqU5yIt1dZQ/audience-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.yetus/audience-annotations",
    "versionInfo" : "0.12.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.zookeeper-zookeeper-jute-3.9.2",
    "copyrightText" : "Copyright 2010-2012 Coda Hale and Yammer, Inc.\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2009-2020 The Apache Software Foundation\nCopyright 2009-2023 The Apache Software Foundation\nCopyright 2009-2024 The Apache Software Foundation\nCopyright 2011 The Netty Project\nCopyright (c) 2006-2008 Alexander Chemeris\nCopyright (c) 1998-2003 Carnegie Mellon University\nCopyright (c) 2002, 2004, Christopher Clark\nCopyright (c) 2002 Christopher Clark <firstname.lastname@cl.cam.ac.uk>\nCopyright (c) 2009 Dmitry Baranovskiy (http://g.raphaeljs.com)\nCopyright (c) 2009 Dmitry Baranovskiy (http://raphaeljs.com)\nCopyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2004 Oren Ben-Kiki\nCopyright (c) 1999-2015, QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2000 The NetBSD Foundation, Inc.\nCopyright (c) 1998-2019 The OpenSSL Project\nCopyright (c) 2002 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2010, Yahoo! Inc.\nCopyright (c) http://www.apache.org/licenses/ The Apache Software Foundation\nCopyright (c) 2002-2012, the original author or authors\nCopyright 2013 jQuery Foundation, Inc. and other contributors\n(c) 2005-2010 Sam Stephenson\n(c) 2007-2009 Steven Levithan\ncopyright by Daniele Piras\ncopyrighted by the Free Software Foundation\nholder is Tim Hudson (tjh@cryptsoft.com)\n\nAuthors: Adrien Grand; Alexander Chemeris; Anirban Roy Organization Yahoo Inc.; Carnegie Mellon University; Christopher Clark; Coda Hale and Yammer, Inc.; Colin Goodheart-Smithe; Computing Services at Carnegie Mellon University (http://www.cmu.edu/computing/); Cory Benfield; Dan Burkert <dan@cloudera.com>; Daniele Piras; Dmitry Baranovskiy; Eric Young; Eric Young (eay@cryptsoft.com); Free Software Foundation, Inc.; Matthew J. Francis; Oren Ben-Kiki; QOS.ch; Sam Stephenson; Steven Levithan; Tatsuhiro Tsujikawa; Tatu Saloranta; The Apache Software Foundation; The NetBSD Foundation, Inc.; The Netty Project; The Netty Project (http://netty.io/); The OpenSSL Project; Tim Hudson; Tim Hudson (tjh@cryptsoft.com); Todd C. Miller; William Kinney; Yahoo! Inc.; Yuta Mori; jQuery Foundation, Inc. and other contributors; the Free Software Foundation; the Leader; the Spark project (https://github.com/apache/spark/blob/master/dev/merge_spark_pr.py); the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/zookeeper/zookeeper-jute/3.9.2/zookeeper-jute-3.9.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.9.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1Mv_em_5idGQt1VhBaxMHVRbpHriNN7fBjq4Yxem8es/zookeeper-jute-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.zookeeper/zookeeper-jute",
    "versionInfo" : "3.9.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.zookeeper-zookeeper-prometheus-metrics-3.9.2",
    "copyrightText" : "Copyright 2010-2012 Coda Hale and Yammer, Inc.\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2009-2020 The Apache Software Foundation\nCopyright 2009-2023 The Apache Software Foundation\nCopyright 2009-2024 The Apache Software Foundation\nCopyright 2011 The Netty Project\nCopyright (c) 2006-2008 Alexander Chemeris\nCopyright (c) 1998-2003 Carnegie Mellon University\nCopyright (c) 2002, 2004, Christopher Clark\nCopyright (c) 2002 Christopher Clark <firstname.lastname@cl.cam.ac.uk>\nCopyright (c) 2009 Dmitry Baranovskiy (http://g.raphaeljs.com)\nCopyright (c) 2009 Dmitry Baranovskiy (http://raphaeljs.com)\nCopyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2004 Oren Ben-Kiki\nCopyright (c) 1999-2015, QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2000 The NetBSD Foundation, Inc.\nCopyright (c) 1998-2019 The OpenSSL Project\nCopyright (c) 2002 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2010, Yahoo! Inc.\nCopyright (c) http://www.apache.org/licenses/ The Apache Software Foundation\nCopyright (c) 2002-2012, the original author or authors\nCopyright 2013 jQuery Foundation, Inc. and other contributors\n(c) 2005-2010 Sam Stephenson\n(c) 2007-2009 Steven Levithan\ncopyright by Daniele Piras\ncopyrighted by the Free Software Foundation\nholder is Tim Hudson (tjh@cryptsoft.com)\n\nAuthors: Adrien Grand; Alexander Chemeris; Anirban Roy Organization Yahoo Inc.; Carnegie Mellon University; Christopher Clark; Coda Hale and Yammer, Inc.; Colin Goodheart-Smithe; Computing Services at Carnegie Mellon University (http://www.cmu.edu/computing/); Cory Benfield; Dan Burkert <dan@cloudera.com>; Daniele Piras; Dmitry Baranovskiy; Eric Young; Eric Young (eay@cryptsoft.com); Free Software Foundation, Inc.; Matthew J. Francis; Oren Ben-Kiki; QOS.ch; Sam Stephenson; Steven Levithan; Tatsuhiro Tsujikawa; Tatu Saloranta; The Apache Software Foundation; The NetBSD Foundation, Inc.; The Netty Project; The Netty Project (http://netty.io/); The OpenSSL Project; Tim Hudson; Tim Hudson (tjh@cryptsoft.com); Todd C. Miller; William Kinney; Yahoo! Inc.; Yuta Mori; jQuery Foundation, Inc. and other contributors; the Free Software Foundation; the Leader; the Spark project (https://github.com/apache/spark/blob/master/dev/merge_spark_pr.py); the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/zookeeper/zookeeper-prometheus-metrics/3.9.2/zookeeper-prometheus-metrics-3.9.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.zookeeper/zookeeper-prometheus-metrics@3.9.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i-4gH9VP-7N0nRI0JhKUPYE6H_xUXIULQ98Je85f-Vc/zookeeper-prometheus-metrics-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.zookeeper/zookeeper-prometheus-metrics",
    "versionInfo" : "3.9.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.zookeeper-zookeeper-3.9.2",
    "copyrightText" : "Copyright 2010-2012 Coda Hale and Yammer, Inc.\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2009-2020 The Apache Software Foundation\nCopyright 2009-2023 The Apache Software Foundation\nCopyright 2009-2024 The Apache Software Foundation\nCopyright 2011 The Netty Project\nCopyright (c) 2006-2008 Alexander Chemeris\nCopyright (c) 1998-2003 Carnegie Mellon University\nCopyright (c) 2002, 2004, Christopher Clark\nCopyright (c) 2002 Christopher Clark <firstname.lastname@cl.cam.ac.uk>\nCopyright (c) 2009 Dmitry Baranovskiy (http://g.raphaeljs.com)\nCopyright (c) 2009 Dmitry Baranovskiy (http://raphaeljs.com)\nCopyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2004 Oren Ben-Kiki\nCopyright (c) 1999-2015, QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2000 The NetBSD Foundation, Inc.\nCopyright (c) 1998-2019 The OpenSSL Project\nCopyright (c) 2002 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2010, Yahoo! Inc.\nCopyright (c) http://www.apache.org/licenses/ The Apache Software Foundation\nCopyright (c) 2002-2012, the original author or authors\nCopyright 2013 jQuery Foundation, Inc. and other contributors\n(c) 2005-2010 Sam Stephenson\n(c) 2007-2009 Steven Levithan\ncopyright by Daniele Piras\ncopyrighted by the Free Software Foundation\nholder is Tim Hudson (tjh@cryptsoft.com)\n\nAuthors: Adrien Grand; Alexander Chemeris; Anirban Roy Organization Yahoo Inc.; Carnegie Mellon University; Christopher Clark; Coda Hale and Yammer, Inc.; Colin Goodheart-Smithe; Computing Services at Carnegie Mellon University (http://www.cmu.edu/computing/); Cory Benfield; Dan Burkert <dan@cloudera.com>; Daniele Piras; Dmitry Baranovskiy; Eric Young; Eric Young (eay@cryptsoft.com); Free Software Foundation, Inc.; Matthew J. Francis; Oren Ben-Kiki; QOS.ch; Sam Stephenson; Steven Levithan; Tatsuhiro Tsujikawa; Tatu Saloranta; The Apache Software Foundation; The NetBSD Foundation, Inc.; The Netty Project; The Netty Project (http://netty.io/); The OpenSSL Project; Tim Hudson; Tim Hudson (tjh@cryptsoft.com); Todd C. Miller; William Kinney; Yahoo! Inc.; Yuta Mori; jQuery Foundation, Inc. and other contributors; the Free Software Foundation; the Leader; the Spark project (https://github.com/apache/spark/blob/master/dev/merge_spark_pr.py); the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/zookeeper/zookeeper/3.9.2/zookeeper-3.9.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8C2H-lgoJtBAfkNXzJxGr98Mrhc_Jj6ESmHVxStqYmE/zookeeper-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.zookeeper/zookeeper@3.9.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.zookeeper/zookeeper",
    "versionInfo" : "3.9.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-netty-utils-2.12.1",
    "copyrightText" : "Copyright (c) 2015 AsyncHttpClient Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/asynchttpclient/async-http-client-netty-utils/2.12.1/async-http-client-netty-utils-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/itD9b3v__XXR0jGNMNR7atzyE5Z10flKHJhbeqbMpq0/async-http-client-netty-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.asynchttpclient/async-http-client-netty-utils",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-2.12.1",
    "copyrightText" : "Copyright 2010 Ning, Inc.\nCopyright (c) 2014 AsyncHttpClient Project\nCopyright (c) 2007 Google Inc.\nCopyright (c) 2010-2012 Sonatype, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/asynchttpclient/async-http-client/2.12.1/async-http-client-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FauhlPUC5nFGRWzewdeNX8kQEQ8F1koUiwIW_aEFTKg/async-http-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.asynchttpclient/async-http-client@2.12.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.asynchttpclient/async-http-client",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bitbucket.b-c-jose4j-0.9.4",
    "copyrightText" : "Copyright 2012-2019 Brian Campbell",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bitbucket/b_c/jose4j/0.9.4/jose4j-0.9.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jOZMoa_Ll4F4pDBnxiaFu7QYJYdHX5LiM4Z1f2na6Fw/jose4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bitbucket.b_c/jose4j@0.9.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/b_c/jose4j/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bitbucket.b_c/jose4j",
    "versionInfo" : "0.9.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2010 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2015-2021 the original\nCopyright 2015 the original author or authors\ncopyrighted by the Free Software Foundation\n\nAuthors: Andreas Sterbenz; Anil Vijendran; Arun Krishnan; Bart Calder; Bill Foote; Bill Shannon; Christopher Cotton; Colin Percival; Company; Dean Gibson; Dr B. R Gladman and Sam Simpson; Erik Tews; Fauzan Mirza (F.U.Mirza@sheffield.ac.uk); Free Software Foundation, Inc.; Herb Jellinek; Hongjun Wu; Jason Mehrens; Jim Glennon; John Mani; Kanwar Oberoi; Keiron Liddle, Aftex Software <keiron@aftexsw.com>; Lu u00EDs Serralheiro; Mark Chamness; Max Spivak; Michael McCloskey; Michael McMahon; Oliver Merkel; Oracle and/or its affiliates; Raif S. Naffah; Stephan Sann; Sun Microsystems, Inc.; The Legion of the Bouncy Castle Inc.; https://www.cryptosource.de' cryptosource GmbH and https://www.mtg.de' media Transfer AG; keiron@aftexsw.com Keiron Liddle; the Center for Information Protection and Special Communications of the Federal Security Service of the Russian Federation; the Free Software Foundation; the Legion of the Bouncy Castle; the Theoretical Computer Science Research Group at TU-Darmstadt, Computer Science Department; the original; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.78/bcpkix-jdk18on-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WFE2k5FQTHz6eQPdZ3VBBX_zq5lfECsxr7zQOvJBhlY/r1rv78.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.79",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.79/bcpkix-jdk18on-1.79.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.79",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tb2tVpaVHBOW2MFc0ohi8oWWtgxY-lR9Xih4q29FGJ4/r1rv79.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.79"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-ext-jdk18on-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-ext-jdk18on/1.78/bcprov-ext-jdk18on-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ay7676-bjtXgGSipltU6zLZAjfOpUk8qV9Uo7cqknuM/bcprov-ext-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/java.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-ext-jdk18on",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78/bcprov-jdk18on-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i1UhkcezfnKkUjYVfelb-8zYLrpu7xOhjNvSbBW_HVk/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/java.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.79",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.79/bcprov-jdk18on-1.79.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DXFIxCzXbHFXsws5cZs6MrBlRw8HJz_IGBgQ4JJw6ro/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/java.html",
    "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.79"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2010 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2015-2021 the original\nCopyright 2015 the original author or authors\ncopyrighted by the Free Software Foundation\n\nAuthors: Andreas Sterbenz; Anil Vijendran; Arun Krishnan; Bart Calder; Bill Foote; Bill Shannon; Christopher Cotton; Colin Percival; Company; Dean Gibson; Dr B. R Gladman and Sam Simpson; Erik Tews; Fauzan Mirza (F.U.Mirza@sheffield.ac.uk); Free Software Foundation, Inc.; Herb Jellinek; Hongjun Wu; Jason Mehrens; Jim Glennon; John Mani; Kanwar Oberoi; Keiron Liddle, Aftex Software <keiron@aftexsw.com>; Lu u00EDs Serralheiro; Mark Chamness; Max Spivak; Michael McCloskey; Michael McMahon; Oliver Merkel; Oracle and/or its affiliates; Raif S. Naffah; Stephan Sann; Sun Microsystems, Inc.; The Legion of the Bouncy Castle Inc.; https://www.cryptosource.de' cryptosource GmbH and https://www.mtg.de' media Transfer AG; keiron@aftexsw.com Keiron Liddle; the Center for Information Protection and Special Communications of the Federal Security Service of the Russian Federation; the Free Software Foundation; the Legion of the Bouncy Castle; the Theoretical Computer Science Research Group at TU-Darmstadt, Computer Science Department; the original; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.78/bcutil-jdk18on-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WFE2k5FQTHz6eQPdZ3VBBX_zq5lfECsxr7zQOvJBhlY/r1rv78.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.79",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.79/bcutil-jdk18on-1.79.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.79",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tb2tVpaVHBOW2MFc0ohi8oWWtgxY-lR9Xih4q29FGJ4/r1rv79.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.79"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.checkerframework-checker-qual-3.33.0",
    "copyrightText" : "Copyright 2004-present by the Checker Framework developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/checkerframework/checker-qual/3.33.0/checker-qual-3.33.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GQQiLXWlvCCWMYLfpy5_RGJpv_Qn3H5jHBA3ETUDTdY/checker-qual-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://checkerframework.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.checkerframework/checker-qual",
    "versionInfo" : "3.33.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.conscrypt-conscrypt-openjdk-uber-2.5.2",
    "copyrightText" : "Copyright 2013 The Android Open Source Project\nCopyright 2013 The Netty Project\nCopyright (c) 2013 The Android Open Source Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/conscrypt/conscrypt-openjdk-uber/2.5.2/conscrypt-openjdk-uber-2.5.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1yr6YuNxRVr9KqJvaE6m8_PU48FgsMALtG6xRtZdqLs/conscrypt-openjdk-uber-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://conscrypt.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.conscrypt/conscrypt-openjdk-uber",
    "versionInfo" : "2.5.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-javax-websocket-client-impl-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/javax-websocket-client-impl/9.4.57.v20241219/javax-websocket-client-impl-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4GGGU8eL7hWsajPkzy9aukxRQY9iJncY6FdlEpMsWUE/javax-websocket-client-impl-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/javax-websocket-client-impl",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-api-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-api/9.4.57.v20241219/websocket-api-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AT5HKfpRWqo0A9zsnJpsO1wg3ffeaZih7SFP1fOL3Y8/websocket-api-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-api@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-api",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-client-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-client/9.4.57.v20241219/websocket-client-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x1X5nHyJDjjoXZ862momf26_h-IsuD19t1lQch6NLCI/websocket-client-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-client",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-common-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-common/9.4.57.v20241219/websocket-common-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/c_HUcvdUmJ8q4BXi8RmX-cglZvuIzpxMKsY3d3tavC4/websocket-common-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-common",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-server-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-server/9.4.57.v20241219/websocket-server-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-server@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kZ-xm9zu5RxBquaGLuN47qp43KqRBxfZkfjato59scY/websocket-server-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-server",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/websocket/websocket-servlet/9.4.57.v20241219/websocket-servlet-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T7l-XZBXNfFRqY_8OHY3xIj3GmCHAsmgZvAKCL0KMyo/websocket-servlet-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.websocket/websocket-servlet",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-alpn-conscrypt-server-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-alpn-conscrypt-server/9.4.57.v20241219/jetty-alpn-conscrypt-server-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-alpn-conscrypt-server@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i-dtLOnROI_dMKnqqRC7XTl--rvnaJa5SJ0OyghAP3M/jetty-alpn-conscrypt-server-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-alpn-conscrypt-server",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-alpn-server-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-alpn-server/9.4.57.v20241219/jetty-alpn-server-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/m0br8GrpBeFT9w9ex1YLDaoM8lXtFj9g-hVQJeJsljo/jetty-alpn-server-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-alpn-server@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-alpn-server",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-client-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-client/9.4.57.v20241219/jetty-client-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bfmLoxkS2teLUje6ublL1ki193OEBjYcGhHyE2JykYQ/jetty-client-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-client",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-continuation-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-continuation/9.4.57.v20241219/jetty-continuation-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J3aKhDeeD8cWJemX4eHelxDm7YuqwLJZq79zE44oTns/jetty-continuation-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-continuation",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-http/9.4.57.v20241219/jetty-http-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M1ZjDImZApLW8akPBRxlUU_MyXXHqyvf2cGeGWJSXB4/jetty-http-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-http",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-io/9.4.57.v20241219/jetty-io-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pgtEbmBohCzQESa6RM-M-b0IrgS7qNqv67FamE9i_9Q/jetty-io-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-io",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-proxy-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-proxy/9.4.57.v20241219/jetty-proxy-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wZCW_Yg2yN1NKrA3-W8F07Lb38aIO2_DujFlx72qOMw/jetty-proxy-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-proxy",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-security-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-security/9.4.57.v20241219/jetty-security-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XBB-QiFwFh5ooftM0k4dxdLYdCuRI5pyazqWIrIkfEw/jetty-security-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-security",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-server-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-server/9.4.57.v20241219/jetty-server-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dyzoJzpnHyWZy4QenXYszavRkfKGme2-wr22oor6j00/jetty-server-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-server",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlet-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-servlet/9.4.57.v20241219/jetty-servlet-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tK9vTW96yZwPUseAcBgTUZbckVfASVwI8Ih482O1Wjw/jetty-servlet-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-servlet",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlets-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-servlets/9.4.57.v20241219/jetty-servlets-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0_PPlbFweMd-N_cBLT_YaWtUBI93hVOwNcwufY6zWqA/jetty-servlets-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-servlets",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.4.57.v20241219",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/9.4.57.v20241219/jetty-util-ajax-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.57.v20241219",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M-Kl-aB_CN9Ozt-Vxs_vvdRhIa_qPiLr_ql_-1V5wSg/jetty-util-ajax-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.4.57.v20241219",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/9.4.57.v20241219/jetty-util-9.4.57.v20241219.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rEBptmwo3NcCLsKnRZhuy3BIua2pbiAm9dwXJTCjFGA/jetty-util-~.v20241219-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.57.v20241219",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "9.4.57.v20241219"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/2.6.1/aopalliance-repackaged-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZP3p4YKr0R3CENOiXs8YJytJbCUBj6mU27whuG2Iths/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-jakarta.inject-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/jakarta.inject/2.6.1/jakarta.inject-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/00VxZo7tpxThVTBUNPjfPHetMjKhRwvxVhei8aukNyE/jakarta.inject-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/jakarta.inject",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2007, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2011, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/2.6.1/hk2-api-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/x8JH4mrJQmZ42cc3RfNQvcUka1A1_aNuBsqku1Plph4/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2019 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/2.6.1/hk2-locator-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFnXptZi5aVwNkgZcnDH2w0VpkYtzzTuji9EHSeCW-8/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-2.6.1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2007, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2014, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2018 Oracle and/or its affiliates\nCopyright (c) 2015, 2019 Oracle and/or its affiliates\nCopyright (c) 2016, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/2.6.1/hk2-utils-2.6.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GUtvQLJSJ74hARf0pn6jX-qrBRfl29ps65Wi9NP9ZPM/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "2.6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.containers-jersey-container-servlet-core-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; Guilherme Silveira; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/containers/jersey-container-servlet-core/2.34/jersey-container-servlet-core-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.34",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-Nx6Q1D5NZjOfj8BbB3mnhRZAQhNU1ZlesDrPeBbyBY/jersey-container-servlet-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.containers/jersey-container-servlet-core",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.containers-jersey-container-servlet-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/containers/jersey-container-servlet/2.34/jersey-container-servlet-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.34",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4sh6ZtjzuY6j1ldBQMKnS69JZIYYyQJRBGVrFoydVHw/jersey-container-servlet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.containers/jersey-container-servlet",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/2.34/jersey-client-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.34",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hyp2oozS1vZuhAtA7a46d0GIaaPp0_0TAKVlEahO00s/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2007, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2006 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/2.34/jersey-common-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5MJw_s6kZNbfLO75cORnXXlmDsSbTBFzvwcIqYoCKrI/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.glassfish.jersey.core/jersey-common/2.34",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-server-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2015, 2021 Oracle and/or its affiliates\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2020 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Chris Nokleberg; Coda Hale and Yammer, Inc.; Constantino Cronemberger; Doug Lea; Dropwizard Team http://www.cs.umd.edu/~samir/498/vitter.pdf' Random Sampling; Dropwizard Team https://github.com/dropwizard/metrics' https://github.com/dropwizard/metrics; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Eric Rowell; Eugene Kuleshov; FasterXML, LLC.; Florian Hars (florian at hars.de); Fredy Nagy; Free Software Foundation, Inc.; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Jason T. Greene; Jason Zaugg; Libor Kramolis; Marc Hadley; Marek Potociar; Martin Grotzke (martin.grotzke at freiheit.com); Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Remi Forax; Shigeru Chiba; Stepan Vavra; Stepan Vavra https://github.com/dropwizard/metrics' https://github.com/dropwizard/metrics; Stepan Vavra https://github.com/dropwizard/metrics/blob/master/metrics-core/src/main/java/io/dropwizard/metrics; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); a Jersey; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-server/2.34/jersey-server-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Nw3Jj9QuChMAxqtaYad27R4dqTM8uusmxTZHrAMYkXU/jersey-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-3-Clause AND Apache-2.0 AND MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-server",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.ext-jersey-entity-filtering-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2013, 2020 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Andy Pemberton (pembertona at gmail.com); Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/ext/jersey-entity-filtering/2.34/jersey-entity-filtering-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IWZgl4thwX_tQ5irTwuA0qcyHYGGfNaOW0XqUoO9Ams/jersey-entity-filtering-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.ext/jersey-entity-filtering",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/2.34/jersey-hk2-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lLDsssPPTjmLPPWzcRX3u7l3NEutdd_e1DOnhlNATmc/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-json-jackson-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2020 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Red Hat, Inc.; Shigeru Chiba; Stepan Kopriva; Tatu Saloranta; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-json-jackson/2.34/jersey-media-json-jackson-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZtrKLP2NwIBRb9Cq7cfE2CtEEuViGIMnxOPrjBwnboQ/jersey-media-json-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-json-jackson",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-2.34",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2011 FasterXML, LLC.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/2.34/jersey-media-multipart-2.34.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UTVnawKO4HPf8svncp2txbm40c_dtv5LQy6AbUTI_KA/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.34",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(MIT AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "2.34"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.1.9",
    "copyrightText" : "Copyright (c) 2014\nCopyright (c) 2012, 2013, 2014 Gil Tene\nCopyright (c) 2013 Matt Bolt\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.1.9/HdrHistogram-2.1.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UyyVyc6A_xn-ZjzvXScsGh6VVhuGckc0OlVaTMcq-g8/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.1.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.25.0-GA",
    "copyrightText" : "Copyright (c) 1999- Shigeru Chiba\nCopyright (c) 1999-2019 Shigeru Chiba\nCopyright (c) 2004 Bill Burke",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.25.0-GA/javassist-3.25.0-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.25.0-GA",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CCW_udJLSUc7E8WZIpeddRLzumqTG6jDY7rCwMTsniA/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.25.0-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jctools-jctools-core-2.1.2",
    "copyrightText" : "Copyright 2012 ACM\nCopyright 2012 Real Logic Ltd.\nCopyright (c) 1977, Association for Computing Machinery, Inc. General",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jctools/jctools-core/2.1.2/jctools-core-2.1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jctools/jctools-core@2.1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zaqoQjlhzV8XyN56nAsFLUiWA7cS7lWMvCttVJVE9Uw/jctools-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JCTools",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jctools/jctools-core",
    "versionInfo" : "2.1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jctools-jctools-core-3.1.0",
    "copyrightText" : "Copyright 2012 ACM\nCopyright 2012 Real Logic Ltd.\nCopyright (c) 1977, Association for Computing Machinery, Inc. General",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jctools/jctools-core/3.1.0/jctools-core-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jctools/jctools-core@3.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vd8bew4HRNcTyRQupdf1RfG4j_FBJuedNYT5KZzLbDc/jctools-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JCTools",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jctools/jctools-core",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.8.20",
    "copyrightText" : "Copyright 2007 Google Inc.\nCopyright 2010-2016 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\nCopyright 2011 The Guava Authors\ncopyright Char (c)\n\nAuthors: Char; Google Inc.; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-common/1.8.20/kotlin-stdlib-common-1.8.20.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.8.20",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YLKiZ_c-nsxM_lqoDcNX_pbTZGyqmeDRe0moVxAcvw0/kotlin-stdlib-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-common",
    "versionInfo" : "1.8.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.8.20",
    "copyrightText" : "Copyright 2010-2024 JetBrains s.r.o. and Kotlin Programming Language contributors.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk7/1.8.20/kotlin-stdlib-jdk7-1.8.20.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d4kqa_jcostC2YiGa-WlmitKNTVlMf41JN_8kSPB9sU/kotlin-stdlib-jdk7-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.8.20",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7",
    "versionInfo" : "1.8.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.8.20",
    "copyrightText" : "Copyright 2010-2024 JetBrains s.r.o. and Kotlin Programming Language contributors.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib-jdk8/1.8.20/kotlin-stdlib-jdk8-1.8.20.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VgBj1Fte_FatIeLtVnTsiTA1kTwwn3xh9c3yw2Yc17s/kotlin-stdlib-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8",
    "versionInfo" : "1.8.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.8.20",
    "copyrightText" : "Copyright Eric Ford & Hubert Holin 2001\nCopyright 2010-2015 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\n\nAuthors: Eric Ford & Hubert Holin; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib/1.8.20/kotlin-stdlib-1.8.20.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TqpRWIlkUnGUn18AWtnQDr50zuF6vXj6SUS1Jl8Tzqs/kotlin-stdlib-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.8.20",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib",
    "versionInfo" : "1.8.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0",
    "copyrightText" : "Copyright 2000-2009 JetBrains s.r.o.\nCopyright 2006 Sascha Weinreuter",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/annotations/13.0/annotations-13.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ohV-6iNW-UvYl5NCKrBCcnGieF-bAwlofJHFZGSfYhM/annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains/annotations@13.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.jetbrains.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains/annotations",
    "versionInfo" : "13.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-builtins-3.21.0",
    "copyrightText" : "Copyright (c) 2002-2020, the original author or authors\n\nAuthors: jason@planet57.com Jason Dillon; matti.rintanikkola@gmail.com Matti Rinta-Nikkola; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-builtins/3.21.0/jline-builtins-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PlXCA6ugl_5clxu3QsG9yunfRFHmCKGXcdMgg0o3ml4/jline-builtins-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-builtins@3.21.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-builtins",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-reader-3.21.0",
    "copyrightText" : "Copyright (c) 2002-2016, the original author or authors\n\nAuthors: Eric Bottard; gnodet@gmail.com Guillaume Nodet; jason@planet57.com Jason Dillon; matti.rintanikkola@gmail.com Matti Rinta-Nikkola",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-reader/3.21.0/jline-reader-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0f9cHmKuUiI1uu9tsNXnti8wKt9anwG39wVk3c_88ww/jline-reader-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-reader@3.21.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-reader",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-remote-ssh-3.21.0",
    "copyrightText" : "Copyright (c) 2002-2020, the original author or authors\n\nAuthors: the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-remote-ssh/3.21.0/jline-remote-ssh-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eyP2asHP38GTpz2L4RRDTesxP-ffavxTv6Q1FCbBpkM/jline-remote-ssh-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-remote-ssh@3.21.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-remote-ssh",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-remote-telnet-3.21.0",
    "copyrightText" : "Copyright (c) 2000-2005 Dieter Wimberger\nCopyright (c) 2002-2020, the original author or authors\n\nAuthors: Dieter Wimberger; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-remote-telnet/3.21.0/jline-remote-telnet-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-remote-telnet@3.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QktHpNtAtC-HsQW-EoB9zbrO5NFM1e4sBSgJuVclByU/jline-remote-telnet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-remote-telnet",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-style-3.21.0",
    "copyrightText" : "Copyright (c) 2002-2017, the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-style/3.21.0/jline-style-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-style@3.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MwhABu935ClZqCXA7zELvANsMFKb0fHradUKf9WNhAY/jline-style-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-style",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-terminal-jansi-3.21.0",
    "copyrightText" : "Copyright (c) 2009-2018 the original\nCopyright (c) 2002-2020, the original author or authors\n\nAuthors: Joris Kuipers; http://hiramchirino.com Hiram Chirino; the original; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-terminal-jansi/3.21.0/jline-terminal-jansi-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-terminal-jansi@3.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4QhqB9pPF5YX-EdifGR44kg51yrPRgRj5_6rYO61-N8/jline-terminal-jansi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-terminal-jansi",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-terminal-jna-3.21.0",
    "copyrightText" : "Copyright (c) 2002-2016, the original author or authors\nUnionChar (c) Attributes\n\nAuthors: Joris Kuipers; UnionChar Attributes; http://hiramchirino.com Hiram Chirino",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-terminal-jna/3.21.0/jline-terminal-jna-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-terminal-jna@3.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w89gPO7PCCW4I93_JOEHdC4JpyAXwajQw_kiMTih5Jg/jline-terminal-jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-terminal-jna",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-terminal-3.21.0",
    "copyrightText" : "Copyright (c) 2009-2018 the original\nCopyright (c) 2002-2016, the original author or authors\n\nAuthors: Joris Kuipers; Kevin L. Stern; Scott C. Gray <scottgray1@gmail.com>; gnodet@gmail.com Guillaume Nodet; http://hiramchirino.com Hiram Chirino; jason@planet57.com Jason Dillon; the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline-terminal/3.21.0/jline-terminal-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline-terminal@3.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Q5r5z8bFSvrfm9nY93e2EuppzD0GpnE4aCmzjIMsizQ/jline-terminal-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline-terminal",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jline-jline-3.21.0",
    "copyrightText" : "Copyright (c) 2000-2005 Dieter Wimberger\nCopyright (c) 2009-2018 the original\nCopyright (c) 2002-2016, the original author or authors\nUnionChar (c) Attributes\n\nAuthors: Dieter Wimberger; Eric Bottard; Joris Kuipers; Kevin L. Stern; Scott C. Gray <scottgray1@gmail.com>; UnionChar Attributes; gnodet@gmail.com Guillaume Nodet; http://hiramchirino.com Hiram Chirino; jason@planet57.com Jason Dillon; matti.rintanikkola@gmail.com Matti Rinta-Nikkola; the original",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jline/jline/3.21.0/jline-3.21.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jline/jline@3.21.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EwmV7XDMxnrTchM08AeDk2hs1yWMevH4YhVV2CUjZHI/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/org.jline/jline/3.21.0",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jline/jline",
    "versionInfo" : "3.21.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.13",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2020 Oracle and/or its affiliates\nCopyright (c) 2012, 2020 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2020 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.13/mimepull-1.9.13.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.13",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3EWVnHENiZlGtmYTTAjwa8Gp_EItlrryrx7qHy4q7UY/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.3",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.3/reactive-streams-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OZYrSqRCT9tk5LyzFrDNqtQkrVdWPvGWRVNkEG9-2t4/reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.reactive-streams.org/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.reactivestreams/reactive-streams",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.roaringbitmap-RoaringBitmap-0.9.44",
    "copyrightText" : "Copyright 2013-2016 the RoaringBitmap authors\nCopyright 2015 the original author or authors\n(c) 2013-... the RoaringBitmap authors\n\nAuthors: Amit Desai; Benoit Lacelle; Borislav Ivanov; Daniel Lemire; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; Richard Startin; the RoaringBitmap authors; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/roaringbitmap/RoaringBitmap/0.9.44/RoaringBitmap-0.9.44.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.44",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rImobAgAIbpl6j2-BmzeOrCVP81F4XkJJcRMmblqQgg/RoaringBitmap-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/RoaringBitmap/RoaringBitmap",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.roaringbitmap/RoaringBitmap",
    "versionInfo" : "0.9.44"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.rocksdb-rocksdbjni-7.9.2",
    "copyrightText" : "Copyright 1995-2022 Jean-loup Gailly and Mark Adler\nCopyright 1995-2017 Jean-loup Gailly and Mark Adler Qkkbal\nCopyright 1995-2022 Mark Adler\nCopyright (c) 2015, Facebook, Inc.\nCopyright (c) Facebook, Inc. and its affiliates\nCopyright (c) Meta Platforms, Inc. and affiliates\nCopyright (c) 2006, 2015, Percona and/or its affiliates\nCopyright (c) 2014, Vlad Balan (vlad.gm@gmail.com)\nCopyright (c) 2011-present, Facebook, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/rocksdb/rocksdbjni/7.9.2/rocksdbjni-7.9.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kjvjeq8gsQASarmDN3WC9r4REvrVuEdMvT89lzgowmQ/rocksdbjni-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rocksdb.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.rocksdb/rocksdbjni",
    "versionInfo" : "7.9.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-1.7.32",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/1.7.32/jcl-over-slf4j-1.7.32.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vI7x4-_hY2lwoOOFjpCJFWVwdSpjdVtiujpBncjYaxk/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "1.7.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-1.7.32",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/1.7.32/slf4j-api-1.7.32.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xMrPCfnymKE1TOVq2w5qLDvj_CvaH46xhb_oOjY_q8s/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@1.7.32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "1.7.32"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.xerial.snappy-snappy-java-1.1.10.5",
    "copyrightText" : "Copyright 2008 Taro L. Saito\nCopyright (c) 2004-2006 Intel Corportation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/xerial/snappy/snappy-java/1.1.10.5/snappy-java-1.1.10.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yQw84m4h3BYg0xvJO5_x0TmQ5s6LOPVFddoe7_Wwnw4/snappy-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/xerial/snappy-java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.xerial.snappy/snappy-java",
    "versionInfo" : "1.1.10.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.0",
    "copyrightText" : "Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz\nCopyright (c) 2008 Google Inc\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.0/snakeyaml-2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ya00WcTnn044XHGQccRYif09BjrXCQCOzIJSEjLJa8I/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.zeroturnaround-zt-zip-1.17",
    "copyrightText" : "Copyright (c) 2012 ZeroTurnaround LLC <support@zeroturnaround.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/zeroturnaround/zt-zip/1.17/zt-zip-1.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.zeroturnaround/zt-zip@1.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Vqutq_xjeakdeKJKY5FHm5Cqy1_ed2GGMiQVwUthweY/zt-zip-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/zeroturnaround/zt-zip",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.zeroturnaround/zt-zip",
    "versionInfo" : "1.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-apache-bookkeeper-client-4.17.2",
    "copyrightText" : "Copyright 2011-2024 The Apache Software Foundation",
    "downloadLocation" : "https://files.pythonhosted.org/packages/6e/c0/dc5ce0b5111128c6ad2be887451c486e95d8943f495a3cf07541d903e309/apache_bookkeeper_client-4.17.2-py2.py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/apache-bookkeeper-client@4.17.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EfLsVaX72GJtutpdqcd3Pvpjn_mHS-KCzuOw-1oHS58/apache_bookkeeper_client-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/apache-bookkeeper-client/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/apache-bookkeeper-client",
    "versionInfo" : "4.17.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-certifi-2025.11.12",
    "copyrightText" : "(c) 2006 Entrust, Inc.\n(c) 2006 Entrust, Inc. Label Entrust Root Certification\n(c) 2009 Entrust, Inc. - for",
    "downloadLocation" : "https://files.pythonhosted.org/packages/70/7d/9bc192684cea499815ff478dfcdc13835ddf401365057044fb721ec6bddb/certifi-2025.11.12-py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/certifi@2025.11.12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RTwV_YxtjgCDaKpLQPf3elpXmzqO0r5EnG-bW8VLxfA/certifi-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/certifi/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/certifi",
    "versionInfo" : "2025.11.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-fastavro-1.7.3",
    "copyrightText" : "Copyright 2010 The Apache Software Foundation\nCopyright (c) 2011 Miki Tebeka",
    "downloadLocation" : "https://files.pythonhosted.org/packages/61/70/f4e1324d927e1e47fec12d7b088469e355bc87e8000be5bbd670f5f3680d/fastavro-1.7.3-cp311-cp311-win_amd64.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/fastavro@1.7.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GB_r5HQZhNlDZoBllIvDlq1La6rBEqUcHEznJHnW9R0/fastavro-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/fastavro",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/fastavro",
    "versionInfo" : "1.7.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-grpcio-1.76.0",
    "copyrightText" : "Copyright 2016, Google Inc.\nCopyright 2019 The gRPC\nCopyright 2019 The gRPC Authors\nCopyright 2015 gRPC\n(c) 2006 Entrust, Inc.\n(c) 2006 Entrust, Inc. Label Entrust Root Certification\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net Limited\n(c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial\n\nAuthors: Entrust, Inc.; Entrust, Inc. - for; Entrust, Inc. Label Entrust Root Certification; Entrust.net Limited; Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial; Google Inc.; The gRPC; The gRPC Authors; gRPC",
    "downloadLocation" : "https://files.pythonhosted.org/packages/de/d1/fb90564a981eedd3cd87dc6bfd7c249e8a515cfad1ed8e9af73be223cd3b/grpcio-1.76.0-cp39-cp39-win_amd64.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/grpcio@1.76.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wO_PQL7LL0Lma3g8ONCBdUiZz5THEOzcoztgAioeifY/grpcio-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/grpcio/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/grpcio",
    "versionInfo" : "1.76.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-kazoo-2.10.0",
    "copyrightText" : "Copyright (c) 2010-2011, 2011 Canonical Ltd.\ncopyright 2011-2014, Kazoo team",
    "downloadLocation" : "https://files.pythonhosted.org/packages/fc/48/6a6f6de9b6257cd1741ffb877068731a7469d13ea0e2d73c9a1daa557c59/kazoo-2.10.0-py2.py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/kazoo@2.10.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6H3PUc84rmE4ytpYzyRBnWly09jTpmBZtPKOPjzJqzk/kazoo-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/kazoo",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/kazoo",
    "versionInfo" : "2.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-prometheus-client-0.23.1",
    "copyrightText" : "Copyright 2015 The Prometheus Authors\nCopyright (c) 2005-2016, Michele Simionato\n\nAuthors: <prometheus-developers@googlegroups.com>; Michele Simionato; The Prometheus Authors",
    "downloadLocation" : "https://files.pythonhosted.org/packages/b8/db/14bafcb4af2139e046d03fd00dea7873e48eafe18b7d2797e73d6681f210/prometheus_client-0.23.1-py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PFatrwhK9PwYs5plf_x5-WQiE-7kNe1xTjT-r2w5Jgg/prometheus_client-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/prometheus-client@0.23.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/prometheus-client/",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/prometheus-client",
    "versionInfo" : "0.23.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-protobuf-3.20.3",
    "copyrightText" : "Copyright 2008 Google Inc.",
    "downloadLocation" : "https://files.pythonhosted.org/packages/8d/14/619e24a4c70df2901e1f4dbc50a6291eb63a759172558df326347dce1f0d/protobuf-3.20.3-py2.py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ShDWrODqvlyD_RfUtwxAFyF_-BaY4zKH1q1TBSnP8b4/protobuf-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/protobuf@3.20.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/protobuf",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/protobuf",
    "versionInfo" : "3.20.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-pulsar-client-3.2.0",
    "copyrightText" : "Copyright 1995-2022 Jean-loup Gailly and Mark Adler\nCopyright 1995-2022 Mark Adler\nCopyright 2017-2022 The Apache Software Foundation",
    "downloadLocation" : "https://files.pythonhosted.org/packages/36/19/7f2064861a1a49bccb5235425ad5e4f49c19ea94b26455d71a8266137819/pulsar_client-3.2.0-cp311-cp311-win_amd64.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/pulsar-client@3.2.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g16OLTrakNEGeuQYZUQl1-C1MbWOB58rvLtTGERo024/v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/pulsar-client",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/pulsar-client",
    "versionInfo" : "3.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-pymmh3-0.0.5",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://files.pythonhosted.org/packages/65/b0/738cb3e6237aa224f3bf48cd1d24f5ddf42ef7d03e6226012f9bdf7f665d/pymmh3-0.0.5-py2.py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/pymmh3@0.0.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GmPBLaZV4NXO2ncNuoc3trAA7R2sPItFQYjpavfCz3Q/c18b0ffed586b4cb158a9aa4832d5a4603db19a4.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/pymmh3",
    "licenseConcluded" : "(CC0-1.0 AND CPL-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/pymmh3",
    "versionInfo" : "0.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-pytz-2025.2",
    "copyrightText" : "Copyright (c) 2003-2019 Stuart Bishop <stuart@stuartbishop.net>",
    "downloadLocation" : "https://files.pythonhosted.org/packages/81/c4/34e93fe5f5429d7570ec1fa436f1986fb1f00c3e0f43a589fe2bbcd22c3f/pytz-2025.2-py2.py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/pytz@2025.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_IuTO678s89ZRDZ6-RgV167bsh2E2IHAo0wgl8AatMU/pytz-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/pytz/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/pytz",
    "versionInfo" : "2025.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-pyyaml-6.0.1",
    "copyrightText" : "Copyright (c) 2017-2021 Ingy\nCopyright (c) 2006-2016 Kirill Simonov",
    "downloadLocation" : "https://files.pythonhosted.org/packages/2b/9f/fbade56564ad486809c27b322d0f7e6a89c01f6b4fe208402e90d4443a99/PyYAML-6.0.1-cp312-cp312-win_amd64.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/pyyaml@6.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q8Nd-3-DqxG0ktMwi8R4eePESFbR22yy_9t7iF5__v4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/pyyaml",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/pyyaml",
    "versionInfo" : "6.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-ratelimit-2.2.1",
    "copyrightText" : "Copyright (c) 2015 Tomas Basham",
    "downloadLocation" : "https://files.pythonhosted.org/packages/ab/38/ff60c8fc9e002d50d48822cc5095deb8ebbc5f91a6b8fdd9731c87a147c9/ratelimit-2.2.1.tar.gz",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/ratelimit@2.2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pMWqvB2M4woLpoZhvrmlH1oOTExQyqR_v7K3lT8ujqg/ratelimit-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/ratelimit",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/ratelimit",
    "versionInfo" : "2.2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-six-1.17.0",
    "copyrightText" : "Copyright (c) 2010-2024 Benjamin Peterson",
    "downloadLocation" : "https://files.pythonhosted.org/packages/b7/ce/149a00dd41f10bc29e5921b496af8b574d8413afcd5e30dfa0ed46c2cc5e/six-1.17.0-py2.py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/six@1.17.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZGiyXc5A6A3Tmn83AQ5ptHwOGQZ0VmDPgiTjNqyGnsk/six-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/six/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/six",
    "versionInfo" : "1.17.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-pypi-typing-extensions-4.15.0",
    "copyrightText" : "Copyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023 Python Software Foundation\nCopyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands",
    "downloadLocation" : "https://files.pythonhosted.org/packages/18/67/36e9267722cc04a6b9f15c7f3441c2363321a3ea07da7ae0c0707beb2a9c/typing_extensions-4.15.0-py3-none-any.whl",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:pypi/typing-extensions@4.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Hp3ZPtyOWqcVT2SpkNGaH0nBKbO59WMcdMiUsMZnjuE/typing_extensions-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.org/project/typing-extensions/",
    "licenseConcluded" : "(0BSD AND BSD-3-Clause AND Python-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "pypi/typing-extensions",
    "versionInfo" : "4.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-alsa-lib-1.2.13-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1992 by Stichting Mathematisch Centrum, Amsterdam\nCopyright (c) 2019, Advanced Linux Sound Architecture (ALSA) project\nCopyright (c) 2006-2008 Diego Petteno <flameeyes@gmail.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2014-2015 Intel Corporation\nCopyright (c) 2021 Jaroslav Kysela\nCopyright (c) 2022 Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2010 Red Hat Inc.\nCopyright (c) 2000-2002 Richard W.E. Furse, Paul Barton-Davis, Stefan Westerfeld\nCopyright (c) 2008-2010 SlimLogic Ltd\nCopyright (c) 2005 Takashi Iwai <tiwai@suse.de>\nCopyright (c) 1998,99,2000 Takashi Iwai <tiwai@suse.de> , Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2010 Texas Instruments Inc.\nCopyright (c) 2003 Thomas Charbonnel (thomas@undata.org)\nCopyright (c) 2003 Winfried Ritsch (IEM)\nCopyright (c) 2010 Wolfson Microelectronics PLC\nCopyright (c) 1994 X Consortium\nCopyright (c) by Abramo Bagnara <abramo@alsa-project.org>\nCopyright (c) 2000 by Abramo Bagnara <abramo@alsa-project.org> , Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2000 by Abramo Bagnara <abramo@alsa-project.org> 2004 by Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2000 by Abramo Bagnara <abramo@alsa-project.org> 2004 by Jaroslav Kysela <perex@perex.cz> 2006 by Takashi Iwai <tiwai@suse.de>\nCopyright (c) 1998-1999 by Frank van de Pol <fvdpol@coil.demon.nl>\nCopyright (c) 1998 by Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 1994-2003 by Jaroslav Kysela <perex@perex.cz> , Abramo Bagnara <abramo@alsa-project.org>\nCopyright (c) by Jaroslav Kysela <perex@perex.cz> , Creative Labs, Inc. Definitions\nCopyright (c) 1994-98 by Jaroslav Kysela <perex@perex.cz> , 4Front Technologies\nCopyright (c) 2003 by Jaroslav Kysela <perex@perex.cz> Takashi Iwai <tiwai@suse.de>\nCopyright (c) 1999 by Takashi Iwai <tiwai@suse.de>\nCopyright (c) 2016 by Thomas Klausner <wiz@NetBSD.org>\nCopyright (c) 1999 by Uros Bizjak <uros@kss-loka.si> Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 1999 by Uros Bizjak <uros@kss-loka.si> Takashi Iwai <tiwai@suse.de>\nCopyright (c) 2006-2008 xine project\n(c) 2003 - Rear\n(c) 2003 - Rear Left\n(c) 1998-1999 by Jaroslav Kysela <perex@perex.cz>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/alsa-lib-1.2.13-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/alsa-lib@1.2.13-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rgXj7kP9NBWbdSIi8brQKOZ7WI_B7kIOu8LC2LVTOjo/alsa-lib-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.alsa-project.org/",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/alsa-lib",
    "versionInfo" : "1.2.13-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-alternatives-1.24-2.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2001 Red Hat, Inc.\n(c) 2001 Hong Mao Gong Si\n(c) 1997-2000 Red Hat\n(c) 1997-2000 Red Hat, Inc\n(c) 1997-2000 lii Red Hat Inc.\ncopyright 1997 Charles Briscoe-Smith, 2002 Red Hat, Inc.\ncopyright 1997/98 Charles Briscoe-Smith and 2002 Red Hat, Inc.\ncopyright 2002 Red Hat, Inc\ncopyrighted by the Free Software Foundation\n(c) rd hd Inc.\n(c) 1997-2000 rd ht, Inc.\n(c) 2001 rd ht, shrkht",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/a/alternatives-1.24-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/alternatives@1.24-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jcBtyDcebmL4dwV8LNMsRsbCsURDcRZhMd2Xe50LeoM/chkconfig-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fedora-sysv/chkconfig",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/alternatives",
    "versionInfo" : "1.24-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-cli-1.5.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-cli-1.5.0-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/it6HrG2vsCQDdbVp9hy4-CGv2Yqyysmjt2V-wH2MsoE/apache-commons-cli-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-cli@1.5.0-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/cli/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-cli",
    "versionInfo" : "1.5.0-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-codec-1.15-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2002-2020 The Apache Software Foundation\nCopyright 2007 by Kevin Atkinson\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2002 Kevin Atkinson (kevina@gnu.org)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-codec-1.15-8.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SpSC9M1GEgAVwEMG8g6uVeT-6IvUr_SQ7vFHfSqrf2M/apache-commons-codec-~-8.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-codec@1.15-8.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-codec",
    "versionInfo" : "1.15-8.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-io-2.11.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-io-2.11.0-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-io@2.11.0-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yPrnMjhJIuPNfDEm5YClEXHKPW4T74iL832ocTL-K1I/apache-commons-io-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-io",
    "versionInfo" : "2.11.0-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-lang3-3.12.0-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2021 The Apache Software Foundation\nCopyright (c) 2001-2011 http://www.apache.org/ The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-lang3-3.12.0-8.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-lang3@3.12.0-8.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uMHU1b4-kWfBOr6SH1GpKHelIqn0QS9PAZl9sQwhaKg/apache-commons-lang3-~-8.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/lang",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-lang3",
    "versionInfo" : "3.12.0-8.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-atinject-1.0.5-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc. https://www.eclipse.org/legal/efsl.php\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/atinject-1.0.5-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/atinject@1.0.5-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AUHuHrzreqIZ_K5W5YVJxRf5VvqJ98IjEaX5z4c6vF0/atinject-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/atinject",
    "versionInfo" : "1.0.5-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-audit-libs-3.1.5-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008 FUJITSU Inc.\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 2005-08, 2010,11,2013,2020 Red Hat\nCopyright 2012-17,2020 Red Hat\nCopyright 2004-07,2012-13,2018 Red Hat Inc.\nCopyright 2004-2008,2012-13,2016,2023 Red Hat Inc.\nCopyright 2004-2009,2012,2014,2016-17,2020 Red Hat Inc.\nCopyright 2005-21 Red Hat Inc.\nCopyright 2007,2011-13 Red Hat Inc.\nCopyright 2007,2012-14 Red Hat Inc.\nCopyright 2011-14,2018 Red Hat Inc.\nCopyright 2014,16,2021-2 Red Hat Inc.\nCopyright 2016-19 Red Hat Inc.\nCopyright 2018-24 Red Hat Inc.\nCopyright 2004-08,2015-16 Red Hat Inc., Durham, North Carolina\nCopyright 2004-2006, 2008,2011-16,2018 Red Hat Inc., Durham, North Carolina\nCopyright 2005-06, 2008,2014 Red Hat Inc., Durham, North Carolina\nCopyright 2005-07 Red Hat Inc., Durham, North Carolina\nCopyright 2005-08,2010-11,2014,2016-17 Red Hat Inc., Durham, North Carolina\nCopyright 2006-07,2009,2016 Red Hat Inc., Durham, North Carolina\nCopyright 2008,2011-12 Red Hat Inc., Durham, North Carolina\nCopyright 2018,19 Red Hat Inc., Durham, North Carolina\nCopyright 202-23 Steve Grubb\nCopyright 2021 Steve Grubb\nCopyright 2005-24 Steve Grubb <sgrubb@redhat.com>\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2004 Free Software Foundation, Inc. GNU Lesser General\nCopyright (c) 2006 HP\nCopyright (c) 2004 IBM\nCopyright (c) 2011 IBM Corp.\nCopyright (c) 2007 International Business Machines Corp.\nCopyright (c) 2007,2008,2009,2010,2011 Marc Alexander Lehmann <libev@schmorp.de>\nCopyright (c) 2008 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 2005-08,2011,2013-14,2018-21 Red Hat\nCopyright (c) 2005-09,2011-13,2016-17,2021-23 Red Hat\nCopyright (c) 2011, 2015 Red Hat., Durham, North Carolina\nCopyright (c) 2005 Red Hat Inc.\nCopyright (c) 2005-06,2014,2017,2022 Red Hat Inc.\nCopyright (c) 2005-08, 2011 Red Hat Inc.\nCopyright (c) 2005-2008, 2013-14,2016 Red Hat Inc.\nCopyright (c) 2006-07,2016,2021 Red Hat Inc.\nCopyright (c) 2006-08 Red Hat Inc.\nCopyright (c) 2007-09,2011-16,2018-21,2023 Red Hat Inc.\nCopyright (c) 2016-17 Red Hat Inc.\nCopyright (c) 2016-24 Red Hat Inc.\nCopyright (c) 2005-06,2008,2014,2017 Red Hat Inc., Durham, North Carolina\nCopyright (c) 2021 Red Hat Inc., Durham, North Carolina\nCopyright (c) 2019 Steve Grubb\nCopyright (c) 2009 Steve Grubb sgrubb@redhat.com\nCopyright (c) 1994 X Consortium\n(c) Costa Tsaousis\n(c) 2011 Emanuele Giaquinta\n(c) 2009-2015,2018-2020 Marc Alexander Lehmann <libecb@schmorp.de>\n(c) Steve Grubb\ncopyrighted by the Free Software Foundation\n\nAuthors: 2004-2017,20-23 Red Hat Inc.; 2005-07,2009-18,21-23 Red Hat Inc.; 2007,2016-17,21 Red Hat Inc.; 2012-14,16,18,20-23 Red Hat Inc.; 2016-17,20 Red Hat Inc.; 2016-18,21 Red Hat Inc.; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Costa Tsaousis; DJ Delorie <dj@redhat.com>; DJ Delorie <dj@redhat.com> Steve Grubb <sgrubb@redhat.com>; Dan Walsh; Debora Velarde <dvelarde@us.ibm.com> Steve Grubb <sgrubb@redhat.com>; Emanuele Giaquinta; FUJITSU Inc.; Fran,cois Pinard; Free Software Foundation, Inc.; Free Software Foundation, Inc. GNU Lesser General; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; HP; IBM; IBM Corp.; International Business Machines Corp.; Jens Axboe; John Dennis <jdennis@redhat.com>; Klaus Heinrich Kiwi <klausk@br.ibm.com>; Marc Alexander Lehmann; Marcelo Henrique Cerri <mhcerri@br.ibm.com>; Miloslav Trmac <mitr@redhat.com>; Miloslav Trmac <mitr@redhat.com> Steve Grubb <sgrubb@redhat.com>; Paolo Bonzini; Red Hat; Red Hat Inc; Red Hat Inc., Durham, North Carolina; Red Hat, Inc.; Red Hat., Durham, North Carolina; Richard Guy Briggs <rgb@redhat.com>; Scott James Remnant; Steve Grubb; Steve Grubb <sgrubb@redhat.com>; Steve Grubb <sgrubb@redhat.com> Junji Kanemaru <junji.kanemaru@linuon.com>; Steve Grubb <sgrubb@redhat.com> Marcelo Henrique Cerri <mhcerri@br.ibm.com>; Steve Grubb <sgrubb@redhat.com> Miloslav Trmac <mitr@redhat.com>; Steve Grubb <sgrubb@redhat.com> Richard Guy Briggs <rgb@redhat.com>; Steve Grubb <sgrubb@redhat.com> Rickard E.; Tom Tromey <tromey@cygnus.com>; X Consortium; Zhang Xiliang <zhangxiliang@cn.fujitsu.com> Steve Grubb <sgrubb@redhat.com>; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/a/audit-libs-3.1.5-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/audit-libs@3.1.5-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CMYsaxpAcY6tBVZMZbA_xoBcEzTR6as-YDBvkvB7EWY/audit-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://people.redhat.com/sgrubb/audit/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/audit-libs",
    "versionInfo" : "3.1.5-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-avahi-libs-0.8-22.el9-6-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1999-2016 Gentoo Foundation Distributed\nCopyright 2009 Johan Dahlin\nCopyright 2010 Lennart Poettering\nCopyright 2003, 2004 Porchdog Software\nCopyright 2003, 2004 Porchdog Software, Inc.\nCopyright 2018 Simon McVittie\nCopyright 2004-2015 by the Avahi developers\nCopyright (c) 2003-2004, Apple Computer, Inc.\nCopyright (c) 2009 Avahi's\nCopyright (c) 2006 Collabora Ltd.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005 James Willcox <snorp@snorp.net>\nCopyright (c) 2004 Oren Ben-Kiki\nCopyright (c) 2000 Red Hat, Inc.\nCopyright (c) 2018 THE PACKAGE'S\nCopyright (c) 1999 Tom Tromey\nCopyright (c) 1994 X Consortium\nCopyright (c) YEAR The Avahi developers\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2007-2019 the avahi\n(c) 2005-02-02 David A. Wheeler\n(c) 2005 James Willcox snorp@snorp.net\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/a/avahi-libs-0.8-22.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/avahi-libs@0.8-22.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GbQRsT4wm7LysStzqzFpTuoXbeTyyuOv4fHo5y8UvKs/avahi-~-22.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://avahi.org",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/avahi-libs",
    "versionInfo" : "0.8-22.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-basesystem-11-13.el9-arch-noarch",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/basesystem-11-13.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/basesystem@11-13.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J7bijLBb0NZaMVNRnfh1aT470AqLOIIuJJgmgtygNHE/basesystem-11-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/basesystem",
    "versionInfo" : "11-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bash-5.1.8-9.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015\nCopyright 1991 Chester Ramey\nCopyright 2003 Eelco Lempsink <eelcolempsink@gmx.net> 2011 Raphael Droz <raphael.droz+floss@gmail.com>\nCopyright 1988-2020 Free Software Foundation, Inc\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2020 Radical Eye Software\nCopyright 2011 The Pragmatic Programmers, LLC\nCopyright 2006 Yann Rouillard <yann@opencsw.org>\nCopyright 1995-2014 by Chester Ramey\nCopyright 1989-2020 by the Free Software Foundation, Inc\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) 2001 Chester Ramey\nCopyright (c) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004 Free Software Foundation, Inc\nCopyright (c) 1991,92,94,95,96,97,98,99,2000,2001 Free Software Foundation, Inc\nCopyright (c) 2004 Free Software Foundation, Inc. Petri Jooste <rkwjpj@puk.ac.za> , 2004\nCopyright (c) 2001 Free Software Foundation, Inc. Toomas Soome <Toomas.Soome@microlink.ee> , 2006\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Ban Quan Suo\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Hak Cipta\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Telif Hakki\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Zhu Zuo Quan Suo\nCopyright (c) Ian Macdonald <ian@caliban.org>\nCopyright (c) 1999 Jeff Solomon\nCopyright (c) 2002 Josip Rodin\nCopyright (c) 2003 Julian Gilbey\nCopyright (c) 1998 Richard Braakman\nCopyright (c) 2002, Richard S. Smith\nCopyright (c) 2002-2008 Rocky Bernstein for Free Software Foundation, Inc\nCopyright (c) 2004 Servilio Afre Puentes <servilio@gmail.com>\nCopyright (c) 1992 Simon Marshall\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2001 Vladimir Volovich <vvv@vsu.ru>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2003 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1989-2020 by the Free Software Foundation, Inc\nCopyright (c) 2018 ce Free Software Foundation\nCopyright <http://www.ams.org>\nEric Sanchis (eric.sanchis@iut-rodez.fr), 2012\nPortions Copyright (c) 1993 by Digital Equipment Corporation\n(c) 2025\n(c) 2009-2016, Bash Completion\n(c) 2006 Free Software Foundation, Inc\n(c) ISLETTER (c) DIGIT (c)\n(c) 2012 Ozgur Yazilim Vakfi\n(c) 2012 Zaduzhbina\n(c) 2009 Zi\n(c) m(harac-)630 1979\n(c) nam 2009\ncopyright 2002 by Josip Rodin\ncopyright 2003 by Julian Gilbey <jdg @debian.org>\ncopyright 1998 by Richard Braakman",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/bash-5.1.8-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bash@5.1.8-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Fpr99DGPXS3ioIoNdx-f2Dd1W_zCfhzFvhuIQ-IsANk/bash-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/bash",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bash",
    "versionInfo" : "5.1.8-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bind-libs-9.16.23-34.el9-7.1-arch-x86-64-epoch-32",
    "copyrightText" : "Bjorn.Victor@it.uu.se, 2005-05-07\nCOPYRIGHT 2021, Internet Systems Consortium\nCopyright 2006 Andreas Jellinghaus\nCopyright 1992-2015 Free Software Foundation, Inc.\nCopyright Joyent, Inc. and other Node contributors\nCopyright 2017 Red Hat, Inc.\nCopyright 1998 Sebastopol, CA O'Reilly and Associates\nCopyright (c) 2013 Bastien ROUCARIES <roucaries.bastien+autoconf@gmail.com>\nCopyright (c) 2008, Damien Miller <djm@openbsd.org>\nCopyright (c) 2012-2014 Daniel J. Bernstein <djb@cr.yp.to>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1996, David Mazieres <dm@uun.org>\nCopyright (c) 2009,2010 Dustin J. Mitchell <dustin@zmanda.com>\nCopyright (c) 2013-2014, Farsight Security, Inc.\nCopyright (c) 2009 Filippo Giunchedi <filippo@esaurito.net>\nCopyright (c) 1996-2015 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) Internet Systems Consortium, Inc.\nCopyright (c) 2012-2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1997 - 2003 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2004 Masarykova universita (Masaryk University, Brno, Czech Republic)\nCopyright (c) 2009-2018 NLNet Labs\nCopyright (c) 2004 Nominet, Ltd.\nCopyright (c) 1996-2001 Nominum, Inc.\nCopyright (c) 2014-2016, Pedro Ramalhete, Andreia Correia\nCopyright (c) 2008-2011 Red Hat, Inc.\nCopyright (c) 1987 Regents of the University of California\nCopyright (c) 2011 Russ Allbery <rra@stanford.edu>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2002 Stichting NLnet, Netherlands, stichting@nlnet.nl\nCopyright (c) 2011 The Board of Trustees of the Leland Stanford Junior University\nCopyright (c) The Internet Society 2005\nCopyright (c) 1995, 1997, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 1987, 1990, 1993, 1994 The Regents of the University of California\nCopyright (c) 2000,2014 VALUE OriginalFilename BINDInstall.EXE VALUE\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009,2010 Zmanda Inc. <http://www.zmanda.com/>\nCopyright (c) 1995, 1996, 1997, and 1998 WIDE Project\nCopyright (c) 1993 by Digital Equipment Corporation\nCopyright (c) 2014 by Farsight Security, Inc.\nCopyright (c) 1995-2000 by Network Associates, Inc.\nCopyright (c) 1999-2000 by Nortel Networks Corporation\nCopyright (c) 1998 s Internet Systems Consortium, Inc.\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) Internet Systems Consortium, Inc.\nPortions Copyright (c) Network Associates, Inc.\nPortions Copyright (c) 2001 Nominum, Inc.\nPortions Copyright (c) 1987, 1993 The Regents of the University of California\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions copyright (c) 2008 Nominet UK.\n(c) DNSKEY.\ncopyright d, Internet Systems Consortium\n\nAuthors: Andreas Jellinghaus; Bastien ROUCARIES; Bjorn.Victor@it.uu.se; DNSKEY; Damien Miller; Daniel J. Bernstein; Daniel Richard G.; David Blackman and Sebastiano Vigna (vigna@acm.org); David Mazieres; Digital Equipment Corporation; Dustin J. Mitchell; Eric Young (eay@cryptsoft.com); Farsight Security, Inc.; Filippo Giunchedi; Free Software Foundation, Inc.; Gabriele Svelto; Gary V. Vaughan; Google, Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim; Internet Systems Consortium; Internet Systems Consortium (https://www.isc.org); Internet Systems Consortium and its predecessor, the Internet Software Consortium; Internet Systems Consortium, Inc.; Jean-Philippe Aumasson; Joyent, Inc. and other Node contributors; Ken Brownfield <kb@slide.com>; Kevin Brintnall. RT; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lian Yihan, <lianyihan@360.cn>; MIT's Project Athena; Maarten Bosmans; Mark Andrews Curtis Blackburn James Brister Ben Cottrell John H. DuBois III Francis Dupont; Masarykova universita (Masaryk University, Brno, Czech Republic); NLNet Labs; Network Associates, Inc.; Noah Friedman <friedman@prep.ai.mit.edu>; Nominet UK.; Nominet, Ltd.; Nominum, Inc.; Nortel Networks Corporation; Olivier Courtay (olivier.courtay@irisa.fr); Pedro Ramalhete, Andreia Correia; Red Hat; Red Hat for the FreeIPA project; Red Hat for the FreeIPA project. - fetchlimit; Red Hat, Inc.; Regents of the University of California; Robert Edmonds at Farsight Security, Inc.; Russ Allbery; Scott James Remnant; Sebastopol, CA O'Reilly and Associates; Steven G. Johnson; Stichting NLnet, Netherlands; The Board of Trustees of the Leland Stanford Junior University; The Internet Society; The NetBSD Foundation, Inc.; The Regents of the University of California; Tim Hudson (tjh@cryptsoft.com); Tony Finch <dot@dotat.at>; VALUE OriginalFilename BINDInstall.EXE VALUE; WIDE Project; X Consortium; Zmanda Inc.; d, Internet Systems Consortium; g10 Code GmbH; rewritten by RPZ Count; s Internet Systems Consortium, Inc.; the Computer Systems Research Group; the OpenDNSSEC project (https://www.opendnssec.org); the OpenSSL Project; the project team",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/b/bind-libs-9.16.23-34.el9_7.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bind-libs@9.16.23-34.el9_7.1?arch=x86_64&epoch=32",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WnzLl7L9-w0mA4ob6hfnwgnm8faDjZLVoewMnJvUO6Y/bind9-v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.isc.org/downloads/bind/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bind-libs",
    "versionInfo" : "9.16.23-34.el9_7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bind-license-9.16.23-34.el9-7.1-arch-noarch-epoch-32",
    "copyrightText" : "Bjorn.Victor@it.uu.se, 2005-05-07\nCOPYRIGHT 2021, Internet Systems Consortium\nCopyright 2006 Andreas Jellinghaus\nCopyright 1992-2015 Free Software Foundation, Inc.\nCopyright Joyent, Inc. and other Node contributors\nCopyright 2017 Red Hat, Inc.\nCopyright 1998 Sebastopol, CA O'Reilly and Associates\nCopyright (c) 2013 Bastien ROUCARIES <roucaries.bastien+autoconf@gmail.com>\nCopyright (c) 2008, Damien Miller <djm@openbsd.org>\nCopyright (c) 2012-2014 Daniel J. Bernstein <djb@cr.yp.to>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1996, David Mazieres <dm@uun.org>\nCopyright (c) 2009,2010 Dustin J. Mitchell <dustin@zmanda.com>\nCopyright (c) 2013-2014, Farsight Security, Inc.\nCopyright (c) 2009 Filippo Giunchedi <filippo@esaurito.net>\nCopyright (c) 1996-2015 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 1996-2021 Internet Systems Consortium, Inc.\nCopyright (c) 2012-2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1997 - 2003 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2004 Masarykova universita (Masaryk University, Brno, Czech Republic)\nCopyright (c) 2009-2018 NLNet Labs\nCopyright (c) 2004 Nominet, Ltd.\nCopyright (c) 1996-2001 Nominum, Inc.\nCopyright (c) 2014-2016, Pedro Ramalhete, Andreia Correia\nCopyright (c) 2008-2011 Red Hat, Inc.\nCopyright (c) 1987 Regents of the University of California\nCopyright (c) 2011 Russ Allbery <rra@stanford.edu>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2002 Stichting NLnet, Netherlands, stichting@nlnet.nl\nCopyright (c) 2011 The Board of Trustees of the Leland Stanford Junior University\nCopyright (c) The Internet Society 2005\nCopyright (c) 1995, 1997, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 1987, 1990, 1993, 1994 The Regents of the University of California\nCopyright (c) 2000,2014 VALUE OriginalFilename BINDInstall.EXE VALUE\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009,2010 Zmanda Inc. <http://www.zmanda.com/>\nCopyright (c) 1995, 1996, 1997, and 1998 WIDE Project\nCopyright (c) 1993 by Digital Equipment Corporation\nCopyright (c) 2014 by Farsight Security, Inc.\nCopyright (c) 1995-2000 by Network Associates, Inc.\nCopyright (c) 1999-2000 by Nortel Networks Corporation\nCopyright (c) 1998 s Internet Systems Consortium, Inc.\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) Internet Systems Consortium, Inc.\nPortions Copyright (c) Network Associates, Inc.\nPortions Copyright (c) 2001 Nominum, Inc.\nPortions Copyright (c) 1987, 1993 The Regents of the University of California\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions copyright (c) 2008 Nominet UK.\n(c) DNSKEY.\ncopyright d, Internet Systems Consortium\n\nAuthors: Andreas Jellinghaus; Bastien ROUCARIES; Bjorn.Victor@it.uu.se; DNSKEY; Damien Miller; Daniel J. Bernstein; Daniel Richard G.; David Blackman and Sebastiano Vigna (vigna@acm.org); David Mazieres; Digital Equipment Corporation; Dustin J. Mitchell; Eric Young (eay@cryptsoft.com); Farsight Security, Inc.; Filippo Giunchedi; Free Software Foundation, Inc.; Gabriele Svelto; Gary V. Vaughan; Google, Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim; Internet Systems Consortium; Internet Systems Consortium (https://www.isc.org); Internet Systems Consortium and its predecessor, the Internet Software Consortium; Internet Systems Consortium, Inc.; Jean-Philippe Aumasson; Joyent, Inc. and other Node contributors; Ken Brownfield <kb@slide.com>; Kevin Brintnall. RT; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lian Yihan, <lianyihan@360.cn>; MIT's Project Athena; Maarten Bosmans; Mark Andrews Curtis Blackburn James Brister Ben Cottrell John H. DuBois III Francis Dupont; Masarykova universita (Masaryk University, Brno, Czech Republic); NLNet Labs; Network Associates, Inc.; Noah Friedman <friedman@prep.ai.mit.edu>; Nominet UK.; Nominet, Ltd.; Nominum, Inc.; Nortel Networks Corporation; Olivier Courtay (olivier.courtay@irisa.fr); Pedro Ramalhete, Andreia Correia; Red Hat; Red Hat for the FreeIPA project; Red Hat for the FreeIPA project. - fetchlimit; Red Hat, Inc.; Regents of the University of California; Robert Edmonds at Farsight Security, Inc.; Russ Allbery; Scott James Remnant; Sebastopol, CA O'Reilly and Associates; Steven G. Johnson; Stichting NLnet, Netherlands; The Board of Trustees of the Leland Stanford Junior University; The Internet Society; The NetBSD Foundation, Inc.; The Regents of the University of California; Tim Hudson (tjh@cryptsoft.com); Tony Finch <dot@dotat.at>; VALUE OriginalFilename BINDInstall.EXE VALUE; WIDE Project; X Consortium; Zmanda Inc.; d, Internet Systems Consortium; g10 Code GmbH; rewritten by RPZ Count; s Internet Systems Consortium, Inc.; the Computer Systems Research Group; the OpenDNSSEC project (https://www.opendnssec.org); the OpenSSL Project; the project team",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/b/bind-license-9.16.23-34.el9_7.1.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WnzLl7L9-w0mA4ob6hfnwgnm8faDjZLVoewMnJvUO6Y/bind9-v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bind-license@9.16.23-34.el9_7.1?arch=noarch&epoch=32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.isc.org/downloads/bind/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bind-license",
    "versionInfo" : "9.16.23-34.el9_7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bind-utils-9.16.23-34.el9-7.1-arch-x86-64-epoch-32",
    "copyrightText" : "Bjorn.Victor@it.uu.se, 2005-05-07\nCOPYRIGHT 2021, Internet Systems Consortium\nCopyright 2006 Andreas Jellinghaus\nCopyright 1992-2015 Free Software Foundation, Inc.\nCopyright Joyent, Inc. and other Node contributors\nCopyright 2017 Red Hat, Inc.\nCopyright 1998 Sebastopol, CA O'Reilly and Associates\nCopyright (c) 2013 Bastien ROUCARIES <roucaries.bastien+autoconf@gmail.com>\nCopyright (c) 2008, Damien Miller <djm@openbsd.org>\nCopyright (c) 2012-2014 Daniel J. Bernstein <djb@cr.yp.to>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1996, David Mazieres <dm@uun.org>\nCopyright (c) 2009,2010 Dustin J. Mitchell <dustin@zmanda.com>\nCopyright (c) 2013-2014, Farsight Security, Inc.\nCopyright (c) 2009 Filippo Giunchedi <filippo@esaurito.net>\nCopyright (c) 1996-2015 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) Internet Systems Consortium, Inc.\nCopyright (c) 2012-2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1997 - 2003 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2004 Masarykova universita (Masaryk University, Brno, Czech Republic)\nCopyright (c) 2009-2018 NLNet Labs\nCopyright (c) 2004 Nominet, Ltd.\nCopyright (c) 1996-2001 Nominum, Inc.\nCopyright (c) 2014-2016, Pedro Ramalhete, Andreia Correia\nCopyright (c) 2008-2011 Red Hat, Inc.\nCopyright (c) 1987 Regents of the University of California\nCopyright (c) 2011 Russ Allbery <rra@stanford.edu>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2002 Stichting NLnet, Netherlands, stichting@nlnet.nl\nCopyright (c) 2011 The Board of Trustees of the Leland Stanford Junior University\nCopyright (c) The Internet Society 2005\nCopyright (c) 1995, 1997, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 1987, 1990, 1993, 1994 The Regents of the University of California\nCopyright (c) 2000,2014 VALUE OriginalFilename BINDInstall.EXE VALUE\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009,2010 Zmanda Inc. <http://www.zmanda.com/>\nCopyright (c) 1995, 1996, 1997, and 1998 WIDE Project\nCopyright (c) 1993 by Digital Equipment Corporation\nCopyright (c) 2014 by Farsight Security, Inc.\nCopyright (c) 1995-2000 by Network Associates, Inc.\nCopyright (c) 1999-2000 by Nortel Networks Corporation\nCopyright (c) 1998 s Internet Systems Consortium, Inc.\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) Internet Systems Consortium, Inc.\nPortions Copyright (c) Network Associates, Inc.\nPortions Copyright (c) 2001 Nominum, Inc.\nPortions Copyright (c) 1987, 1993 The Regents of the University of California\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions copyright (c) 2008 Nominet UK.\n(c) DNSKEY.\ncopyright d, Internet Systems Consortium\n\nAuthors: Andreas Jellinghaus; Bastien ROUCARIES; Bjorn.Victor@it.uu.se; DNSKEY; Damien Miller; Daniel J. Bernstein; Daniel Richard G.; David Blackman and Sebastiano Vigna (vigna@acm.org); David Mazieres; Digital Equipment Corporation; Dustin J. Mitchell; Eric Young (eay@cryptsoft.com); Farsight Security, Inc.; Filippo Giunchedi; Free Software Foundation, Inc.; Gabriele Svelto; Gary V. Vaughan; Google, Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim; Internet Systems Consortium; Internet Systems Consortium (https://www.isc.org); Internet Systems Consortium and its predecessor, the Internet Software Consortium; Internet Systems Consortium, Inc.; Jean-Philippe Aumasson; Joyent, Inc. and other Node contributors; Ken Brownfield <kb@slide.com>; Kevin Brintnall. RT; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lian Yihan, <lianyihan@360.cn>; MIT's Project Athena; Maarten Bosmans; Mark Andrews Curtis Blackburn James Brister Ben Cottrell John H. DuBois III Francis Dupont; Masarykova universita (Masaryk University, Brno, Czech Republic); NLNet Labs; Network Associates, Inc.; Noah Friedman <friedman@prep.ai.mit.edu>; Nominet UK.; Nominet, Ltd.; Nominum, Inc.; Nortel Networks Corporation; Olivier Courtay (olivier.courtay@irisa.fr); Pedro Ramalhete, Andreia Correia; Red Hat; Red Hat for the FreeIPA project; Red Hat for the FreeIPA project. - fetchlimit; Red Hat, Inc.; Regents of the University of California; Robert Edmonds at Farsight Security, Inc.; Russ Allbery; Scott James Remnant; Sebastopol, CA O'Reilly and Associates; Steven G. Johnson; Stichting NLnet, Netherlands; The Board of Trustees of the Leland Stanford Junior University; The Internet Society; The NetBSD Foundation, Inc.; The Regents of the University of California; Tim Hudson (tjh@cryptsoft.com); Tony Finch <dot@dotat.at>; VALUE OriginalFilename BINDInstall.EXE VALUE; WIDE Project; X Consortium; Zmanda Inc.; d, Internet Systems Consortium; g10 Code GmbH; rewritten by RPZ Count; s Internet Systems Consortium, Inc.; the Computer Systems Research Group; the OpenDNSSEC project (https://www.opendnssec.org); the OpenSSL Project; the project team",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/b/bind-utils-9.16.23-34.el9_7.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WnzLl7L9-w0mA4ob6hfnwgnm8faDjZLVoewMnJvUO6Y/bind9-v~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bind-utils@9.16.23-34.el9_7.1?arch=x86_64&epoch=32",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.isc.org/downloads/bind/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bind-utils",
    "versionInfo" : "9.16.23-34.el9_7.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bzip2-libs-1.0.8-10.el9-5-arch-x86-64",
    "copyrightText" : "Copyright (c) 1996-2019 Julian Seward <jseward@acm.org>\nCopyright (c) 1996-2019 by Julian Seward\ncopyright (c) 1996-2019 Julian R Seward\ncopyright (c) Julian Seward",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/bzip2-libs-1.0.8-10.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A8MbGyjsaQzc-ZxUqA3w8rElvVB-e_qz_YDBdtseLfk/bzip2-~-10.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bzip2-libs@1.0.8-10.el9_5?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.bzip.org/",
    "licenseConcluded" : "(BSD-3-Clause AND bzip2-1.0.6)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bzip2-libs",
    "versionInfo" : "1.0.8-10.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ca-certificates-2025.2.80-v9.0.305-91.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2013 Kai Engert <kaie@redhat.com>\nCopyright (c) 1997 Microsoft\nCopyright (c) 1997 Microsoft Corp.\nCopyright (c) 1997 Microsoft Corp. Not Valid\nCopyright (c) 1997 Microsoft Corp. Serial\nCopyright (c) 2005, OU OISTE Foundation\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 2009 Philipp Kern <pkern@debian.org>\nCopyright (c) 2013 Red Hat, Inc.\n(c) 2006 Entrust, Inc\n(c) 2006 Entrust, Inc., CN Entrust Root Certification\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) 1999 Entrust.net Limited, CN Entrust.net Certification\n(c) 2007 GeoTrust Inc.\n(c) 1999 VeriSign, Inc.\n(c) 2006 thawte, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/ca-certificates-2025.2.80_v9.0.305-91.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.305-91.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rV5QZv6DaRDhzqJhOOBWMq0PmloggkraG_V-ZsOtMFU/ca-certificates-~_v~-91.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://fedoraproject.org/wiki/CA-Certificates",
    "licenseConcluded" : "(MIT AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ca-certificates",
    "versionInfo" : "2025.2.80_v9.0.305-91.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-cdi-api-2.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright 2019 Eclipse Foundation\nCopyright 2017-2019 Red Hat, Inc.\nCopyright 2018, Red Hat, Inc., and individual contributors ~ by the @authors\nCopyright 2008, Red Hat Middleware LLC, and individual contributors by the @authors\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) \"Eclipse Foundation, Inc.\nCopyright (c) Eclipse Foundation, Inc.\n\nAuthors: Antoine Sabot-Durand; Clint Popetz; Dan Allen; David Allen; Eclipse Foundation; Eclipse Foundation, Inc.; Gavin King; John Ament; John D. Ament; Jozef Hartinger; Lincoln Baxter, III; Mark Paluch; Marko Luksa; Martin Kouba; Nicklas Karlsson; Pete Muir; Red Hat Middleware LLC, and individual contributors by the @authors; Red Hat, Inc.; Red Hat, Inc., and individual contributors by the @authors; Red Hat, Inc., and individual contributors ~ by the @authors; Shane Bryzak; Stuart Douglas; THE ECLIPSE FOUNDATION",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/c/cdi-api-2.0.2-7.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/cdi-api@2.0.2-7.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OdFVVgxJiYmW_PsKQWvygxfWLeM0QntEoJSGlEQTIaw/cdi-api-~-7.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/cdi",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/cdi-api",
    "versionInfo" : "2.0.2-7.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-copy-jdk-configs-4.0-3.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2015 Red Hat inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/c/copy-jdk-configs-4.0-3.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/copy-jdk-configs@4.0-3.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uEN3n1yWNPuqOz8fpesX7jd63ijW2B9t3ka5RuSLsYA/copy-jdk-configs-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pagure.io/copy_jdk_configs",
    "licenseConcluded" : "(BSD-3-Clause AND BSD-4.3TAHOE)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/copy-jdk-configs",
    "versionInfo" : "4.0-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-coreutils-single-8.32-39.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright 1991, 99 Free Software Foundation, Inc.\nCopyright 87, 1991, 1992 Free Software Foundation, Inc.\nCopyright 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End More\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\nCopyright (c) 1990-2005, 2007-2009 Acme, Inc.\nCopyright (c) 2001 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright (c) 89 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2020 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1996, 2001, 2002 Free Software Foundation, Inc. Bang Jun-Young <bangjy@nownuri.nowcom.co.kr> , 1996-1997. Changwoo Ryu <cwryu@debian.org> , 2001-2002\nCopyright (c) 1990-1993, 2009-2020 Free Software Foundation, Inc. Francois Pinard <pinard@iro.umontreal.ca> , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2018\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson <iwj10@cus.cam.ac.uk>\nCopyright (c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\nRafal Maszkowski <rzm@icm.edu.pl> 1996-2001, 2003-2020\n(c) 1999 Free Software Foundation, Inc\n(c) TRANSLATORS Translate (c)\nportions copyright (c) 2007 Cluster",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/coreutils-single-8.32-39.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/coreutils-single@8.32-39.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pix44rZJzA873-cuIYwGu91VxP_pf3nicUxKmy4nwgk/coreutils-~-39.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/coreutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/coreutils-single",
    "versionInfo" : "8.32-39.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-crypto-policies-scripts-20250128-1.git5269e22.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2019 Red Hat, Inc.\nCopyright (c) 2019 Tomas Mraz <tmraz@fedoraproject.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/crypto-policies-scripts-20250128-1.git5269e22.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/crypto-policies-scripts@20250128-1.git5269e22.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PUWjXHSea9UJvNe8bo2IWSOmlpo14FP8WLvCihR7rwg/crypto-policies-20250128-1.git5269e22.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/redhat-crypto/fedora-crypto-policies",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/crypto-policies-scripts",
    "versionInfo" : "20250128-1.git5269e22.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-crypto-policies-20250128-1.git5269e22.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2014-2021 Red Hat, Inc.\nCopyright (c) 2019 Tomas Mraz <tmraz@fedoraproject.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/crypto-policies-20250128-1.git5269e22.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/crypto-policies@20250128-1.git5269e22.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PUWjXHSea9UJvNe8bo2IWSOmlpo14FP8WLvCihR7rwg/crypto-policies-20250128-1.git5269e22.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/redhat-crypto/fedora-crypto-policies",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/crypto-policies",
    "versionInfo" : "20250128-1.git5269e22.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-cups-libs-2.3.3op2-33.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1999 Aladdin Enterprises\nCopyright (c) 2007-2019 by Apple Inc.\nCopyright (c) 1997-2007 by Easy Software\nCopyright (c) 2020-2021 by Michael R Sweet\ncopyright 2006 by Jelmer Vernooij",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/cups-libs-2.3.3op2-33.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/cups-libs@2.3.3op2-33.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zrbI5FH9xsQJx-AzYep_iUprZX0nR_hsWD5j6SHDXd8/cups-~op2-33.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.cups.org/",
    "licenseConcluded" : "(Zlib AND LGPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/cups-libs",
    "versionInfo" : "2.3.3op2-33.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-curl-minimal-7.76.1-31.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2009 - 2020, John Malmberg\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2014, Bill Nagel <wnagel@tycoint.com> , Exacq Technologies\nCopyright (c) 2019, Bjorn Stenberg, <bjorn@haxx.se>\nCopyright (c) 2001-2004 Damien Miller <djm@openbsd.org>\nCopyright (c) 1998-2016 Daniel Stenberg\nCopyright (c) 1998 - 2021, Daniel Stenberg, <daniel@haxx.se>\nCopyright (c) 1996 - 2021, Daniel Stenberg, <daniel@haxx.se> , and many contributors\nCopyright (c) 2000 - 2020 David Odin\nCopyright (c) 2006 - 2020, David Shaw <dshaw@jabberwocky.com>\nCopyright (c) 2001 - 2020, Eric Lavigne\nCopyright (c) 2017, Florin Petriuc, <petriuc.florin@gmail.com>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2003 - 2021, Gisle Vanem <gvanem@yahoo.no>\nCopyright (c) 2004 - 2014, Guenter Knauf\nCopyright (c) 2010, Hoi-Ho Chan, <hoiho.chan@gmail.com>\nCopyright (c) 2010, Howard Chu, <hyc@highlandsun.com>\nCopyright (c) 2010, Howard Chu, <hyc@openldap.org>\nCopyright (c) 1996-2019 Internet Software Consortium\nCopyright (c) 2020 - 2021, Jacob Hoffman-Andrews, <github@hoffman-andrews.com>\nCopyright (c) 2015, Jay Satiro, <raysatiro@yahoo.com>\nCopyright (c) 2018 - 2020 Jeroen Ooms <jeroenooms@gmail.com>\nCopyright (c) 2011 - 2020, Jim Hollinger\nCopyright (c) 2008 Kaveh Ghazi <ghazi@caip.rutgers.edu>\nCopyright (c) 1998, 1999 Kungliga Tekniska Hogskolan\nCopyright (c) 1995, 1996, 1997, 1998, 1999 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2012 - 2014, Linus Nielsen Feltzing, <linus@haxx.se>\nCopyright (c) 2012, Marc Hoersken, <info@marc-hoersken.de>\nCopyright (c) 2012, Mark Salisbury, <mark.salisbury@hp.com>\nCopyright (c) 2009, Markus Moeller, <markus_moeller@compuserve.com>\nCopyright (c) 2019 - 2020, Michael Forney, <mforney@mforney.org>\nCopyright (c) 2012 - 2014, Nick Zitzmann, <nickzman@gmail.com>\nCopyright (c) 2017 - 2021 Red Hat, Inc.\nCopyright (c) 2017 Reini Urban <rurban@cpan.org>\nCopyright (c) 2020 - 2021, Simon Josefsson, <simon@josefsson.org>\nCopyright (c) 2003 - 2019 Simtec Electronics\nCopyright (c) 2012 - 2020, Steve Holme, <steve_holme@hotmail.com>\nCopyright (c) 2003 - 2020 The OpenEvidence Project\nCopyright (c) 1994 X Consortium\nCopyright (c) 2017 - 2018, Yiming Jing, <jingyiming@baidu.com>\nCopyright (c) 1996 - 2020 by Internet Software Consortium\nCopyright (c) 2006-2015 wolfSSL Inc.\ncopyright by the original\n\nAuthors: $year, Daniel Stenberg; Alexander Peslyak; Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Almroth; Andrew Lambert; Andrey Cherezov; Bill Nagel , Exacq Technologies; Bjorn Stenberg; Bruno de Carvalho; Casey O'Donnell; Chris Double; Christophe Espern; Clifford Wolf; Cris Bailiff and Balint Szilakszi; Damien Miller; Dan Wood; Daniel Stenberg; Daniel Stenberg, , and many contributors; Danil Osipchuk; David Odin; David Shaw; David Strauss; David Szafranski; Eiffel Software; Eric Lavigne; Eric Young (eay@cryptsoft.com); Florin Petriuc; Fran,cois Pinard; Free Software Foundation, Inc.; Galois, Inc; Gary V. Vaughan; Gisle Vanem; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guenter Knauf; Hoi-Ho Chan; Howard Chu; Internet Software Consortium; Ishan SinghLevett; Jacob Hoffman-Andrews; Jan Schaumann; Jay Satiro; Jean-Philippe Barrette-LaPierre; Jeff Pohlmeyer; Jeffrey Phillips; Jeffrey Pohlmeyer; Jeremy Brown; Jeroen Ooms; Jim Hollinger; John Malmberg; Jud Bishop; Kaveh Ghazi; Kenneth Bogert; Kungliga Tekniska Hogskolan; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lars Nilsson; Liam Healy; Linus Nielsen Feltzing; Marc Hoersken; Mark Salisbury; Markus Moeller; Michael Forney; Michael L. Gran; Mikhail Merkuryev; Nick Zitzmann; Nikos Mavrogiannopoulos, Tomas Mraz, Stanislav Zidek, Robert Kolcun, Andreas Schneider; Paul Howe; Paul Querna; Paul Vixie; Peter Sylvester, Jean-Paul Merlin; Peter Verhas; Ray Smith; Red Hat, Inc.; Reini Urban; Richard Atterer; Rob Crittenden (rcritten@redhat.com); Roland Krikava; Ross Bamford; Scott James Remnant; Simon Josefsson; Simtec Electronics; Stephen Nestinger and Jonathan Rogado; Sterling Hughes; Steve Holme; The OpenEvidence Project; Tim Hudson (tjh@cryptsoft.com); Tom Tromey <tromey@cygnus.com>; Viktor Szakats; Vincent Sanders <vince@kyllikki.org>; X Consortium; Yiming Jing; a community; the OpenSSL Project; the original; wolfSSL Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/curl-minimal-7.76.1-31.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/j7ldn8lpWdBaJSt41m_cf-hSIMGbwBl-EpN1PaBuivY/curl-~-31.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/curl-minimal@7.76.1-31.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://curl.se/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/curl-minimal",
    "versionInfo" : "7.76.1-31.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-cyrus-sasl-lib-2.1.27-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT Pluggable Authentication\nCOPYRIGHT SYNOPSIS Authenticate\nCOPYRIGHT SYNOPSIS Proxy\nCOPYRIGHT 1993-2016, The Cyrus Team\nCopyright CMU Group\nCopyright 1998, 1999 Carnegie Mellon University\nCopyright 1992-2015 Free Software Foundation, Inc.\nCopyright 1997-2001 Messaging Direct Ltd.\nCopyright 1988, Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright 2016 The OpenSSL Project Authors\nCopyright 1998 by Carnegie Mellon University\nCopyright 1995 by Cygnus\nCopyright 2015 by Nic Bernstein <nic@onlight.com>\nCopyright 1993 by OpenVision Technologies, Inc.\nCopyright 1985, 1986, 1987, 1988 by the Massachusetts Institute of Technology\nCopyright 2007-2013 by the Sphinx team\nCopyright 1987 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1998-2003 Carnegie Mellon University\nCopyright (c) 2009 Dean Povey <povey@wedgetail.com>\nCopyright (c) 1997, Eric Young\nCopyright (c) 1995-1997 Eric Young (eay@mincom.oz.au)\nCopyright (c) 2000 Fabian Knittel\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2002-2007 Howard Chu\nCopyright (c) 2002-2002 Igor Brezac\nCopyright (c) 2010, JANET(UK)\nCopyright (c) 2003 Jeremy Rumpf\nCopyright (c) 1995, 1996, 1997 Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1997, 1998 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1995 Mark Murray\nCopyright (c) 1997 Messaging Direct Ltd.\nCopyright (c) Microsoft Corporation\nCopyright (c) 2011, PADL Software Pty Ltd.\nCopyright (c) 2008 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 2005 Pyx Engineering AG\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 1996 - 1998 Royal Institute of Technology\nCopyright (c) 2013 Sebastian Pipping <sebastian@pipping.org>\nCopyright (c) Simo Sorce <simo@redhat.com>\nCopyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996 by Internet Software Consortium\nCopyright (c) 1986 by Sun Microsystems, Inc.\nCopyright (c) 1998 by the FundsXpress, INC.\nCopyright (c) 1989 by the Massachusetts Institute of Technology\nPortions Copyright (c) 2003 Jeremy Rumpf jrumpf@heavyload.net\n(c) Copyright 1993-2016, The Cyrus Team\n(c) Copyright 1992,95 by Cornell University\n(c) Copyright 1994,1995 by Cornell University\n(c) Copyright 1994,95 by Project Mandarin Inc.\ncopyright Copywrite 2015\ncopyright MIT, Cygnus Support, OpenVision, Oracle\ncopyright u'1993-2016, The Cyrus Team\nholder is Tim Hudson (tjh@mincom.oz.au)\n\nAuthors: Aaron Wohl <n3liw+@andrew.cmu.edu>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Melnikov <Alexey.Melnikov@isode.com>; Andreas Hasenack <andreas@conectiva.com.br>; Bjorn Gronvall <bg@sics.se>; CMU Group; Carnegie Mellon University; Chris Newman <chris.newman@sun.com>; Chris Newman Removal; Computing Services; Computing Services at Carnegie Mellon University (http://www.cmu.edu/computing/); Copywrite; Cornell University; Cygnus; Dana How <how@isl.stanford.edu>; Dann Frazier <dannf@debian.org>; Dave Cridland <dave.cridland@isode.com>; Dave Eckhardt <davide+receptionist@cs.cmu.edu>; Dean Povey; Eric Young; Eric Young (eay@mincom.oz.au); Fabian Knittel; Fabian Knittel <fknittel@gmx.de>; Fran,cois Pinard; Free Software Foundation, Inc.; G. R. Blair; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hajimu UMEMOTO <ume@mahoroba.org>; Howard Chu; Igor Brezac; Igor Brezac <igor@ipass.net>; Internet Software Consortium; JANET(UK); Jeremy Rumpf; Jeremy Rumpf <jrumpf@heavyload.net>; Jeremy Rumpf jrumpf@heavyload.net; Joe Ammann <joe@pyx.ch>; Joseph D. Touch <touch@isi.edu>; Jrgen Karlsson; KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>; Ken Hornstein <kenh@cmf.nrl.navy.mil>; Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden); Kungliga Tekniska Hgskolan and its contributors; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Kungliga Tekniska Hogskolan and its contributors; Larry Rosenbaum <lmr@ornl.gov>; Leena Heino <Leena.Heino@uta.fi>; Leif Johansson <leifj@matematik.su.se>; Lyndon Nerenberg of Messaging Direct Inc.; MIT, Cygnus Support, OpenVision, Oracle; Mark Murray; Mark Murray <mark@grondar.za>; Mei-Hui Su <mei@ISI.EDU>; Messaging Direct Ltd.; Michael-John Turner <mj@debian.org>; Microsoft Corporation; Microsoft. It's; Mike_Spreitzer.PARC@xerox.com; Nathan Kinder <nkinder@redhat.com>; Nic Bernstein; Nic Bernstein <nic@onlight.com>; Olaf Kirch <okir@monad.swb.de>; OpenVision Technologies, Inc.; PADL Software Pty Ltd.; Paolo Bonzini; Per Bothner; Pluggable Authentication; Project Mandarin Inc.; Pyx Engineering AG; RSA Data Security, Inc.; Rainer Schoepf <schoepf@uni-mainz.de>; Roberto C. Sanchez <roberto@connexer.com> , +for the Debian project; Royal Institute of Technology; SYNOPSIS Authenticate; SYNOPSIS Proxy; Sam Hocevar <sam@zoy.org>; Scott James Remnant; Sebastian Pipping; Sergey Ilinykh; Simo Sorce; Simon Wilkinson <simon@sxw.org.uk>; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems, Inc.; The Cyrus Team; The OpenSSL Project Authors; The Regents of the University of California; Tim Hudson; Tim Hudson (tjh@mincom.oz.au); Tim Martin; Tim Martin <tmartin@andrew.cmu.edu>; Tom Tromey <tromey@cygnus.com>; X Consortium; baggins@pld-linux.org; brennan@coco.cchs.su.oz.AU; dannf@debian.org; info. Then; jsmith@example.org; mbanck@debian.org; n3liw+@cmu.edu; the FundsXpress, INC.; the Internet Engineering Task Force (IETF); the Kungliga Tekniska Hgskolan and its contributors; the Massachusetts Institute of Technology; the Sphinx team; the Student Information Processing Board of the Massachusetts Institute of Technology; the University of California, Berkeley and its contributors; u'1993-2016, The Cyrus Team; witr@rwwa.COM",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/cyrus-sasl-lib-2.1.27-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FpOrRtuZvYbGd0kya8pYw3Iz6lbiHK2c7ejTJkp-7T4/cyrus-sasl-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cyrusimap.org/sasl/",
    "licenseConcluded" : "BSD-Attribution-HPND-disclaimer",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/cyrus-sasl-lib",
    "versionInfo" : "2.1.27-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-dbus-libs-1.12.20-8.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2003-2004 Lawrence E. Rosen\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/d/dbus-libs-1.12.20-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jeqMAECNUJB6FuE-X1EZT5XsF-r1XOXmV8PSerVdxKI/dbus-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/dbus-libs@1.12.20-8.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.freedesktop.org/Software/dbus/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/dbus-libs",
    "versionInfo" : "1.12.20-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-dejavu-sans-fonts-2.37-18.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2003 by Bitstream, Inc.\nCopyright (c) 2006 by Tavmjong Bah\n(c) American Mathematical Society\n(c) 2004-2016 DejaVu fonts team\n(c) 2006-2008 Nicolas Mailhot at laposte.net\n(c) 2004 Stepan Roh\n(c) Tavmjong Bah\n(c) Tavmjung Bah\n(c) 2003 by Bitstream, Inc.\n(c) 2006 by Tavmjong Bah",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/d/dejavu-sans-fonts-2.37-18.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uUH4a05XZpLV3vzMwitlhMXqikKQTvaga-lxHekfOj0/dejavu-fonts-~-18.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/dejavu-sans-fonts@2.37-18.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://dejavu-fonts.github.io/",
    "licenseConcluded" : "(Bitstream-Vera AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/dejavu-sans-fonts",
    "versionInfo" : "2.37-18.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-dnf-data-4.14.0-25.el9-arch-noarch",
    "copyrightText" : "COPR group\nCOPYRIGHT 2012-2025, Red Hat\nCopyright 2003 Duke University\nCopyright 2013 (c) Elad Alfassa <elad@fedoraproject.org>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright 2014-2015 (c) Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 2009, 2012-2018 Red Hat, Inc.\nCopyright (c) 1999-2002 Red Hat, Inc. Distributed\nCopyright (c) 2013-2014 Red Hat, Inc. Terminal\nParts Copyright 2007 Red Hat, Inc\ncopr https://dnf-plugins-core.readthedocs.io/en/latest/copr.html\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/d/dnf-data-4.14.0-25.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/dnf-data@4.14.0-25.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sZ1m9uLNa2yyrUlJ22yj5Ntl8syfzqgme1bW5CRtObc/dnf-~-25.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/dnf",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/dnf-data",
    "versionInfo" : "4.14.0-25.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-expat-2.5.0-5.el9-6-arch-x86-64",
    "copyrightText" : "Copyright 2001 Scott Bronson\nCopyright (c) 2001-2022 Expat maintainers\nCopyright (c) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/e/expat-2.5.0-5.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f8BeTUs3LNM5rrEpw87cLcWY2900DjF5uccEoX16I4A/expat-~-5.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://libexpat.github.io/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/expat",
    "versionInfo" : "2.5.0-5.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-file-libs-5.39-16.el9-arch-x86-64",
    "copyrightText" : "Copr. Self-extracting PKZIP\nCopr not Corp\nCopyright 1992-2019 Free Software Foundation, Inc\nCopyright Genus Microprogramming\nCopyright 1989-1990 PKWARE Inc. Self-extracting PKZIP\nCopyright 1995-2018 by GARMIN Corporation. or http://www.openstreetmap.org\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 1984,1998\nCopyright (c) 2018 Alois Schloegl <alois.schloegl@gmail.com>\nCopyright (c) 1984,1998 Caldera Inc. , DR-DOS\nCopyright (c) Christos Zoulas 2003\nCopyright (c) 2002-2005 David TAILLANDIER\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc\nCopyright (c) Ian F. Darwin 1986, 1987, 1989, 1990, 1991, 1992, 1994, 1995\nCopyright (c) Ian F. Darwin, Toronto, Canada, 1986-1999\nCopyright (c) 1996 Ignatios Souvatzis\nCopyright (c) 2000 The NetBSD Foundation, Inc\nCopyright (c) 1990, 1993 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2003 by Andrew Tridgell\nCopyright (c) 2001 by Martin Pool\n(c) 1993-2004 Gilles Vollant\n(c) STEPANYUK ARS-Sfx",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/file-libs-5.39-16.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/file-libs@5.39-16.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_aSdJ0gq3DSqKqtSm_LSeg0KPDaUk3rJbRJNJjifBLM/file-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.darwinsys.com/file/",
    "licenseConcluded" : "(BSD-4-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-2-Clause-Darwin)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/file-libs",
    "versionInfo" : "5.39-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-filesystem-3.16-5.el9-arch-x86-64",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/filesystem-3.16-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/filesystem@3.16-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J8lSYqHdEDNmyY9DireIzFMhQWTzGUpEIrFqHw7hGFM/filesystem-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pagure.io/filesystem",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/filesystem",
    "versionInfo" : "3.16-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-findutils-4.8.0-7.el9-arch-x86-64-epoch-1",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright 1991, 99 Free Software Foundation, Inc.\nCopyright 87, 1991, 1992 Free Software Foundation, Inc.\nCopyright 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End More\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\nCopyright (c) 1990-2005, 2007-2009 Acme, Inc.\nCopyright (c) 1996-2021 Free Software Foundation, Inc.\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright (c) 89 Free Software Foundation, Inc.\nCopyright (c) 2005 Free Software Foundation, Inc. Acest\nCopyright (c) 2003 Free Software Foundation, Inc. Ales Nyakhaychyk <nab@mail.by> , 2003\nCopyright (c) 1996 Free Software Foundation, Inc. Bang Jun-Young <bangjy@nownuri.nowcom.co.kr> , 1996\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Jordi Mallach <jordi@gnu.org> , 2002, 2003, 2004, 2005\nCopyright (c) 2004 Free Software Foundation, Inc. K.Birabwa <kompyuta@kizito.freeuk.com> , 2004\nCopyright (c) 2003 Free Software Foundation, Inc. Kevin Patrick Scannell <scannell@SLU.EDU> , 2003, 2004, 2005, 2006, 2007, 2008\nCopyright (c) 2004 Free Software Foundation, Inc. Lefteris Dimitroulakis <edimitro@tee.gr> , 2004, 2005. Lefteris Dimitroulakis <ledimitro@gmail.com> , 2013, 2014, 2016\nCopyright (c) 2003 Free Software Foundation, Inc. Nik Ramadhan Nik Idris <toknik@yahoo.com> , 2003\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2015\nCopyright (c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\n(c) 2006 Free Software Foundation, Inc.\n(c) Internal macro Tests",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/findutils-4.8.0-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/findutils@4.8.0-7.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sEdUH_tV8fRrDpBCv34ZPSDS-7OX9UZ2zyHsOnA6BCg/findutils-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/findutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/findutils",
    "versionInfo" : "4.8.0-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-fontconfig-2.14.0-2.el9-1-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright Xi 2010 Behdad Esfahbod\nCopyright Xi 2006 Keith Packard\nCopyright (c) 2014 Abel Cheung\nCopyright (c) 2011 Akira TAGOH\nCopyright (c) 2008 Behdad Esfahbod\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 2008 Danilo Segan\nCopyright (c) 2006 Danis Jacquerye\nCopyright (c) 2007 Dwayne Bailey\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2011,2012,2013 Google, Inc.\nCopyright (c) 2000,2001,2002,2003,2004,2006,2007 Keith Packard\nCopyright (c) 2008 Neskie Manuel\nCopyright (c) 2012 Parag Nemade\nCopyright (c) 2012 Parag Nemade, Pravin Satpute <psatpute@redhat.com>\nCopyright (c) 2005 Patrick Lam\nCopyright (c) 2012 Pravin Satpute <psatpute@redhat.com>\nCopyright (c) 2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020 Red Hat, Inc.\nCopyright (c) 2008 Red Hat, Inc. Red Hat\nCopyright (c) 2009 Resat SABIQ\nCopyright (c) 2010 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 1999 Richard Henderson <rth@redhat.com>\nCopyright (c) 2009 Roozbeh Pournader\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2005 Sharif FarsiWeb, Inc. <license@farsiweb.info>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2019 Tim-Philipp Muller\nCopyright (c) 2000 Tuomas J. Lukka\nCopyright (c) 2010 UKIJ - Uyghur Computer Science Association (http://www.ukij.org/) Ubuntu Uyghur Translation Team (https://launchpad.net/~ubuntu-l10n-ug)\nCopyright (c) 1994 X Consortium\nCopyright (c) YEAR Fontconfig Author(s)\nCopyright (c) 2002-2003 by Juliusz Chroboczek\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\n(c) 2019 Unicode(r), Inc.\n\nAuthors: Abel Cheung; Akira TAGOH; Akira TAGOH <akira@tagoh.org>; Akira TAGOH <tagoh@redhat.com>; Alan Coopersmith <alan.coopersmith@oracle.com>; Alan Hourihane <alanh@fairlite.demon.co.uk>; Alban Browaeys <alban.browaeys@gmail.com>; Alexander Kanavin <alex.kanavin@gmail.com>; Alexander Larsson; Alexander Larsson <alexl@redhat.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Khoroshilov <khoroshilov@linuxtesting.org>; Bastien Nocera <hadess@hadess.net>; Behdad Esfahbod; Behdad Esfahbod <behdad@behdad.org>; Behdad Esfahbod <freedesktop@behdad.org>; Behdad Esfahbod Google; Ben Wagner <bungeman@chromium.org>; Benjamin Close <Benjamin.Close@clearchain.com>; Brad Hards <bradh@frogmouth.net>; Carl Worth <cworth@cworth.org>; Carlo Bramini <carlo.bramix@libero.it>; Changwoo Ryu <cwryu@debian.org>; Chris Lamb <chris@chris-lamb.co.uk>; Chris McDonald <cjmcdonald@chromium.org>; Chris Wilson; Chris Wilson <chris@chris-wilson.co.uk>; Christoph J. Thompson <cjsthompson@gmail.com>; Colin Plumb; Colin Walters <walters@verbum.org>; Dan Nicholson <dbn.lists@gmail.com>; Daniel Richard G.; Danilo Segan; Danis Jacquerye; David Dawes <dawes@xfree86.org>; David Kaspar; David Turner <david@freetype.org>; Dennis Schridde <lindevel@gmx.net>; Dwayne Bailey; Dwayne Bailey <dwayne@translate.org.za>; Egbert Eich <eich@suse.de>; Emil Soleyman-Zomalan <emil@nishra.com>; Eric Anholt <eric@anholt.net>; Erik de Castro Lopo <erikd@mega-nerd.com>; Evgeniy Stepanov <eugeni.stepanov@gmail.com>; Florent Rougon <f.rougon@free.fr>; Florian Mullner <fmuellner@gnome.org>; Fontconfig Author(s); Fran,cois Pinard; Frederic Crozat <fcrozat@mandriva.com>; Frederic Crozat <fcrozat@suse.com>; Free Software Foundation, Inc.; Gary V. Vaughan; Glen Low <glen.low@pixelglow.com>; Google, Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim <guidod@gmx.de>; Han-Wen Nienhuys <hanwen@xs4all.nl>; Harald Fernengel <harry@kdevelop.org>; Harshula Jayasuriya <harshula@gmail.com>; Helmut Grohne <helmut@subdivi.de>; Hideki Yamane <henrich@iijmio-mail.jp>; Hongbo Zhao <hongbo.zhao@gmail.com>; James Cloos <cloos@lugabout.jhcloos.org>; James Su <suzhe@turbolinux.com.cn>; Jan Alexander Steffens; Jehan <jehan@girinstud.io>; Jeremy Huddleston <jeremyhu@apple.com>; Jeremy Huddleston Sequoia <jeremyhu@apple.com>; Jessica Perry Hekman <jphekman@arborius.net>; Jinkyu Yi <jincreator@naver.com>; Jon TURNEY <jon.turney@dronecode.org.uk>; Josselin Mouette <joss@debian.org>; Juliusz Chroboczek; Juliusz Chroboczek <Juliusz.Chroboczek@pps.jussieu.fr>; Karl Tomlinson <bugs.freedesktop@karlt.net>; Karl Tomlinson <karlt@karlt.net>; Kean Johnston <kean@armory.com>; Keith Packard; Keith Packard <keithp@keithp.com>; Keith Packard <keithp@keithp.com> and Josselin Mouette <joss@debian.org>; Keith Packard <keithp@koto.keithp.com>; Keith Packard <keithp@neko.keithp.com>; Keith Packard keithp@keithp.com; Khem Raj <raj.khem@gmail.com>; MINAMI Hirokazu <minami@mistfall.net>; Manish Singh <yosh@gimp.org>; Marc Aurele La France <tsi@ualberta.edu>; Marius Tolzmann <tolzmann@molgen.mpg.de>; Mark Brand <mabrand@mabrand.nl>; Markus Kuhn <Markus.Kuhn@cl.cam.ac.uk>; Masamichi Hosoda <trueroad@trueroad.jp>; Matthieu Herrb <matthieu.herrb@laas.fr>; Matthieu Herrb <matthieu@herrb.eu>; Michael Haubenwallner <michael.haubenwallner@ssi-schaefer.com>; Mike A. Harris <mharris@redhat.com>; Mike FABIAN <mfabian@suse.de>; Mike Frysinger <vapier@gentoo.org>; Mikhail Gusarov <dottedmag@dottedmag.net>; Neskie Manuel; Neskie Manuel <neskiem@gmail.com>; Nick Alcock <nick.alcock@oracle.com>; Noah Levitt <nlevitt@gmail.com>; Olivier Crete <olivier.crete@collabora.com>; Owen Taylor <otaylor@redhat.com>; Parag Nemade; Parag Nemade <pnemade@redhat.com>; Parag Nemade, Pravin Satpute; Patrick Haller <patrick.haller@haller-consult.de>; Patrick Lam; Patrick Lam <plam@csail.mit.edu>; Patrick Lam <plam@mit.edu>; Peter <pva@gentoo.org>; Peter Breitenlohner <peb@mppmu.mpg.de>; Petr Filipsky <philodej@gmail.com>; Pravin Satpute; Pravin Satpute <pravin.d.s@gmail.com>; Pravin Satpute <psatpute@redhat.com>; Quentin Glidic <sardemff7+git@sardemff7.net>; Rahul Bhalerao <b.rahul.pm@gmail.com>; Red Hat, Inc.; Red Hat, Inc. Red Hat; Resat SABIQ; Reuben Thomas; Richard Henderson; Robert Yang <liezhi.yang@windriver.com>; Roozbeh Pournader; Roozbeh Pournader <roozbeh@farsiweb.info>; Roozbeh Pournader <roozbeh@gmail.com>; Ross Burton <ross.burton@intel.com>; Ross Burton <ross@burtonini.com>; Ruslan Izhbulatov <lrn1986@gmail.com>; Ryan Schmidt <freedesktop-2008@ryandesign.com>; Sayamindu Dasgupta <sayamindu@gmail.com>; Scott James Remnant; Sebastian Freundt <hroptatyr@fresse.org>; Serge van den Boom <svdb+freedesktop.org@stack.nl>; Sharif FarsiWeb, Inc.; Stephan Kulow <coolo@novell.com>; Steven G. Johnson; Sylvain Pasche <sylvain.pasche@gmail.com>; Tilman Sauerbeck <tilman@code-monkey.de>; Tim-Philipp Muller; Tobias Stoeckmann <tobias@stoeckmann.org>; Tom Anderson <thomasanderson@chromium.org>; Tom Tromey <tromey@cygnus.com>; Tor Lillqvist <tml@iki.fi>; Torrey Lyons <torrey@mrcla.com>; Tuomas J. Lukka; UKIJ - Uyghur Computer Science Association Ubuntu Uyghur Translation Team; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Unicode(r), Inc.; W. Trevor King <wking@tremily.us>; X Consortium; Xi Behdad Esfahbod; Xi Keith Packard; pborelli@katamail.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/f/fontconfig-2.14.0-2.el9_1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/fontconfig@2.14.0-2.el9_1?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/edyLGj_6_Hp5G6ooxFatSDpLhdwUArfoHfVOMR_bV54/fontconfig-~-2.el9_1.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://fontconfig.org",
    "licenseConcluded" : "(MIT-Modern-Variant AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/fontconfig",
    "versionInfo" : "2.14.0-2.el9_1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-fonts-filesystem-2.0.5-7.el9.1-arch-noarch-epoch-1",
    "copyrightText" : "Copyright (c) 2019 Nicolas Mailhot <nim@fedoraproject.org>\n(c) 2007-2009 Nicolas Mailhot",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/fonts-filesystem-2.0.5-7.el9.1.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/fonts-filesystem@2.0.5-7.el9.1?arch=noarch&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KbnjXYH7FwkEMdEzTz309wgVQ3LSNYYurhyx2jGShig/fonts-rpm-macros-~-7.el~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://docs.fedoraproject.org/en-US/packaging-guidelines/FontsPolicy/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/fonts-filesystem",
    "versionInfo" : "2.0.5-7.el9.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-freetype-2.10.4-10.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2006-2013 Adobe Systems Incorporated\nCopyright 2000 Computing Research Labs, New Mexico State University\nCopyright Dave Gandy 2016\nCopyright 2007 Dmitry Timoshkov\nCopyright 2001-2002, 2011 Francesco Zappa Nardelli\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2003 Huw D M Davies for Codeweavers\nCopyright 1995-2002 Mark Adler\nCopyright 1990, 1994, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2000-2001, 2002 by Francesco Zappa Nardelli\nCopyright 2013 by Google, Inc. Google Author(s) Behdad Esfahbod\nCopyright 2010-2019 by Joel Klinghed\nCopyright 2003 by Masatake YAMATO and Redhat K.K.\nCopyright 2 2016-2020 by Werner Lemberg <wl@gnu.org>\nCopyright 2000 by foobar\nCopyright 2005-2019 by write David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1999-2020\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2009 Francesco Salvestrini <salvestrini@users.sourceforge.net>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 1995-2002 Jean-loup Gailly\nCopyright (c) 1995-2002 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2002 Mark Adler\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2016-2018 Static Jobs LLC\nCopyright (c) 2008 Tim Toolan <toolan@ele.uri.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2004-2020 by Albert\nCopyright (c) 1999-2020 by Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2018-2020 by Armin Hasitzka, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1996-2020 by D. Turner, R.Wilhelm, and W. Lemberg\nCopyright (c) 2007-2020 by David Turner\nCopyright (c) 1996-2020 by David Turner, Robert Wilhelm, Werner Lemberg, and Detlef Wuerkner\nCopyright (c) 1996-2020 by David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner\nCopyright (c) 2004-2020 by David Turner, Robert Wilhelm, Werner Lemberg and George Williams\nCopyright (c) 2008-2020 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2006-2020 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2007-2020 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2020 by Derek Clegg and Michael Toftdal\nCopyright (c) 2000 by Francesco Zappa Nardelli\nCopyright (c) 2005, 2007, 2008, 2013 by George Williams\nCopyright (c) 2013-2020 by Google, Inc.\nCopyright (c) 2010-2020 by Joel Klinghed\nCopyright (c) 1999-2020 by Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1996-2020 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2020 by Masatake YAMATO, Redhat K.K., David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2004-2020 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2001-2020 by Michael Pfeiffer\nCopyright (c) 2018-2020 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2020 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2020 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2002-2020 by Roberto Alameda\nCopyright (c) 1991-2020 by Stichting Mathematisch Centrum, Amsterdam, The Netherlands\nCopyright (c) 1999-2020 by The FreeType Development Team - www.freetype.org\nCopyright (c) 2015-2020 by Werner Lemberg\nCopyright (c) 2005-2020 by Werner Lemberg and Detlef Wurkner\nCopyright (c) 1996-2020 by suzuki toshiya, D. Turner, R.Wilhelm, and W. Lemberg\nCopyright (c) 2006-2020 by suzuki toshiya, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2004-2020 by suzuki toshiya, Masatake YAMATO, Red\nCopyright (c) 2004-2020 by suzuki toshiya, Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2000-2015 foobar\nCopyright 2020 https://www.freetype.org/license.html' The FreeType Project\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyrighted by the Free Software Foundation\n\nAuthors: $! David Turner, Robert Wilhelm, and Werner Lemberg; <luoy.li@gmail.com>; <muktha.narayan@wipro.com>; <octoploid@yandex.com>; <ychen1392001@yahoo.com.cn>; Adam Twardoch <adam@fontlab.com>; Adobe Systems Incorporated; Akaki Razmadze <razmadzekoko@gmail.com>; Akiem Helmling <akiem@underware.nl>; Akira Kakuto <kakuto@fuk.kindai.ac.jp>; Alan Coopersmith <alan.coopersmith@oracle.com>; Albert; Albert Astals Cid <aacid@kde.org>; Alexander Hedges <ahedges@student.ethz.ch>; Alexander Peslyak; Alexei Podtelezhnikov <apodtele@gmail.com>; Alexey Kryukov <anagnost@yandex.ru>; Andrey Panov <panov@canopus.iacp.dvo.ru>; Anthony Fok <foka@debian.org>; Antoine Leca; Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg; Armin Hasitzka, David Turner, Robert Wilhelm, and Werner Lemberg; Ben Wagner <bungeman@google.com>; Bob Taylor <Bob.Taylor@monotype.com>; Boris Letocha <b.letocha@gmc.net>; Brad Dunzer <BDunzer@extensis.com>; Celine PILLET <Celine.Pillet@Tagginfo.com>; Chi Nguyen <chint@necsv.com>; Chris Evans <scarybeasts@gmail.com>; Chris Liddell <chris.liddell@artifex.com>; Colin Walters <walters@verbum.org>; Computing Research Labs, New Mexico State University; D. Turner, R.Wilhelm, and W. Lemberg; Dan Liddell <lddll@yahoo.com>; Daniel Glockner <daniel-gl@gmx.net>; Dave Arnold <darnold@adobe.com>; Dave Gandy; David Bevan; David Bevan <dbevan@emtex.com>; David Capello <davidcapello@gmail.com>; David Kastrup <dak@gnu.org>; David Osborn <spam@habitualhiatus.com>; David Sachitano and Lawrence Coopet; David Turner; David Turner <david@freetype.org>; David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner; David Turner, Robert Wilhelm, Werner Lemberg and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Detlef Wuerkner; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; David Wimsey <david@wimsey.us>; Del Merritt <del@alum.mit.edu>; Dennis Felsing <dennis@felsin9.de>; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Detlef Wurkner <TetiSoft@apg.lahn.de>; Dirck Blaskey <listtarget@danbala.com>; Dmitry Timoshkov; Doug Felt <dougfelt@gmail.com>; Francesco Salvestrini; Francesco Zappa Nardelli; Francesco Zappa Nardelli <Francesco.Zappa.Nardelli@ens.fr>; Free Software Foundation Inc.; Free Software Foundation, Inc.; FreeType team; G.W. Lucas <glucas@sonalysts.com>; Gary V. Vaughan; George Williams; George Williams <gww@silcom.com>; Google, Inc.; Google, Inc. Google Author(s) Behdad Esfahbod; Gordon Childs <gchilds@quickcut.com.au>; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Henry Maddocks <maddocks@metservice.com>; Herbert Duerr <duerr@sun.com>; Hin-Tak Leung <htl10@users.sourceforge.net>; Hrant H Papazian <hpapazian@gmail.com>; Huib-Jan Imbens <ft@imbens.nl>; Huw D M Davies for Codeweavers; Ian Britten <britten@caris.com>; Ian Brown <ian.brown@printsoft.de>; Ingmar Sittl <ingmar.sittl@elektrobit.com>; Intel Corporation; Ismail Donmez <ismail@kde.org.tr>; Ivan Nincic <inincic@pdftron.com>; J. Ali Harlow <ali@avrc.city.ac.uk>; Jakub Bogusz <qboosh@pld.org.pl>; James Cloos <cloos@jhcloos.com>; Jason Owen <jason.a.owen@gmail.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jeremy Manson <jeremy.manson@gmail.com>; Jjgod Jiang <gzjjgod@gmail.com>; Joel Klinghed; Johannes Walther <joh_walt@yahoo.de>; John Cary <cary@txcorp.com>; John Emmas <john@creativepost.co.uk>; John Emmas <johne53@tiscali.co.uk>; Johnson Y. Yan <yinsen_yan@foxitsoftware.com>; Jorg Gunnewig <joerg.guennewig@googlemail.com>; Jouk Jansen <joukj@hrem.nano.tudelft.nl>; Just van Rossum; Just van Rossum <just@letterror.com>; Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Karsten Lucke <karsten.luecke@kltf.de>; Keith Packard; Kevin Blenkinsopp <arqon@promode.org>; Khaled Hosny <khaledhosny@eglug.org>; Kirill Tishin <siege@bk.ru>; Knut St. Osmundsen <bird-freetype@anduin.net>; Kostya Serebryany <kcc@google.com>; Krzysztof Kotlenga <pocek@users.sf.net>; Krzysztof Kowalczyk <kkowalczyk@gmail.com>; Marc Schonefeld <marc.schoenefeld@gmx.org>; Marco Wertz <marco.wertz@gmx.de>; Marek Kasik <mkasik@redhat.com>; Mark Adler; Markus Trippelsdorf <markus@trippelsdorf.de>; Martin P.J. Zinser zinser@decus.de; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; Masatake YAMATO, Redhat K.K, David Turner, Robert Wilhelm, and Werner Lemberg; Masatake YAMATO, Redhat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; Mateusz Jurczyk <mjurczyk@google.com>; Michael Pfeiffer; Michal Nowakowski <miszka@limes.com.pl>; Mickey Gabel <mickey@monfort.co.il>; Mikey Anbary <manbary@vizrt.com>; Mojca Miklavec <mojca.miklavec.lists@gmail.com>; Nickolas George <darknova.clan@gmail.com>; Nicolas Rougier <Nicolas.Rougier@inria.fr>; Niels Boldt <nielsboldt@gmail.com>; Nigel Tao <nigeltao@golang.org>; Nikhil Ramakrishnan <ramakrishnan.nikhil@gmail.com>; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; Nikolaus Waxweiler <madigens@gmail.com>; Nikolay Sivov <bunglehead@gmail.com>; Ning Dong <flintning@163.com>; Nis Martensen <nis.martensen@web.de>; Oran Agra <oran@monfort.co.il>; Oran Agra and Mickey Gabel; Patrick Thomas <pthomas505@gmail.com>; Paul Watson <pwatson@redlinepy.com>; Peter Breitenlohner <peb@mppmu.mpg.de>; Peter Weilbacher <mozilla@weilbacher.org>; Rahul Bhalerao; Ralf S. Engelschall <rse@engelschall.com>; Richard COOK <rscook@unicode.org>; Robert Marki <gsmiko@gmail.com>; Roberto Alameda; Roberto Alameda <ojancano@geekmail.de>; Robin Watts <robin.watts@artifex.com>; Roy Tam <roytam@gmail.com>; Sander van der Wal <svdwal@xs4all.nl>; Scott James Remnant; Sean McBride; Sean McBride <sean@rogue-research.com>; Sebastien Leix <s.leix@sdi.fr>; Sender Ghost <lightside@gmx.com>; Shailesh Mistry <shailesh.mistry@hotmail.co.uk>; Shao Yu Zhang <shaozhang@fb.com>; Static Jobs LLC; Stephan T. Lavavej <stl@nuwen.net>; Stephen Fisher <sfisher@SDF.ORG>; Steve Hartwell <shspamsink@comcast.net>; Steve Langasek <vorlon@debian.org>; Stichting Mathematisch Centrum, Amsterdam, The Netherlands; Stuart Gill and Behdad Esfahbod; Sven Neumann sven@gimp.org; Sylvain Beucler <beuc@gnu.org>; Tavis Ormandy <taviso@google.com>; Taylor Holberton <taylorcholberton@gmail.com>; The FreeType Development Team - www.freetype.org; The FreeType Project; The Open Group; Tim Toolan; Titus Nemeth <tn@tntypography.eu>; Tobias Wolf <towolf@gmail.com>; Tom Bishop <wenlin@wenlin.com>; Tony J. Ibbs <tibs@sj.co.uk>; Tony Smith <tony.smith@macro4.com>; Truc Truong <tructv@necsv.com>; Vaibhav Nagarnaik <vnagarnaik@gmail.com>; Victor Stinner <victor.stinner@haypocalc.com>; Werner Lemberg; Werner Lemberg <wl@gnu.org>; Werner Lemberg and Detlef Wurkner; Wojciech Mamrak <wmamrak@gmail.com>; X Consortium; YAMANO-UCHI Hidetoshi <mer@din.or.jp>; YAMATO Masatake and SUZUKI Toshiya; Yu Lei <yulei0@gmail.com>; Zhang Jun Zhi <418092625@qq.com>; chris@dokein.co.uk; community; content David; content FreeType; foobar; gzip. Files; just@letterror.com; just@letterror.com. Heavily Fixed; mpsuzuki, George Williams, and Sean McBride; suyu@cooee.cn; suzuki toshiya, D. Turner, R.Wilhelm, and W. Lemberg; suzuki toshiya, David Turner, Robert Wilhelm, and Werner Lemberg; suzuki toshiya, Masatake YAMATO, Red; suzuki toshiya, Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; suzuki toshiya. On; the Free Software Foundation; the FreeType team; the LilyPond; write David Turner, Robert Wilhelm, and Werner Lemberg",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/freetype-2.10.4-10.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/guAdRo221lS8DWXikNqDD1Fin0TpejfXfu7u6nLPx9o/freetype-~-10.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/freetype@2.10.4-10.el9_5?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.freetype.org",
    "licenseConcluded" : "(BSD-3-Clause AND MIT AND GPL-2.0-or-later AND LicenseRef-Public-Domain AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/freetype",
    "versionInfo" : "2.10.4-10.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-fstrm-0.6.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2016 Free Software Foundation, Inc.\nCopyright 2000 by Gray Watson\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2012 Dan Winship\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2012, 2014 Philip Withnall\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright (c) 2014 by Farsight Security, Inc.\ncopyright 2013-2018",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/f/fstrm-0.6.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kiKbPv2I26BaFLH7jytpq1nwbqOfoRZmofq-E-RQGK0/fstrm-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/fstrm@0.6.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/farsightsec/fstrm",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/fstrm",
    "versionInfo" : "0.6.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gawk-5.1.0-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 1989, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2001, 2002, 2003, 2004, 2005, 2007, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020\nCopyright 2012, 2013, 2014, 2018, Free Software Foundation, Inc.\nCopyright (c) 2008 Davide Brini\nCopyright (c) 1989, 1991-2015 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005, 2006, 2007, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1983, 1993 The Regents of the University of California\nCopyright (c) 1989, 1991- d Free Software Foundation\nCopyright (c) 2013, 2017, 2019 the Free Software Foundation, Inc.\n(c) 1997 Cambridge Center",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gawk-5.1.0-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TM9dpWRDnthR16og6Z5jJ1W4-GAoGpz-Qr4XGB4CrD4/gawk-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gawk@5.1.0-6.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/gawk/",
    "licenseConcluded" : "(GPL-3.0-or-later AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gawk",
    "versionInfo" : "5.1.0-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gdbm-libs-1.23-1.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc.\nCopyright 2000-2002, 2007-2008, 2011, 2017-2022 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2011-2022 Free Software Foundation, Inc.\nCopyright (c) 2007, 2011 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2020-2021 Sergey Poznyakoff\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright s Free Software Foundation, Inc",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gdbm-libs-1.23-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QhaipY59p_ceG026IZl_bBHxQjmo5aA4yCxdT-h0zRE/gdbm-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gdbm-libs@1.23-1.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/gdbm/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gdbm-libs",
    "versionInfo" : "1.23-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glib2-2.68.4-16.el9-6.2-arch-x86-64",
    "copyrightText" : "Copyright @ 2006\nCopyright 2001-2003 Andrew Lanoix\nCopyright 2024 Collabora Ltd.\nCopyright 2018 Emmanuele Bassi\nCopyright 2016 Endless Mobile, Inc.\nCopyright 2020 Frederic Martinsons\nCopyright 1991, 92, 95, 96, 97, 98, 99 Free Software Foundation, Inc.\nCopyright 2001 Hans Breuer\nCopyright 2021 Igalia S.L.\nCopyright 2014-2018 Jan-Michael Brummer <jan.brummer@tabos.org>\nCopyright 2015 Lars Uebernickel\nCopyright 2005 Matthias Clasen\nCopyright 2009 Nokia Corporation\nCopyright 1998 Owen Taylor\nCopyright 1998 Owen Taylor and Tor Lillqvist\nCopyright 1995-2011 Peter Mattis, Spencer Kimball, Josh MacDonald, Sebastian Wilhelmi and others\nCopyright 1995-2011 Peter Mattis, Spencer Kimball, Josh MacDonald and others\nCopyright 2019 Red Hat, Inc\nCopyright 2006-2011 Red Hat, Inc. and others\nCopyright 2017 Ruslan Izhbulatov\nCopyright 2015 Ryan Lortie\nCopyright 2007, 2008 Ryan Lortie <desrt@desrt.ca>\nCopyright 1998 Sebastian Wilhelmi University of Karlsruhe\nCopyright 1998 Sebastian Wilhelmi University of Karlsruhe Owen Taylor\nCopyright 1998-2011 Tim Janik, Red Hat, Inc. and others\nCopyright 1998-2011 Tim Janik and others\nCopyright 2000 Tor Lillqvist\nCopyright 1999-2000 Tor Lillqvist and Craig Setera\nCopyright (c) 2001, 02, 03, 05\nCopyright (c) 2001, 02, 03, 05, 07, 10\nCopyright (c) 2002\nCopyright (c) 1995, A.M. Kuchling\nCopyright (c) 2004-2005 Adam Weinberger <adamw@gnome.org>\nCopyright (c) 2005 Alexander Larsson <alexl@redhat.com>\nCopyright (c) 2004 Anders Carlsson <andersca@gnome.org>\nCopyright (c) 2001 Behdad Esfahbod\nCopyright (c) 2009 Benjamin Otte <otte@gnome.org>\nCopyright (c) 2011 Canonical Limited\nCopyright (c) 2005 Canonical Ltd.\nCopyright (c) 2009-2010 Christian Hergert <chris@dronelabs.com>\nCopyright (c) 2010 Christian Kellner\nCopyright (c) 2008 Christian Kellner, Samuel Cormier-Iijima\nCopyright (c) 2010 Christian Persch\nCopyright (c) 2014 Chun-wei Fan\nCopyright (c) 2008 Clemens N. Buss <cebuzz@gmail.com>\nCopyright (c) 2010 Codethink Limited\nCopyright (c) 2012 Colin Walters <walters@verbum.org>\nCopyright (c) 2017 Collabora Inc.\nCopyright (c) 2011 Collabora Ltd.\nCopyright (c) 2012 Collabora Ltd. <http://www.collabora.co.uk/>\nCopyright (c) Croatiann team Translators Denis Lackovic <delacko@fly.srk.fer.hr>\nCopyright (c) 2006 Dave Benson\nCopyright (c) 2006-2008 Diego Petteno <flameeyes@gmail.com>\nCopyright (c) 2011, 2012 Dmitry Matveev <me@dmitrymatveev.co.uk>\nCopyright (c) 2000 Eazel, Inc.\nCopyright (c) 2005-2006 Emmanuele Bassi\nCopyright (c) 2007 Emmanuele Bassi <ebassi@gnome.org>\nCopyright (c) 2010 Emmanuele Bassi <ebassi@linux.intel.com>\nCopyright (c) 2018 Endless Mobile, Inc.\nCopyright (c) 2022 Endless OS Foundation, LLC\nCopyright (c) 2007 Francois Gouget\nCopyright (c) Free Software Foundation, 2002\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1991,92,94,95,96,97,98,99,2000,01,02 Free Software Foundation, Inc.\nCopyright (c) 1992,95-97,99,2000,01,02,04,07 Free Software Foundation, Inc.\nCopyright (c) 2016 Free Software Foundation, Inc. Borislav Aleksandrov <B.Aleksandrov@cnsys.bg> , 2002. Alexander Shopov <ash@kambanaria.org> , 2002, 2005, 2006, 2007, 2008, 2009, 2010, 2011. Alexander Shopov <ash@kambanaria.org> , 2012, 2013, 2015, 2016. Damyan Ivanov <dam+gnome@ktnx.net> , 2010. Krasimir Chonov <mk2616@abv.bg> , 2014\nCopyright (c) 2001-2021 Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001-2005. Daniel Nylander <po@danielnylander.se> , 2006-2012. Sebastian Rasmussen <sebras@gmail.com> , 2014, 2015. Anders Jonsson <anders.jonsson@norsjovallen.se> , 2015, 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2016, 2017, 2018, 2019, 2020, 2021 Free Software Foundation, Inc. Christopher R. Gabriel <cgabriel@pluto.linux.it> 2002. Nota\nCopyright (c) 2001,2002,2003, 2006, 2007, 2008 Free Software Foundation, Inc. Isam Bayazidi <bayazidi@arabeyes.org> , 2001,2002. Arafat Medini <lumina@silverpen.de> , 2003. Djihed Afifi <djihed@gmail.com> , 2006, 2007. Khaled Hosny <khaledhosny@eglug.org> , 2006, 2007, 2008, 2010, 2011, 2012. Anas Afif Emad <anas.e87@gmail.com> , 2008\nCopyright (c) 2001-2003, 2005 Free Software Foundation, Inc. Kjartan Maraas <kmaraas@gnome.org> , 2001-2018. Terance Edward Sola <terance@lyse.net> , 2005. Torstein Adolf Winterseth <kvikende@fsfe.org> , 2010\nCopyright (c) 2009 Free Software Foundation, Inc. Lauri Nurmi <lanurmi@iki.fi> , 2002-2004, Sami Pesonen <sampeson@iki.fi> , 2004-2005. Ilkka Tuohela <hile@iki.fi> , 2005-2009. Timo Jyrinki <timo.jyrinki@iki.fi> , 2008-2010. Harri Pitkanen\nCopyright (c) 2001 - 2010 Free Software Foundation, Inc. Marius Andreiana <mandreiana@yahoo.com> , 2001. Misu Moldovan <dumol@gnome.ro> , 2004 - 2010. Lucian Adrian Grijincu <lucian.grijincu@gmail.com> , 2010, 2011. Lupescu Mircea <mircea.crazy@gmail.com> , 2010. Lupescu Mircea <mircea.crazy@gmail.com> , 2011. Daniel Serbanescu\nCopyright (c) 2001 Free Software Foundation, Inc. Pablo Saratxaga <pablo@walon.org> , 2004\nCopyright (c) 2001, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Proxecto Trasno\nCopyright (c) 2003 Free Software Foundation, Inc. Raphael Finkel <raphael@cs.uky.edu> , 2003\nCopyright (c) 2002, 2004, 2006, 2009 Free Software Foundation, Inc. Simos Xenitellis <simos@hellug.gr> , 2002. Kostas Papadimas <pkst@gmx.net> , 2002. Kostas Papadimas <pkst@gnome.org> , 2004, 2006. Jennie Petoumenou <epetoumenou@gmail.com> , 2009. Fotis Tsamis <ftsamis@gmail.com> , 2009. Michael Kotsarinis <mk73628@gmail.com> , 2011. Dimitris Spingos (Demetres Spiggos) <dmtrs32@gmail.com> , 2012. Dimitris Spingos (Demetres Spiggos) <dmtrs32@gmail.com> , 2012, 2013, 2014, 2015. Efstathios Iosifidis <iosifidis@opensuse.org> , 2015\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006 Free Software Foundation, Inc. Softcatala <info@softcatala.org> , 2001. Jordi Mallach <jordi@sindominio.net> , 2002, 2003, 2004, 2005, 2006. Josep Puigdemont <josep.puigdemont@gmail.com> , 2006. Silvia Miranda <silvia@softcatala.cat> , 2011. Jordi Serratosa <jordis@softcatala.cat> , 2012, 2017. Gil Forcada <gilforcada@guifi.net> , 2008-2013, 2013, 2014, 2016. Jordi Mas\nCopyright (c) 1995 Free Software Foundation, Inc. Ulrich Drepper <drepper@gnu.ai.mit.edu> , 1995\nCopyright (c) 2016 GNOME i18n Project for Vietnamese\nCopyright (c) 2010 HZ\nCopyright (c) 2008 Hans Breuer\nCopyright (c) 2018 Igalia S.L.\nCopyright (c) 2005 Imendio AB\nCopyright (c) 2018 Inigo Martinez <inigomartinez@gmail.com>\nCopyright (c) 2010 Intel Corp.\nCopyright (c) 2005 John McCutchan\nCopyright (c) 2006 John McCutchan <john@johnmccutchan.com>\nCopyright (c) 2003 Jonathan Blandford <jrb@alum.mit.edu>\nCopyright (c) 2000-2017 Julian Seward\nCopyright (c) 2007 Jurg Billeter\nCopyright (c) 2010, Karo Mkrtchyan Karo Mkrtchyan <020113@mail.ru>\nCopyright (c) 2013 Lars Uebernickel\nCopyright (c) 2012 Lucas De Marchi <lucas.de.marchi@gmail.com>\nCopyright (c) 2006 Lukas Novotny <lukasnov@cvs.gnome.org>\nCopyright (c) 2005 - 2007, Marco Barisione <marco@barisione.org>\nCopyright (c) 2003 Matthias Clasen\nCopyright (c) 200 Matthias Clasen <mclasen@redhat.com>\nCopyright (c) 2004 Matthias Clasen <mclasen@redhat.com>\nCopyright (c) 2004, 2005 Miloslav Trmac <mitr@volny.cz>\nCopyright (c) 2014 NICE\nCopyright (c) 2003 Noah Levitt\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2008 Novell, Inc.\nCopyright (c) 2021 Ole Andre Vadla Ravnas\nCopyright (c) 2014 Patrick Griffis\nCopyright (c) 2018-2019 Patrick Griffis, James Westman\nCopyright (c) 1995-1997, 1999 Peter Mattis, Red Hat, Inc.\nCopyright (c) 1995-1997 Peter Mattis, Spencer Kimball and Josh MacDonald\nCopyright (c) 2005 Red Hat\nCopyright (c) 2019 Red Hat, Inc.\nCopyright (c) 2006-2007 Red Hat, Inc. 2009 Benjamin Otte\nCopyright (c) 1999, 2003 Red Hat Software\nCopyright (c) 2014 Ruslan Izhbulatov\nCopyright (c) 2014 Ruslan Izhbulatov <lrn1986@gmail.com>\nCopyright (c) 2007, 2008 Ryan Lortie\nCopyright (c) 2009-10 Sam Thursfield\nCopyright (c) 1999, 2000 Scott Wimer\nCopyright (c) 2007 Sebastian Droge\nCopyright (c) 2003 Sebastian Wilhelmi\nCopyright (c) 2000 Sebastian Wilhelmi University of Karlsruhe\nCopyright (c) 2004 Sharif FarsiWeb, Inc\nCopyright (c) 2002, 2004, 2005, 2006 Sharif FarsiWeb, Inc. Roozbeh Pournader <roozbeh@farsiweb.info> , 2002, 2004, 2006. Hamed Malek <hamed@farsiweb.info> , 2005. Meelad Zakaria <meelad@farsiweb.info> , 2006 Arash Mousavi <mousavi.arash@gmail.com> , 2011\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007 Soeren Sandmann (sandmann@daimi.au.dk)\nCopyright (c) 2011 Stef Walter <stefw@collabora.co.uk>\nCopyright (c) 2007 Sven Herzberg\nCopyright (c) 2012 Swecha telugu localisation Team <localization@swecha.net>\nCopyright (c) 2005 THE PACKAGE'S\nCopyright (c) 2007 THE glib.HEAD'S\nCopyright (c) 2005 THE glib's\nCopyright (c) 2007-2011 The GNOME Project\nCopyright (c) 2010 Thiago Santos <thiago.sousa.santos@collabora.co.uk>\nCopyright (c) 1997, 1998 Tim Janik\nCopyright (c) 1997-1999, 2000-2001 Tim Janik and Red Hat, Inc.\nCopyright (c) 1998, 1999 Tom Tromey\nCopyright (c) 2018 Tomasz Miasko\nCopyright (c) 1998 Tor Lillqvist\nCopyright (c) 2006 Ubuntu Georgian Translators\nCopyright (c) 1997-2006 University of Cambridge\nCopyright (c) 2011 William Hua\nCopyright (c) 2020 William Manley\nCopyright (c) 2000-2003 Ximian Inc.\nCopyright (c) 2008 by Claus Tondering\nCopyright (c) 1995, 1996, 1997 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2008 codethink\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 glib Distributed\nCopyright (c) 2001-2013, 2020 glib's\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 the\nCopyright (c) 2002-2021 the glib\nCopyright (c) 2006-2008 xine project\nMaithili Copyright (c) 2006 The GNOME Foundation\n(c) 2019, 2021 Red Hat Inc.\n(c) 2008 codethink\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glib2-2.68.4-16.el9_6.2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glib2@2.68.4-16.el9_6.2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fs9D_ylqDeRN1Sd0NJcqvjaWmjgK-nuuQ9QryK2yQdw/glib2-~-16.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gtk.org",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glib2",
    "versionInfo" : "2.68.4-16.el9_6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glibc-common-2.34-168.el9-6.20-arch-x86-64",
    "copyrightText" : "Copyright (c) Free Software Foundation, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glibc-common-2.34-168.el9_6.20.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glibc-common@2.34-168.el9_6.20?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHcIazwidMjkT1UE4eDmm90AwkrpEeaFnkLlB8d8wC8/glibc-~-168.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/glibc/",
    "licenseConcluded" : "(BSD-3-Clause AND GFDL-1.1-or-later AND ISC AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glibc-common",
    "versionInfo" : "2.34-168.el9_6.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glibc-minimal-langpack-2.34-168.el9-6.20-arch-x86-64",
    "copyrightText" : "Copyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright 1995 by Tom Lord\nCopyright (c) 1991,1990,1989 Carnegie Mellon University\nCopyright (c) 1992 Eric Young Collected\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2000, Intel Corporation\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 1991 Regents of the University of California\nCopyright (c) 1997-2003 University of Cambridge\nCopyright (c) 1998 WIDE Project\nCopyright (c) 1993 by Sun Microsystems, Inc.\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\ncopyright Eric Young\ncopyright Henry Spencer\ncopyright Stephen L. Moshier\ncopyright Sun Microsystems, Inc.\ncopyright Tom Lord\ncopyright University of Cambridge\ncopyright by the University of Cambridge, England\ncopyright (c) by Craig Metz\ncopyrighted by UC Berkeley\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glibc-minimal-langpack-2.34-168.el9_6.20.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glibc-minimal-langpack@2.34-168.el9_6.20?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHcIazwidMjkT1UE4eDmm90AwkrpEeaFnkLlB8d8wC8/glibc-~-168.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/glibc/",
    "licenseConcluded" : "(BSD-3-Clause AND GFDL-1.1-or-later AND ISC AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glibc-minimal-langpack",
    "versionInfo" : "2.34-168.el9_6.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glibc-2.34-168.el9-6.20-arch-x86-64",
    "copyrightText" : "Copyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright 1995 by Tom Lord\nCopyright (c) 1991,1990,1989 Carnegie Mellon University\nCopyright (c) 1992 Eric Young Collected\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2000, Intel Corporation\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 1991 Regents of the University of California\nCopyright (c) 1997-2003 University of Cambridge\nCopyright (c) 1998 WIDE Project\nCopyright (c) 1993 by Sun Microsystems, Inc.\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\ncopyright Eric Young\ncopyright Henry Spencer\ncopyright Stephen L. Moshier\ncopyright Sun Microsystems, Inc.\ncopyright Tom Lord\ncopyright University of Cambridge\ncopyright by the University of Cambridge, England\ncopyright (c) by Craig Metz\ncopyrighted by UC Berkeley\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glibc-2.34-168.el9_6.20.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glibc@2.34-168.el9_6.20?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHcIazwidMjkT1UE4eDmm90AwkrpEeaFnkLlB8d8wC8/glibc-~-168.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/glibc/",
    "licenseConcluded" : "(BSD-3-Clause AND GFDL-1.1-or-later AND ISC AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glibc",
    "versionInfo" : "2.34-168.el9_6.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gmp-6.2.0-13.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 2001-2003, 2005, 2006\nCopyright 1991, 1996, 1999, 2000, 2007 Free Software Foundation, Inc.\nCopyright 2000-2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2006 Red Hat, Inc. Thomas Woerner <twoerner@redhat.com>\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gmp-6.2.0-13.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gmp@6.2.0-13.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aitFIyIT9oTO0yEo3m1HZdYG38utko3ob1zSMeqaGbg/gmp-~-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gmplib.org/",
    "licenseConcluded" : "LGPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gmp",
    "versionInfo" : "6.2.0-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gnupg2-2.3.3-4.el9-arch-x86-64",
    "copyrightText" : "(C), Dian Zi\nCopr https://dev.gnupg.org/T1646\nCopyright 2002-2008 Amir Szekely\nCopyright 1998-2021 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url https://fsf.org\nCopyright 2007 Ingo Klocker\nCopyright 2016 Intevation GmbH\nCopyright 2002-2009 Joost Verburg\nCopyright 1999-2009 Nullsoft and Contributors\nCopyright 2003 Ramon\nCopyright 2014-2017 The GnuPG Project\nCopyright 1998-2003 The OpenLDAP Foundation\nCopyright 1997-2019 Werner Koch\nCopyright 1998 by The Internet Society\nCopyright (c) 2014 Andreas Schwier <andreas.schwier@cardcontact.de>\nCopyright (c) 2015 Ben McGinnes\nCopyright (c) 2006-2014 Brainspark B.V.\nCopyright (c) 2015-2016 Bundesamt fur Sicherheit\nCopyright (c) 2013 Christian Grothoff\nCopyright (c) 2015 Daiki Ueno\nCopyright (c) 2015 Daniel Kahn Gillmor <dkg@fifthhorseman.net>\nCopyright (c) 2000 Dimitrios Souflis\nCopyright (c) 2013-2014 Dmitry Eremin-Solenikov\nCopyright (c) 2000, 2001 Fabio Fiorina\nCopyright (c) 1989,1991-2017 Free Software Foundation, Inc.\nCopyright (c) 2003, 2004, 2005 Free Software Foundation, Inc. Acest\nCopyright (c) 2012 Free Software Foundation, Inc. Birger Langkjer, <birger.langkjer@image.dk> , 2000. Kenneth Christiansen, kenneth@ripen.dk, 2000. Joe Hansen, <joedalton2@yahoo.dk> , 2012\nCopyright (c) 2001, 2002, 2003, 2005 Free Software Foundation, Inc. Carles Sadurni Anguita <sadurni@jazzfree.com> , 2001. Jordi Mallach <jordi@gnu.org> , 2001, 2002, 2003, 2005. Coses\nCopyright (c) 2002 Free Software Foundation, Inc. Dokianakis Theofanis <madf@hellug.gr> , 2002\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Edmund GRIMLEY\nCopyright (c) 2001, 2002, 2003 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2001, 2002, 2003\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2007 Free Software Foundation, Inc. Janusz A. Urbanowicz <alex@bofh.net.pl> , 1999, 2000, 2001, 2002, 2003-2004 Jakub Bogusz <qboosh@pld-linux.org> , 2003-2020\nCopyright (c) 1998, 1999, 2000, 2001, 2003-2004 Free Software Foundation, Inc. Jouni Hiltunen <jouni.hiltunen@kolumbus.fi> , 2003. Tommi Vainikainen <Tommi.Vainikainen@iki.fi> , 2003-2004. Suomennoksia\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Magda Prochazkova <magda@math.muni.cz> 2001, Roman Pavlik <rp@tns.cz> 2001, 2002, 2003, 2004, 2005. Petr Pisar <petr.pisar@atlas.cz> , 2009, 2010, 2011, 2013, 2014, 2015, 2016. Petr Pisar <petr.pisar@atlas.cz> , 2017, 2018, 2019, 2020\nCopyright (c) 1998, 1999, 2001, 2002 Free Software Foundation, Inc. Marco d'Itri <md@linux.it> , 1998, 1999, 2001, 2002\nCopyright (c) 1998 - 2004 Free Software Foundation, Inc. Michal Majer <mmajer@econ.umb.sk> , 2002 - 2004\nCopyright (c) 2003, 2004, 2020 Free Software Foundation, Inc. Nagy Ferenc Laszlo <nfl@nfllab.com> , 2003, 2004, 2020\nCopyright (c) 1999, 2000, 2001, 2002 Free Software Foundation, Inc. Pedro Morais <morais@kde.org>\nCopyright (c) 1999-2011 Free Software Foundation, Inc. Per Tunedal <info@clipanish.com> , 2004. Daniel Resare <daniel@resare.com> , 1999-2002. Daniel Nylander <po@danielnylander.se> , 2006, 2007, 2008, 2011\nCopyright (c) 1999, 2000, 2001, 2002, 2003, 2004 Free Software Foundation, Inc. Tedi Heriyanto <tedi_h@gmx.net> , 1999, 2000, 2001, 2002, 2003, 2004\nCopyright (c) 2001, 2002 Free Software Foundation, Inc. Toomas Soome <Toomas.Soome@microlink.ee> , 2003\nCopyright (c) 1998, 1999, 2001, 2002 Free Software Foundation, Inc. Urko Lusa <ulusa@euskalnet.net> , 1998, 1999. I've\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2011 Free Software Foundation, Inc. Walter Koch <koch@u32.de> , 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006 Merged\nCopyright (c) 1998, 1999, 2000, 2001, 2003, 2006, 2007, 2009 Free Software Foundation, Inc. 2015 g10 Code GmbH\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1998-2003 Hallvard B. Furuseth\nCopyright (c) 1999-2003 Howard Y.H. Chu\nCopyright (c) 2001-2004 IBM Corporation\nCopyright (c) 2004-2008 Igor Belyi\nCopyright (c) 2016 Ineiev <ineiev@gnu.org>\nCopyright (c) 2012 Intel Corporation\nCopyright (c) 2016 Intevation GmbH\nCopyright (c) 2021 James Bottomley <James.Bottomley@HansenPartnership.com>\nCopyright (c) 2002 John Goerzen\nCopyright (c) 2013-2017 Jussi Kivilinna\nCopyright (c) 2001 Justin Frankel\nCopyright (c) 2002 Klaralvdalens Datakonsult AB\nCopyright (c) 1998-2004 Kurt D. Zeilenga\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 2014, 2015 Martin Albrecht\nCopyright (c) 2006-2007 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 1998-2004 Net Boolean Incorporated\nCopyright (c) 2003 Nikos Mavroyanopoulos\nCopyright (c) 1999-2005 Nullsoft, Inc.\nCopyright (c) 1996-2006 Peter Gutmann, Matt Thomlinson and Blake Coverett\nCopyright (c) 1996-1999 Peter Gutmann, Paul Kendall, and Chris Wedgwood\nCopyright (c) 1992-1996 Regents of the University of Michigan\nCopyright (c) 1999 Robert Bihlmeyer <robbe@orcus.priv.at>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2014 Serge Voilokov\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 2012 Simon Josefsson, Niels Moller\nCopyright (c) 2014 Stephan Mueller\nCopyright (c) 1999-2003 Symas Corporation\nCopyright (c) 1998 The Internet Society\nCopyright (c) 1998-2004 The OpenLDAP Foundation\nCopyright (c) 1995-1997, 2000-2007 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1991-2020 Unicode, Inc.\nCopyright (c) 1998-2003, 2006, 2009, 2017 Werner\nCopyright (c) 1997 Werner Koch\nCopyright (c) 1999 Werner Koch, Duesseldorf\nCopyright (c) 2008, 2009, 2010, 2012-2016 William Ahern\nCopyright (c) 1994 X Consortium\nCopyright (c) 2004 by Albrecht Dress <albrecht.dress@arcor.de>\nCopyright (c) 1998 by The Internet Society\nCopyright (c) 1995-1997, 2000-2007 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1986 by University of Toronto\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, @c 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2010, 2011 2012, 2013, 2014, 2015 g10 Code GmbH\nCopyright (c) 2005, 2014, 2019-2021 g10 Code GmbH 2017 Intevation GmbH\nCopyright 2003-2021 g10 Code GmbH\nCopyright xa9 2021\nPortions Copyright 1998-2003 Hallvard B. Furuseth\nPortions Copyright 1999-2003 Howard Y.H. Chu\nPortions Copyright 2001-2004 IBM Corporation\nPortions Copyright 1998-2004 Kurt D. Zeilenga\nPortions Copyright 1998-2004 Net Boolean Incorporated\nPortions Copyright 1999-2003 Symas Corporation\nPortions Copyright (c) 1992-1996 Regents of the University of Michigan\nSmenit (N)Imia, (c) Primechanie\n(c) Copyright IBM Corporation 2015 - 2019\n(c) 2002, 2004, 2005, 2006, 2007, 2010 Free Software Foundation, Inc.\n(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 2010-2016 Steve Bennett <steveb@workware.net.au>\n(c) 2013, 2014, 2015 Werner Koch\n(c) 2015, 2016, 2017 g10 Code GmbH.\ncopyright 2002, 2004, 2005, 2006, 2007, 2010 Free Software Foundation\ncopyright 2013, 2014, 2015 Werner\ncopyright (c) 1996-2010 Julian R Seward\n\nAuthors: <dmitri@advantrix.com>; Albrecht Dress; Alexandre Oliva <oliva@dcc.unicamp.br>; Amir Szekely; Andreas Schwier; Armando Ramos <armando@clerval.org>; Ben McGinnes; Brainspark B.V.; Bundesamt fur Sicherheit; Christian Grothoff; Christopher Seiwald seiwald@perforce.com; Christopher Seiwald seiwald@vix.com; Daiki Ueno; Daniel Kahn Gillmor; Dian Zi; Dimitrios Souflis; Dmitry Eremin-Solenikov; Fabio Fiorina; Fran,cois Pinard; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. @url; Free Software Foundation, Inc. Acest; Free Software Foundation, Inc. Birger Langkjer, , Kenneth Christiansen, Joe Hansen; Free Software Foundation, Inc. Carles Sadurni Anguita , Jordi Mallach , Coses; Free Software Foundation, Inc. Dokianakis Theofanis; Free Software Foundation, Inc. Edmund GRIMLEY; Free Software Foundation, Inc. Jacobo Tarrio; Free Software Foundation, Inc. Janusz A. Urbanowicz , Jakub Bogusz; Free Software Foundation, Inc. Jouni Hiltunen , Tommi Vainikainen , Suomennoksia; Free Software Foundation, Inc. Magda Prochazkova Roman Pavlik Petr Pisar , Petr Pisar; Free Software Foundation, Inc. Marco d'Itri; Free Software Foundation, Inc. Michal Majer; Free Software Foundation, Inc. Nagy Ferenc Laszlo; Free Software Foundation, Inc. Pedro Morais; Free Software Foundation, Inc. Per Tunedal , Daniel Resare , Daniel Nylander; Free Software Foundation, Inc. Tedi Heriyanto; Free Software Foundation, Inc. Toomas Soome; Free Software Foundation, Inc. Urko Lusa , I've; Free Software Foundation, Inc. Walter Koch , Merged; Free Software Foundation, Inc. g10 Code GmbH; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hallvard B. Furuseth; Henry Spencer. Not; Howard Y.H. Chu; IBM Corporation; Igor Belyi; Ineiev; Ingo Klocker; Intel Corporation; Intevation GmbH; Jakub Jelen <jjelen@redhat.com>; James Bottomley; Jean-loup Gailly and Mark Adler; Jim Meyering; John Goerzen; Joost Verburg; Jose Carlos Garcia Sogo <jsogo@debian.org>; Julian R Seward; Jussi Kivilinna; Justin Frankel; Klar'alvdalens Datakonsult AB; Klaralvdalens Datakonsult AB; Kurt D. Zeilenga; L. Peter Deutsch; Martin Albrecht; Michael Tokarev, mjt@corpit.ru; Moritz Schulte <moritz@g10code.com>; NTT (Nippon Telegraph and Telephone Corporation); Net Boolean Incorporated; Nikos Mavroyanopoulos; Noah Friedman <friedman@prep.ai.mit.edu>; Nullsoft and Contributors; Nullsoft, Inc.; Per Bothner; Peter Gutmann, Matt Thomlinson and Blake Coverett; Peter Gutmann, Paul Kendall, and Chris Wedgwood; Ramon; Regents of the University of Michigan; Robert Bihlmeyer; Scott James Remnant; Serge Voilokov; Simon Josefsson; Simon Josefsson, Niels Moller; Smenit (N)Imia, Primechanie; Stephan Mueller; Steve Bennett; Steve Bennett <steveb@workware.net.au>; Symas Corporation; The GnuPG Project; The Internet Society; The OpenLDAP Foundation; Timo Schulz. Not; Tom Tromey <tromey@cygnus.com>; Tor Lillqvist <tml@iki.fi>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Ulrich Drepper <drepper@cygnus.com> , Check; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Ulrich Drepper <drepper@gnu.org>; Unicode, Inc.; University of Toronto; Werner; Werner Koch; Werner Koch <wk@gnupg.org>; Werner Koch, Duesseldorf; Werner Koch. Other; William Ahern; X Consortium; disastry@saiknes.lv; exstatus.awk; fygrave@epr0.org; g10 Code GmbH; g10 Code GmbH Intevation GmbH; https://dev.gnupg.org/T1646; me, David; the Free Software Foundation; xa9",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gnupg2-2.3.3-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gtx-nArEby3-PTeX4UQ3LnGiR8-poR6EUWoYQ9c1UpA/gnupg2-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gnupg2@2.3.3-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gnupg2",
    "versionInfo" : "2.3.3-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gnutls-3.8.3-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 2001-2003, 2005, 2006\nCopyright 2009-2012 Aleksey Kravchenko <rhash.admin@gmail.com>\nCopyright 2015-2015 Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nCopyright 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG\nCopyright 1991, 1996, 1999, 2000, 2007 Free Software Foundation, Inc.\nCopyright 2001-2023 Free Software Foundation, Inc., and others\nCopyright 2000-2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2016 Google Inc.\nCopyright 2001-2024 Nikos Mavrogiannopoulos\nCopyright 2017 Red Hat, Inc.\nCopyright (c) 2016 - 2018 ARPA2 project\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2008 Alexander von Gernler\nCopyright (c) 2009 Allan Caffee <allan.caffee@gmail.com>\nCopyright (c) 2002 Andrew McDonald\nCopyright (c) 2002 Andrew McDonald <andrew@mcdonald.org.uk>\nCopyright (c) 2011-2013, Andy Polyakov <appro@openssl.org>\nCopyright (c) 2011 Bardenheuer GmbH, Munich and Bundesdruckerei GmbH, Berlin\nCopyright (c) 2015,2018 Bastien ROUCARIES\nCopyright (c) 2009, Ben Hoyt\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2006-2012, CRYPTOGAMS\nCopyright (c) 2013 Christian Grothoff\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2021 Daiki Ueno\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2012 Dan Winship\nCopyright (c) 2018-2021 David Woodhouse\nCopyright (c) 2020 Dmitry Baryshkov\nCopyright (c) 2013-2015 Dmitry Eremin-Solenikov\nCopyright (c) 2015 Dmity Eremin-Solenikov\nCopyright (c) 2015-2016 Dyalog Ltd.\nCopyright (c) 2015 Enrico M. Crisostomo <enrico.m.crisostomo@gmail.com>\nCopyright (c) 2013 Frank Morgner\nCopyright (c) 2013 Frank Morgner <morgner@informatik.hu-berlin.de>\nCopyright (c) 2012 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2000-2023 Free Software Foundation, and others\nCopyright (c) 2012 INRIA Paris-Rocquencourt\nCopyright (c) 2008-2012 Intel Corporation\nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 2008 Joe Orton <joe@manyfish.co.uk>\nCopyright (c) 2008 John Darrington <j.darrington@elvis.murdoch.edu.au>\nCopyright (c) 2012 KU Leuven\nCopyright (c) 2011 Katholieke Universiteit Leuven\nCopyright (c) 2012 Lucas Fisher lucas.fisher at gmail.com\nCopyright (c) 2000, 2001 Markus Friedl\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2000, 2001, 2008 Niels Moller\nCopyright (c) 2000, 2001, 2002, 2003, 2004 Nikos Mavrogiannopoulos\nCopyright (c) 2015 Nikos Mavrogiannopoulos, Inc.\nCopyright (c) 2012 Nikos Mavrogiannopoulos, Niels Moller\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2001,2002 Paul Sheer\nCopyright (c) 2012, 2016 Philip Withnall\nCopyright (c) 2013 Red Hat\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Simon Josefsson\nCopyright (c) 2017 Stephan Mueller <smueller@chronox.de>\nCopyright (c) 2017 Tim Ruehsen\nCopyright (c) 2017 Tim Ruhsen\nCopyright (c) 2022 Tobias Heider <tobias.heider@canonical.com>\nCopyright (c) 2008 Tom Howard <tomhoward@users.sf.net>\nCopyright (c) 2019 Tom Vrancken (dev@tomvrancken.nl)\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2016 Wrymouth Innovation Ltd\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright (c) 1996,1999 by Internet Software Consortium\nPortions Copyright (c) 2001 Niels Moeller\nPortions Copyright (c) 2002,2003 Nikos Mavrogiannopoulos\n(c) Internal macro Tests\ncopyrighted by the Free Software Foundation\ncopyrights for 2020\n\nAuthors: <Pasi.Eronen@nokia.com>; <appro@openssl.org>; ARPA2 project; Adam Langley <agl@imperialviolet.org>; Adam Langley <alangley@gmail.com>; Adam Sampson; Adrian Bunk <bunk@debian.org>; Ajit <ajeetsinghchahar2@gmail.com>; Ajit Singh <ajeetsinghchahar2@gmail.com>; Albrecht Dress <albrecht.dress@arcor.de>; Aleix Conchillo Flaque <aleix@member.fsf.org>; Aleksei Nikiforov <darktemplar@basealt.ru>; Aleksey Kravchenko; Alessandro Ghedini <alessandro@ghedini.me>; Alex Gaynor <alex.gaynor@gmail.com>; Alex Monk <krenair@gmail.com>; Alexander Kanavin <alex.kanavin@gmail.com>; Alexander Sosedkin; Alexander Sosedkin <asosedkin@redhat.com>; Alexander von Gernler; Alexandre Oliva <oliva@dcc.unicamp.br>; Alfredo Pironti; Allan Caffee; Alon Bar-Lev <alon.barlev@gmail.com>; Ander Juaristi; Ander Juaristi <a@juaristi.eus>; Ander Juaristi, Nikos Mavrogiannopoulos; Anderson Toshiyuki Sasaki <ansasaki@redhat.com>; Andreas Metzler <ametzler@debian.org>; Andreas Metzler <ametzler@downhill.at.eu.org>; Andreas Schneider <asn@samba.org>; Andreas Schwab <schwab@suse.de>; Andrew McDonald; Andrew W. Nosenko <andrew.w.nosenko@gmail.com>; Andy Polyakov; Andy Polyakov <appro@fy.chalmers.se>; Arfrever Frehtes Taifersar Arahesis <arfrever.fta@gmail.com>; Armin Burgmeier <armin@arbur.net>; Asad Mehmood <asad78611@googlemail.com>; Assaf Gordon <assafgordon@gmail.com>; Attila Molnar <attilamolnar@hush.com>; Avinash Sonawane <rootkea@gmail.com>; Bardenheuer GmbH, Munich and Bundesdruckerei GmbH, Berlin; Bas van Schaik <gitlab.com@s.traiectum.net>; Bastien ROUCARIES; Ben Hoyt; Benjamin Herrenschmidt <benh@kernel.crashing.org>; Bernhard M. Wiedemann <bwiedemann@suse.de>; Bjoern Jacke <bjacke@samba.org>; Bjorn Christensen <bhc@insight.dk>; Bjorn Jacke <bjacke@samba.org>; Bootstrap Authors; Brad Hards <bradh@frogmouth.net>; Brad Smith <brad@comstyle.com>; Brendan Doherty <brendand@gentrack.com>; Brian Wickman <bwickman97@outlook.com>; Bruno Haible; Bruno Haible <bruno@clisp.org>; CRYPTOGAMS; Christian Grothoff; Christian Grothoff <christian@grothoff.org>; Christian Persch; Christopher Baines <mail@cbaines.net>; Clemens Lang <cllang@redhat.com>; Colin Walters <walters@verbum.org>; Craig Gallek <cgallek@gmail.com>; Daiki Ueno; Daiki Ueno <ueno@gnu.org>; Daiki Ueno, Ander Juaristi; Dan Nicholson; Dan Winship; Daniel Black <dragonheart@gentoo.org>; Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net>; Daniel Kahn Gillmor <dkg@fifthhorseman.net>; Daniel Lenski <dlenski@gmail.com>; Daniel NebuchadnezzaR Dehennin <nebuchadnezzar@asgardr.info>; Daniel P. Berrange <berrange@redhat.com>; Daniel Schaefer <git@danielschaefer.me>; Daniel Stenberg <daniel@haxx.se>; Darshit Shah; David Caldwell <david@porkrind.org>; David Harvey and Torbjorn Granlund; David MacKenzie <djm@gnu.ai.mit.edu>; David Walker <david.walker@vcatechnology.com>; David Weber <dave@veryflatcat.com>; David Woodhouse; David Woodhouse <dwmw2@infradead.org>; David Woodhouse <dwmw2@infradead.org> , Nikos Mavrogiannopoulos, Daiki Ueno; Dennis Vshivkov <walrus@amur.ru>; Dick Karpinski (dick@cca.ucsf.edu); Dimitri John Ledkov <xnox@ubuntu.com>; Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>; Dimitris Apostolou <dimitris.apostolou@icloud.com>; Dmitriy Tsvettsikh <dmitrycvet@gmail.com>; Dmitry Baryshkov; Dmitry Baryshkov <dbaryshkov@gmail.com>; Dmitry Eremin-Solenikov; Dmity Eremin-Solenikov; Dosenpfand <m@sad.bz>; Doug Nazar <nazard@nazar.ca>; Douglas E. Engert <deengert@anl.gov>; Dyalog Ltd.; Eduardo Villanueva Che; Edward Stangler <estangler@bradmark.com>; Eli Zaretskii <eliz@gnu.org>; Elias Gustafsson <elias.skondal@gmail.com>; Elta Koepp <alexi_2019@protonmail.com>; Elta Koepp <elta_koepp@gmail.com>; Emile van Bergen <emile@e-advies.nl>; Enrico M. Crisostomo; Eric Blake; Eric Blake <ebb9@byu.net>; Eric Blake <eblake@redhat.com>; Eric Blake and Bruno Haible; Eric Blake, Paul Eggert, and Jim Meyering; Evgeny Grin <k2k@narod.ru>; Evgeny Legerov <admin@gleg.net>; Fabian Fagerholm <fabbe@paniq.net>; Fabrice Fontaine <fontaine.fabrice@gmail.com>; Fiona Klute <fiona.klute@gmx.de>; Florian Pelz <pelzflorian@pelzflorian.de>; Fran,cois Pinard; Frank Morgner; Frantisek Krenzelok <krenzelok.frantisek@gmail.com>; Fratnisek Krenzelok; Fraunhofer SIT sponsored by Infineon Technologies AG; Frediano Ziglio <freddy77@gmail.com>; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. @uref; Free Software Foundation, Inc., and others; Free Software Foundation, and others; Fridolin Pokorny Nikos Mavrogiannopoulos; GNU Texinfo; Gary V. Vaughan; Gerrit P. Haase <gp@familiehaase.de>; Giuseppe Scrivano <gscrivano@gnu.org>; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gregor Jasny <gjasny@googlemail.com>; Gunther Deschner <gd@samba.org>; Gustavo Zacarias <gustavo@zacarias.com.ar>; Hans Leidekker <hans@codeweavers.com>; Howard Chu <hyc@symas.com>; Hubert Kario <hkario@redhat.com>; Hugo Beauzee-Luyssen <hugo@beauzee.fr>; INRIA Paris-Rocquencourt; Ian Peters <itp@ximian.com>; Ilya V. Matveychikov <i.matveychikov@securitycode.ru>; Intel Corporation; Internal macro Tests; Internet Software Consortium; Jaak Ristioja <jaak.ristioja@cyber.ee>; Jakub Jelen <jjelen@redhat.com>; James Bottomley <James.Bottomley@HansenPartnership.com>; James Henstridge Damon Chaplin Stefan Sauer; James Henstridge Stefan Sauer; Jan Palus <jpalus@fastmail.com>; Jan Vcelak <jan.vcelak@nic.cz>; Jay Foad <jay.foad@gmail.com>; Jean-Francois Bignolles <bignolle@ecoledoc.ibp.fr>; Jeff Cai <jeff.cai@sun.com>; Jim Blandy (jimb@ai.mit.edu); Jim Meyering; Jim Meyering <meyering@ascend.com>; Jim Meyering and Bruno Haible; Jim Meyering and Paul Eggert; Jiri Klimes <jklimes@redhat.com>; Joe Orton; Joe Orton <joe@manyfish.co.uk>; John Amanatides (amana@sasquatch.cs.yorku.ca); John Brooks <special@dereferenced.net>; John Darrington; JonasZhou <JonasZhou@zhaoxin.com>; Jonathan Bastien-Filiatrault; Jonathan Bastien-Filiatrault Nikos Mavrogiannopoulos; Jonathan Nieder <jrnieder@gmail.com>; Jose E. Marchesi <jemarch@gnu.org>; Jouni Malinen <jkmaline@cc.hut.fi>; Jussi Kukkonen <jussi.kukkonen@intel.com>; KU Leuven; Karl Tarbe <karl.tarbe@cyber.ee>; Karsten Ohme <k_o_@users.sourceforge.net>; Kataja Kai <kai.kataja@op.fi>; Katholieke Universiteit Leuven; Ke Zhao <kzhao@redhat.com>; Kenneth J. Miller <ken@miller.ec>; Kevin Cernekee <cernekee@gmail.com>; Kevin Quick <quick@sparq.org>; Kris Karas <ktk@enterprise.bidmc.harvard.edu>; Kukosa, Tomas <tomas.kukosa@siemens-enterprise.com>; LaMont Jones <lamont@smallone.fc.hp.com>; Laurence Withers <l@lwithers.me.uk>; Lei Maohui <leimaohui@cn.fujitsu.com>; Leonardo Bras <leobras.c@gmail.com>; Lili Quan <13132239506@163.com>; Lucas Fisher lucas.fisher at gmail.com; Ludovic Courtes <ludo@gnu.org>; Ludovic Courtes <ludovic.courtes@laas.fr>; Lukasz Stelmach <stlman@poczta.fm>; Luke Dashjr <luke-jr+git@utopios.org>; Maciej S. Szmigiero; Maks Naumov <maksqwe1@ukr.net>; Marc F. Clemente <marc@mclemente.net>; Marcin Cieslak <saper@saper.info>; Marcin Garski <mgarski@post.pl>; Marga Manterola <marga@google.com>; Mario Lenz <mario.lenz@gmx.net>; Marius Bakke <mbakke@fastmail.com>; Mark Harfouche <mark.harfouche@gmail.com>; Markus Friedl; Martijn Koster <mak@greenhills.co.uk>; Martin Lambers <marlam@marlam.de>; Martin Lambers <marlam@web.de>; Martin Schwidefsky; Martin Storsjo; Martin Storsjo <martin@martin.st>; Martin Sucha <anty.sk+git@gmail.com>; Martin Ukrop <mukrop@redhat.com>; Martin von Gagern <Martin.vGagern@gmx.net>; Marvin Scholz <epirat07@gmail.com>; Massimo Gaspari <massimo.gaspari@alice.it>; Matt Turner <mattst88@gmail.com>; Matthias Koenig <mkoenig@suse.de>; Matthias Scheler <tron@NetBSD.org>; Matthias Urlichs <smurf@smurf.noris.de>; Matthias Wimmer <m@tthias.eu>; Matthias-Christian Ott <ott@mirix.org>; Max Kellermann <max@duempel.org>; Maya Rashish <coypu@sdf.org>; Michael C. Vergallen <mvergall@telenet.be>; Michael Catanzaro <mcatanzaro@gnome.org>; Michael Catanzaro <mcatanzaro@igalia.com>; Michael Catanzaro <mcatanzaro@redhat.com>; Michael Kiefer <Michael-Kiefer@web.de>; Michael Meskes <meskes@debian.org>; Michael Weiser <michael.weiser@gmx.de>; Michael Weiser <michael@weiser.dinsnail.net>; Michael Zucchi; Michael.Ringe@aachen.utimaco.de; Mike Castle <dalgoda@ix.netcom.com>; Miroslav Kratochvil <exa.exa@gmail.com>; Miroslav Lichvar <mlichvar@redhat.com>; Mitsubishi and NTT.; Mohit Agarwal; Nate Nielsen <nielsen-list@memberwebs.com>; Nia Alarie; Nick Child <nick.child@ibm.com>; Nicolas Dufresne <nicolas.dufresne@collabora.com>; Niels Moeller; Niels Moller; Niels Moller <nisse@lysator.liu.se>; Nikolaos Chatzikonstantinou <nchatz314@gmail.com>; Nikolay Sivov <nsivov@codeweavers.com>; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos <nmav@gnutls.org>; Nikos Mavrogiannopoulos <nmav@redhat.com>; Nikos Mavrogiannopoulos, Ander Juaristi; Nikos Mavrogiannopoulos, Anderson Toshiyuki Sasaki; Nikos Mavrogiannopoulos, Bjorn Christensen; Nikos Mavrogiannopoulos, Daiki Ueno, Martin Ukrop; Nikos Mavrogiannopoulos, Inc.; Nikos Mavrogiannopoulos, Niels Moller; Nikos Mavrogiannopoulos, Simon Josefsson; Nikos Mavrogiannopoulos, Simon Josefsson, Howard Chu; Nikos Mavrogiannopoulos, Stef Walter; Nikos Mavroyanopoulos; Nikos Mavroyanopoulos, Simon Josefsson; Norbert Pocs <npocs@redhat.com>; Ondrej Moris <omoris@redhat.com>; Ondrej Moris, Zoltan Fridrich; Oskar Liljeblad; Oskar Liljeblad <oskar@osk.mine.nu>; Paolo Bonzini; Paolo Borelli; Patrik Hornik <patrik@hornik.sk>; Paul Eggert; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Paul Eggert and Bruno Haible; Paul Eggert and Jim Meyering; Paul Eggert and Martin Lambers; Paul Eggert, Bruno Haible, Derek Price; Paul Eggert, Bruno Haible, Sam Steingold, Peter Burwood; Paul Eggert, Bruno Haible, and Jim Meyering; Paul Millar <p.millar@physics.gla.ac.uk>; Paul Sheer; Paul Vixie; Paul Zimmermann (zimmermann@inria.inria.fr); Pavlov Konstantin <thresh@altlinux.ru>; Pedro Monreal <pmgdeb@gmail.com>; Per Bothner; Peter Hendrickson <pdh@wiredyne.com>; Peter Leitmann <pleitman@redhat.com>; Peter Rosin <peda@lysator.liu.se>; Peter Wu <peter@lekensteyn.nl>; Petr Pavlu <petr.pavlu@suse.com>; Philip Blundell <pjb27@cam.ac.uk>; Philip Withnall; Philippe Proulx <eeppeliteloop@gmail.com>; Philippe Widmer <pw@earthwave.ch>; Pierre Ossman <ossman@cendio.se>; Pierre-Joseph Gailly (pjg@sunbim.be); Pravek Sharma <sharmapravek@gmail.com>; R. Andrew Bailey <bailey@akamai.com>; Radostin Stoyanov <radostin@redhat.com>; Rainer Gerhards <rgerhards@gmail.com>; Red Hat; Red Hat, Inc.; Remi Olivier <remi_8@hotmail.com>; Rical Jasan <ricaljasan@pacific.net>; Ricardo M. Correia <rcorreia@wizy.org>; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Costa <richard.costa@suse.com>; Richard Stallman; Richard W.M. Jones <rjones@redhat.com>; Robert Scheck <robert@fedoraproject.org>; Roberto Newmon <robertonewmon@fake-box.com>; Robey Pointer <robey@danger.com>; Roland McGrath (roland@ai.mit.edu); Rolf Eike Beer <eike@sf-mail.de>; Romain Francoise <romain@orebokech.com>; Roman Bogorodskiy <novel@FreeBSD.org>; Ross Nicholson <phunkyfish@gmail.com>; Rowan Thorpe <rowan@rowanthorpe.com>; Rupert Kittinger <r.kittinger@efkon.com>; Ruslan N. Marchenko <me@ruff.mobi>; Sadie Powell; Sahana Prasad <sahana@redhat.com>; Sam James <sam@gentoo.org>; Sam Varshavchik <mrsam@courier-mta.com>; Samuel Thibault <samuel.thibault@ens-lyon.org>; Sascha Ziemann <sascha.ziemann@secunet.com>; Saurav Babu <saurav.babu@samsung.com>; Scott James Remnant; Sebastian Droge <sebastian@centricular.com>; Seppo Yli-Olli <seppo.yliolli@gmail.com>; Sergey Poznyakoff <gray@Mirddin.farlep.net>; Simo Sorce <simo@redhat.com>; Simon Josefsson; Simon Josefsson <jas@josefsson.org>; Simon Josefsson <simon@josefsson.org>; Simon Josefsson and Bruno Haible; Simon Josefsson and Nikos Mavrogiannopoulos; Simon Josefsson and Paul Eggert; Simon Josefsson and Yoann Vandoorselaere <yoann@prelude-ids.org>; Simon Josefsson, Bruno Haible; Simon Josefsson, Nikos Mavrogiannopoulos; Simon Josefsson, Nikos Mavrogiannopoulos, Martin Ukrop; Simon Posnjak <simon.posnjak@cetrtapot.si>; Simon South <simon@simonsouth.net>; Stanislav Zidek <szidek@redhat.com>; Stefan Berger <stefanb@linux.ibm.com>; Stefan Buhler <stbuehler@web.de>; Stefan Kangas <stefankangas@gmail.com>; Stefan Sorensen <stefan.sorensen@spectralink.com>; Steffen Jaeckel <jaeckel-floss@eyet-services.de>; Stephan Mueller; Stephan Mueller <smueller@chronox.de>; Stephane LOEUILLET <stephane.loeuillet@tiscali.fr>; Stephen Paul; Steve Dispensa; Steve Lhomme <robux4@ycbcr.xyz>; Steven M. Bellovin <smb@research.att.com>; Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com>; Thierry Quemerais <tquemerais@awox.com>; Thomas Klausner <tk@giga.or.at>; Thomas Klausner <wiz@NetBSD.org>; Thomas Klute <thomas2.klute@uni-dortmund.de>; Tim Kosse <tim.kosse@filezilla-project.org>; Tim Ruehsen; Tim Ruhsen; Tim Ruhsen <tim.ruehsen@gmx.de>; Tobias Heider; Tobias Heider <tobias.heider@canonical.com>; Tom Carroll <incentivedesign@gmail.com>; Tom G. Christensen <tgc@jupiterrise.com>; Tom Howard; Tom Tromey <tromey@cygnus.com>; Tom Vrancken; Tom Vrancken (dev@tomvrancken.nl); Tom Vrancken <dev@tomvrancken.nl>; Tomas Hoger <thoger@redhat.com>; Tomas Mraz <tmraz@fedoraproject.org>; Torbjorn Granlund (tege@sics.se); Tristan Hill <stan@saticed.me.uk>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Ulrich Drepper <drepper@cygnus.com> , Check; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Vitezslav Cizek <vcizek@suse.com>; Werner Koch <wk@gnupg.org>; Wilbur Wetterquarz <freaxmate@protonmail.com>; Wrymouth Innovation Ltd; X Consortium; Xan Lopez; Yoann Vandoorselaere <yoann@prelude-ids.org>; Yongye Zhu <zyy1102000@gmail.com>; Yoshisato YANAGISAWA <yanagisawa@csg.is.titech.ac.jp>; Yuriy M. Kaminskiy <yumkam@gmail.com>; Yutaka OIWA <y.oiwa@aist.go.jp>; Zoltan Fridrich; Zoltan Fridrich <zfridric@redhat.com>; epl@unimelb.edu.au; ihsinme <ihsinme@gmail.com>; librik@panix.com; morozov@eags.ru; nia <nia@NetBSD.org>; nix@esperi.demon.co.uk; peonix <ajeetsinghchahar2@gmail.com>; raspa0 <raspa0@protonmail.com>; rrivers2 <5981058-rrivers2@users.noreply.gitlab.com>; sskaje <sskaje@gmail.com>; the Free Software Foundation; xuraoqing <609179072@qq.com>; xuraoqing <xuraoqing@huawei.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gnutls-3.8.3-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XJfTnnXA63vLc6FmyCxx1wv_Zq1YNiLn_bbPA02k5Ms/gnutls-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gnutls@3.8.3-6.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnutls.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gnutls",
    "versionInfo" : "3.8.3-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gobject-introspection-1.68.0-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 2009 Johan Dahlin\nCopyright (c) 2010 Andreas Rottmann <a.rottmann@gmx.at>\nCopyright (c) 2018 Christoph Reiter\nCopyright (c) 2014 Chun-wei Fan\nCopyright (c) 2008 Colin Walters\nCopyright (c) 2008 Colin Walters <walters@verbum.org>\nCopyright (c) 2012-2013 Dieter Verfaillie <dieterv@optionexplicit.be>\nCopyright (c) 2011-2016 Dominique Leuenberger <dimstar@opensuse.org>\nCopyright (c) 1991 Free Software Foundation, Inc.\nCopyright (c) 2013 Hat, Inc.\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2007 Johan Dahlin\nCopyright (c) 2008 Johan Dahlin <johan@gnome.org>\nCopyright (c) 2007 Jurg Billeter\nCopyright (c) 2007-2008 Jurg Billeter <j@bitron.ch>\nCopyright (c) 2005 Matthias Clasen\nCopyright (c) 2008 Philip Van Hoof\nCopyright (c) 2008 Red Hat, Inc\nCopyright (c) 1997 Sandro Sigala <ssigala@globalnet.it>\nCopyright (c) 2011 Shaun McCance\nCopyright (c) 2010 Zach Goldberg\n(c) 2003, 2004, 2005 Thomas Vander Stichele",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gobject-introspection-1.68.0-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rNXjVYohfwKkV5Twxs_90gnDY2h3B3l9Iz1eq19TtL0/gobject-introspection-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gobject-introspection@1.68.0-11.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/GObjectIntrospection",
    "licenseConcluded" : "(MIT AND GPL-2.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gobject-introspection",
    "versionInfo" : "1.68.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-google-guice-4.2.3-10.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2024 Google, Inc.\nCopyright 2006-2008 The Apache Software Foundation\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2006 Google Inc. Bundle-Description Guice\nCopyright (c) 2006 Google Inc. https://github.com/google/guice",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/g/google-guice-4.2.3-10.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ntaBTx3iVQ2kMoeq7bdtc0HNMA1hVFcq-KYauQnYlKg/google-guice-~-10.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/google-guice@4.2.3-10.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guice",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/google-guice",
    "versionInfo" : "4.2.3-10.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gpgme-1.15.1-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url https://fsf.org\nCopyright GPL BuildRoot\nCopyright (c) 2008 Alan W. Irwin\nCopyright (c) 2008 Andrew Collier\nCopyright (c) 2015, 2018 Ben McGinnes\nCopyright (c) 2015 Ben McGinnes <ben@adversary.org>\nCopyright (c) 2018 Ben McGinnes <ben@gnupg.org>\nCopyright (c) 2015 Benjamin D. McGinnes\nCopyright (c) 2015 Benjamin D. McGinnes <ben@adversary.org>\nCopyright (c) 2008 Benjamin Kosnik <bkoz@redhat.com>\nCopyright (c) 2008 Bernhard Reiter <bernhard@intevation.de>\nCopyright (c) 2015, 2016, 2018 Bundesamt fur Sicherheit\nCopyright (c) 2016 Bundesamt fur Sicherheit in der Informationstechnik Software\nCopyright (c) 2014 Code GmbH\nCopyright (c) 2013 Daniel Mullner <muellner@math.stanford.edu>\nCopyright (c) 2009 Dave Gamble\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2014, 2015 Google Inc.\nCopyright (c) 2009 Horst Knorr <hk_classes@knoda.org>\nCopyright (c) 2004-2008 Igor Belyi\nCopyright (c) 2004 Igor Belyi <belyi@users.sourceforge.net>\nCopyright (c) 2016 Intevation GmbH\nCopyright (c) 2002 John Goerzen\nCopyright (c) 2002 John Goerzen <jgoerzen@complete.org>\nCopyright (c) 2002 Klaralvdalens Datakonsult AB\nCopyright (c) 2003,2004 Klaralvdalens Datakonsult AB 2016 Bundesamt fur Sicherheit in der Informationstechnik Software\nCopyright (c) 2003, 2007 Klaralvdalens Datakonsult AB 2017, 2018 Intevation GmbH\nCopyright (c) 2009 Klaralvdalens Datakonsult AB <info@kdab.com>\nCopyright (c) 2004 Klaravdalens Datakonsult AB\nCopyright (c) 2014, 2015 Martin Albrecht\nCopyright (c) 2014, 2015 Martin Albrecht <martinralbrecht@googlemail.com>\nCopyright (c) 1999 Masanao Izumo <iz@onicos.co.jp>\nCopyright (c) 2009 Matteo Settenvini <matteo@member.fsf.org>\nCopyright (c) 2015 Moritz Klammler <moritz@klammler.eu>\nCopyright (c) 2011 Murray Cumming <murrayc@openismus.com>\nCopyright (c) 2015 Paul Norman <penorman@mac.com>\nCopyright (c) 2008 Rafael Laboissiere <rafael@laboissiere.net>\nCopyright (c) 2013 Roy Stogner <roystgnr@ices.utexas.edu>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2008 Sebastian Huber <sebastian-huber@web.de>\nCopyright (c) The GnuPG Project\nCopyright (c) The Internet Society (1998)\nCopyright (c) 2000 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Zack Weinberg <zackw@panix.com>\nCopyright (c) 2016 by Bundesamt fur Sicherheit\nCopyright (c) 2001-2021 g10 Code GmbH\nCopyright (c) 2020 g10 Code GmbH Software\nCopyright 2001-2021 g10 Code GmbH\ncopyright 2018, The GnuPG",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gpgme-1.15.1-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-KjqHzwJiQaYbdMabtfu8NNHhlB69MIxSEN4qaoi3Zk/gpgme-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gpgme@1.15.1-6.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gnupg.org/related_software/gpgme/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gpgme",
    "versionInfo" : "1.15.1-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-graphite2-1.3.14-9.el9-arch-x86-64",
    "copyrightText" : "Copyright, Family, Subfamily, UniqueSubfamily, Fullname, Version, PostScript\nCopyright 2004-2010, Marcus Holland-Moritz <mhx-cpan@gmx.net> 2001, Paul Marquess <pmqs@cpan.org>\nCopyright 2010 Martin Hosken <martin_hosken@sil.org>\nCopyright 2010 Martin Hosken <martin_hosken@sil.org> 2011 Rene Engelhard <rene@debian.org>\nCopyright 2010, SIL International\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1995-2006 International Business Machines Corporation and others\nCopyright (c) 2004 Keith Stribley\nCopyright (c) 1999, Kenneth Albanowski\nCopyright (c) 2004-2009, Marcus Holland-Moritz\nCopyright (c) 2001, Paul Marquess\nCopyright (c) 2010-2011, SIL International\nCopyright (c) 2011 Simon Cozens\nCopyright (c) 2011 Simon Cozens <simon@cpan.org>\nCopyright (c) 2005 www.thanlwinsoft.org\nCopyright (c) 2005 www.thanlwinsoft.org, SIL International Responsibility Keith Stribley, Martin Hosken\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/graphite2-1.3.14-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Is_6xbDWNrJsQnWXj0fIe6xa7EnPeqAu-uG3_lig3Tw/graphite2-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/graphite2@1.3.14-9.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://sourceforge.net/projects/silgraphite/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/graphite2",
    "versionInfo" : "1.3.14-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-grep-3.6-5.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 1992, 1997-2002, 2004-2020 Free Software Foundation, Inc.\nCopyright (c) 1997-99, 2000, 2001, 2002 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2001, 2002, 2003 Free Software Foundation, Inc. Ales Nyakhaychyk <nab@mail.by> , 2001-2003\nCopyright (c) 1996, 1997, 2019 Free Software Foundation, Inc. Bang Jun-Young <bangjy@geocities.com> , 1996-1997. Seong-ho Cho <darkcircle.0426@gmail.com> , 2019, 2020\nCopyright (c) 2002, 2005 Free Software Foundation, Inc. Eli Zaretskii <eliz@gnu.org> , 2005\nCopyright (c) 2003 Free Software Foundation, Inc. Eugen Hoanca <eugenh@urban-grafx.ro> , 2003. Florentina Musat <florentina.musat.28@gmail.com> , 2020\nCopyright (c) 2004 Free Software Foundation, Inc. Mikel Olasagasti <hey_neken@mundurat.net> , 2004, 2005\nCopyright (c) 2005 Free Software Foundation, Inc. Nilgun Belma Buguner <nilgun@superonline.com> , 2001\nCopyright (c) 2004 Free Software Foundation, Inc. Petri Jooste <rkwjpj@puk.ac.za> , 2004\nCopyright (c) 1998, 2002 Free Software Foundation, Inc. Simos Xenitellis <simos@hellug.gr> , 1998, 2002. Savvas Radevic <vicedar@gmail.com> , 2012\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2020\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\n(c) 1988, 1992-2002, 2004, 2005 Erkin Programma Fondu\n(c) 1988, 1992-2001 Free Software Foundation, Inc.\n(c) Internal macro Tests",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/grep-3.6-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/grep@3.6-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DCmq0Q9y786KsY097rpQYRhd4mQDLn8gvBlpgp3_8M4/grep-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/grep/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/grep",
    "versionInfo" : "3.6-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-guava-31.0.1-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Adomas Paltanavicius; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben L. Titzer; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; David Richter; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Eamonn McManus; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; George van den Driessche; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Jige Yu; Jim McMaster; Johannes Henkel; John Sirois; Jon Donovan; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luiz-Otavio Zorzella; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Cripps; Mike Ward; Miles Barr; Nicholaus Shupe; Nick Kralevich; Nick Piepmeier; Nikita Sidorov; Nishant Thakkar; Omar Darwish; Osvaldo Doederlein; Paul Lindner; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Regina O'Dell; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zach van Schouwen; code CacheBuilder",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/g/guava-31.0.1-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/guava@31.0.1-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q5ZRHWIstf4VVXmFD8FEvvK4imOk38R4sUH2Ly1cT0A/guava-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/guava",
    "versionInfo" : "31.0.1-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-harfbuzz-2.7.4-10.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2006 Behdad Esfahbod\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Codethink Limited\nCopyright (c) 2005 David Turner\nCopyright (c) 1998-2004 David Turner and Werner Lemberg\nCopyright (c) 2018,2019,2020 Ebrahim Byagowi\nCopyright (c) 2019,2020 Facebook, Inc.\nCopyright (c) 2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020 Google, Inc.\nCopyright (c) 2009 Keith Stribley\nCopyright (c) 2009 Martin Hosken and SIL International\nCopyright (c) 2012 Mozilla Foundation\nCopyright (c) 2008,2010 Nokia Corporation and/or its subsidiary(-ies)\nCopyright (c) 2004,2007,2008,2009,2010 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/h/harfbuzz-2.7.4-10.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/harfbuzz@2.7.4-10.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t_0DwWqGSXfcdlB00ef8yLUTLj_2b4WT391k2XX4xCo/harfbuzz-~-10.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://harfbuzz.github.io/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/harfbuzz",
    "versionInfo" : "2.7.4-10.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-hostname-3.23-6.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1997 Bernd Eckenfels\nCopyright (c) 1996 Free Software Foundation, Inc.\nCopyright (c) 2004-2005 Graham Wilson <graham@debian.org>\nCopyright (c) 2009 Michael Meskes <meskes@debian.org>\nCopyright (c) 1997 Peter Tobias <tobias@et-inf.fho-emden.de>\nCopyright (c) 1994-1997 Peter Tobias <tobias@et-inf.fho-emden.de> 2009- Michael Meskes <meskes@debian.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/h/hostname-3.23-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/hostname@3.23-6.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YqB3ACjwDR2pvQnvWrgCKesBw7WU4OzbHewzh7MZ7a0/hostname-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://packages.qa.debian.org/h/hostname.html",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/hostname",
    "versionInfo" : "3.23-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-httpcomponents-client-4.5.13-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 1999-2020 The Apache Software Foundation\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/h/httpcomponents-client-4.5.13-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/httpcomponents-client@4.5.13-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uFxU52_sqnVmULy15yKlHsMUjSRFC4j_Z-q5w_NgD3A/httpcomponents-client-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/httpcomponents-client",
    "versionInfo" : "4.5.13-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-httpcomponents-core-4.4.13-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2005-2020 The Apache Software Foundation\nCopyright 2005-2022 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/h/httpcomponents-core-4.4.13-8.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jvQ9g9BfhrdsETtJ1rp2uWwrVh-VO3VABA06aHuNsB4/httpcomponents-core-~-8.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/httpcomponents-core@4.4.13-8.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/httpcomponents-core",
    "versionInfo" : "4.4.13-8.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-iputils-20210202-15.el9-7-arch-x86-64",
    "copyrightText" : "Copyright 1994-1996 Donald Becker\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000 Hideaki YOSHIFUJI\nCopyright (c) Julien Humbert <julroy67@gmail.com> , 2020-2021\nCopyright (c) 2019 Petr Vorel <petr.vorel@gmail.com>\nCopyright (c) 2018 Petr Vorel <pvorel@suse.cz>\nCopyright (c) Rafael Fontenelle <rafaelff@gnome.org> , 2020-2021\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 2002 USAGI/WIDE Project\nCopyright (c) 2012 YOSHIFUJI Hideaki\nCopyright (c) 1995, 1996, 1997, and 1998 WIDE Project\nCopyright (c) 2020 iputils developers\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/i/iputils-20210202-15.el9_7.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/02P2bXcuqurU2TT1KkQxCYkIddfpyMNM2i6YznMZOS4/iputils-20210202-15.el9_7.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/iputils@20210202-15.el9_7?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/iputils/iputils",
    "licenseConcluded" : "(BSD-4-Clause-UC AND BSD-3-Clause AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/iputils",
    "versionInfo" : "20210202-15.el9_7"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jakarta-annotations-1.3.5-15.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2017, 2019 Contributors to the Eclipse Foundation\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to the Eclipse Foundation; Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Oracle and/or its affiliates; THE ECLIPSE FOUNDATION; the Free Software Foundation; the Jakarta Annotations project",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jakarta-annotations-1.3.5-15.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SxAAUSxlGyHpT7sF6Qufd1DDqwB8LTncwi1YfUISke0/jakarta-annotations-~-15.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jakarta-annotations@1.3.5-15.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/common-annotations-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jakarta-annotations",
    "versionInfo" : "1.3.5-15.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jansi-2.4.0-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-x86-64-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2009-2017 the original",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jansi-2.4.0-7.module+el9.4.0+21292+f76c4bf2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XTgP8TyuJqhf3NwZKUpHHCSBq4mrL-4-6dKqHUt8UWQ/jansi-~-7.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jansi@2.4.0-7.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=x86_64&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://fusesource.github.io/jansi/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jansi",
    "versionInfo" : "2.4.0-7.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-java-17-openjdk-devel-17.0.16.0.8-2.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright (c) 1996 Netscape Communications Corporation\nCopyright (c) 1994, 2020, Oracle and/or its affiliates\nCopyright (c) 2009, Red Hat Inc.\n(c) 2006 VeriSign, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/java-17-openjdk-devel-17.0.16.0.8-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vIgUeDJI78JGylKRenQz1Uwa6LYaVjtZLEM1XFPQIwI/java-17-openjdk-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/java-17-openjdk-devel@17.0.16.0.8-2.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.org/",
    "licenseConcluded" : "(Zlib AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/java-17-openjdk-devel",
    "versionInfo" : "17.0.16.0.8-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-java-17-openjdk-headless-17.0.16.0.8-2.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1994 Hewlett-Packard Co.\nCopyright 2012-2024 JP Aumasson\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright OpenJS Foundation and other contributors, https://openjsf.org\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 1996, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 1996-2003 by Elliot Joel Berk and C. Scott Ananian\nCopyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter\nCopyright (c) 2018-2019 Adobe Inc.\nCopyright (c) 2006-2014 Adobe Systems Incorporated\nCopyright (c) 2013-2015 Alexei Podtelezhnikov\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2009-2013, Attila Szegedi\nCopyright (c) 2006-2025 Behdad Esfahbod\nCopyright (c) 1999-2006 Brian Paul\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Codethink Limited\nCopyright (c) 2021 Collabora Ltd.\nCopyright (c) 2000 Computing Research Labs, New Mexico State University\nCopyright (c) 2018-2025 Cosmin Truta\nCopyright (c) 1999 David Corcoran <corcoran@musclecard.com>\nCopyright (c) 1999 David Turner\nCopyright (c) 1998-2004 David Turner and Werner Lemberg\nCopyright (c) 2018-2020 Ebrahim Byagowi\nCopyright (c) 2016 Elie Roux <elie.roux@telecom-bretagne.eu>\nCopyright (c) 1997 Eric S. Raymond\nCopyright (c) 2019 Facebook, Inc.\nCopyright (c) 2000-2011 France Telecom\nCopyright (c) 2001-2015 Francesco Zappa Nardelli\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2010-2024 Google, Inc.\nCopyright (c) 2002 Graz University of Technology\nCopyright (c) 2012 Grigori Goronzy <greg@kinoho.net>\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 2016 Igalia S.L.\nCopyright (c) 1995-2016 International Business Machines Corporation and others\nCopyright (c) 2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright (c) 2009 Keith Stribley\nCopyright (c) 2018 Khaled Hosny\nCopyright (c) 2002-2009 Ludovic Rousseau <ludovic.rousseau@free.fr>\nCopyright (c) 1998-2025 Marti Maria Saguer\nCopyright (c) 2005 Martin Paljak <martin@paljak.pri.ee>\nCopyright (c) 2022 Matthias Clasen\nCopyright (c) 2015 Mozilla Foundation\nCopyright (c) 1998 National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government\nCopyright (c) OASIS Open 2023\nCopyright (c) 1994, 2024, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2004-2015 Paul R. Holser, Jr\nCopyright (c) 2023 PipeWire authors\nCopyright (c) 2004-2013 Red Hat, Inc.\nCopyright (c) 1995-2025 The\nCopyright (c) 1995-2005 The Cryptix Foundation Limited\nCopyright (c) 2008 - 2018 The Khronos Group Inc.\nCopyright (c) 1982 The Royal Institute, Thai Royal Government\nCopyright (c) 1991-1998, Thomas G. Lane\nCopyright (c) 1998, Thomas G. Lane Caution\nCopyright (c) 1991-2020 Unicode, Inc.\nCopyright (c) 2009 VMware, Inc.\nCopyright (c) 2005 Werner Lemberg\nCopyright (c) 2018-2023 Wim Taymans\nCopyright (c) 2004 World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2012 Zilong Tan (eric.zltan@gmail.com)\nCopyright (c) 2007-2024 by David Turner\nCopyright (c) 2018-2024 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams\nCopyright (c) 1996-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2007-2024 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2024 by Derek Clegg and Michael Toftdal\nCopyright (c) 2013-2024 by Google, Inc.\nCopyright (c) 1996-2024 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2024 by Masatake YAMATO, Red Hat K.K.\nCopyright (c) 2004-2024 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2019-2024 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2024 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2024 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2001, softSurfer (www.softsurfer.com)\nCopyright (c) 2002-2023, the original author or authors\nCopyright jQuery Foundation and other contributors, https://jquery.org\nCopyright property of CompuServe Incorporated\nPortions Copyright Eastman Kodak Company 1991-2003\nat iClick, Inc., software copyright (c) 1999\n(c) 2006 Entrust, Inc.\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net Limited\n(c) 2024 Unicode(r), Inc.\n(c) 2009 by Remo Dentato (rdentato@gmail.com)\ncopyright (c) 1999, IBM Corporation., http://www.ibm.com\ncopyright (c) 2001, Institute\ncopyright (c) 1999-2002, Lotus Development Corporation., http://www.lotus.com\ncopyright (c) 1999, Sun Microsystems., http://www.sun.com\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\n\nAuthors: Adobe Inc.; Adobe Systems Incorporated; Alexei Podtelezhnikov; Andreas Dilger; Attila Szegedi; Behdad Esfahbod; Brian Paul; Chris Wilson; Codethink Limited; Collabora Ltd.; CompuServe Incorporated; Computing Research Labs, New Mexico State University; Cosmin Truta; David Corcoran; David Turner; David Turner and Werner Lemberg; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg, George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Eastman Kodak Company; Ebrahim Byagowi; Elie Roux; Elliot Joel Berk and C. Scott Ananian; Entrust, Inc.; Entrust, Inc. - for; Entrust.net Limited; Eric S. Raymond; Facebook, Inc.; France Telecom; Francesco Zappa Nardelli; Free Software Foundation, Inc.; Glenn Randers-Pehrson; Google, Inc.; Graz University of Technology; Grigori Goronzy; Guy Eric Schalnat, Group 42, Inc.; Hewlett-Packard Co.; IBM Corporation; Igalia S.L.; Institute; International Business Machines Corporation and others; JP Aumasson; Jean-Philippe Aumasson; Jean-loup Gailly and Mark Adler; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Keith Stribley; Khaled Hosny; Lotus Development Corporation; Ludovic Rousseau; Mark Adler; Marti Maria Saguer; Martin Paljak; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K.; Matthias Clasen; Mozilla Foundation; National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; OASIS Open; OpenJS Foundation and other contributors; Oracle and/or its affiliates; Oran Agra and Mickey Gabel; Otto Moerbeek; Ovidiu Predescu (ovidiu@cup.hp.com); Paul R. Holser, Jr; PipeWire authors; Rahul Bhalerao; Red Hat, Inc.; Remo Dentato; Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter; Sun Microsystems; The Apache Software Foundation; The Apache Software Foundation (http://www.apache.org/); The Cryptix Foundation Limited; The FreeType Project; The Khronos Group Inc.; The Open Group; The Royal Institute, Thai Royal Government; Thomas G. Lane; Thomas G. Lane Caution; Unicode(r), Inc.; Unicode, Inc.; VMware, Inc.; Werner Lemberg; Wim Taymans; World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University); Zilong Tan; iClick, Inc., software; jQuery Foundation and other contributors; softSurfer; the Free Software Foundation; the original author or authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/java-17-openjdk-headless-17.0.16.0.8-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vIgUeDJI78JGylKRenQz1Uwa6LYaVjtZLEM1XFPQIwI/java-17-openjdk-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/java-17-openjdk-headless@17.0.16.0.8-2.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.org/",
    "licenseConcluded" : "(Zlib AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/java-17-openjdk-headless",
    "versionInfo" : "17.0.16.0.8-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-java-17-openjdk-17.0.16.0.8-2.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1995-2024 Jean-loup Gailly and Mark Adler GIFVER\nCopyright 1995-2024 Mark Adler\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2018-2025 Cosmin Truta\nCopyright (c) 1998-2002,2004,2006-2018 Glenn Randers-Pehrson\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 1998, Thomas G. Lane Caution",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/java-17-openjdk-17.0.16.0.8-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/java-17-openjdk@17.0.16.0.8-2.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vIgUeDJI78JGylKRenQz1Uwa6LYaVjtZLEM1XFPQIwI/java-17-openjdk-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.org/",
    "licenseConcluded" : "(Zlib AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/java-17-openjdk",
    "versionInfo" : "17.0.16.0.8-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-javapackages-filesystem-6.4.0-1.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2000-2006, JPackage Project\nCopyright (c) 2011-2015 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/javapackages-filesystem-6.4.0-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/javapackages-filesystem@6.4.0-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7ZyLdvTGEEEdsxhaeMsDQECVBKLt-0Vi64v_Yhbe_PA/javapackages-tools-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fedora-java/javapackages",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/javapackages-filesystem",
    "versionInfo" : "6.4.0-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jcl-over-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 1999-2005 The Apache Software Foundation\nCopyright (c) 2000-2009, JPackage Project\nCopyright (c) 2004-2007 QOS.ch\nCopyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2013 QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2004-2017 http://www.qos.ch/> QOS.ch",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jcl-over-slf4j-1.7.32-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jcl-over-slf4j@1.7.32-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_uIIY3rMEEU5n6EVxvtp8r2LGrT0tp2jkkscsQTw-80/slf4j-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jcl-over-slf4j",
    "versionInfo" : "1.7.32-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-json-c-0.14-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 2018 Google Inc.\nCopyright (c) 2016 Alexadru Ardelean\nCopyright (c) 2016 Alexandru Ardelean\nCopyright (c) 2009-2012 Eric Haszlakiewicz\nCopyright (c) 2020 Eric Hawicz\nCopyright (c) 2009 Hewlett-Packard Development Company, L.P.\nCopyright (c) 2004, 2005 Metaparadigm Pte Ltd\nCopyright (c) 2004, 2005 Metaparadigm Pte. Ltd. Michael Clark <michael@metaparadigm.com>\nCopyright (c) 2008-2009 Yahoo! Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/j/json-c-0.14-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/json-c@0.14-11.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D5MXo0Dzmk51MLNqmSuVtBz_CvdTPj8Yc0nlLuNSGMI/json-c-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/json-c/json-c",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/json-c",
    "versionInfo" : "0.14-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-json-glib-1.6.6-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 2010, 2012 Adobe Systems Inc.\nCopyright 2013 Emmanuele Bassi\nCopyright 2021 GNOME Foundation\nCopyright 2020 GNOME Foundation <https://gnome.org>\nCopyright 2009, 2010, 2011, 2012 Intel Corp.\nCopyright 2014 John Hawthorn\nCopyright 2007, 2008 OpenedHand Ltd\nCopyright 2019 Red Hat Inc.\nCopyright 2021 Simon McVittie\nCopyright 2001 Vivake Gupta <v@nano.com>\nCopyright (c) 2015 Collabora Ltd.\nCopyright (c) 2013 Emmanuele Bassi\nCopyright (c) 2012 Emmanuele Bassi <ebassi@gnome.org>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2010 IETF Trust and the persons identified as the document authors\nCopyright (c) 2009 Intel Corp.\nCopyright (c) 2014 John Hawthorn\nCopyright (c) 2010 Luca Bruno <lethalman88@gmail.com>\nCopyright (c) 2008 OpenedHand\nCopyright (c) 2007 OpenedHand Ltd\nCopyright (c) 2012 Seong-ho Cho\nCopyright (c) 2012, Swecha Localisation Team <localization@swecha.net>\nCopyright (c) 2014 THE json-glib'S\nCopyright (c) The Internet Society (2006)\nCopyright (c) 1997, 1998 Tim Janik\nCopyright (c) 2012 json-glib\nCopyright (c) 2012 json-glib authors\nCopyright (c) 2011 json-glib's\nCopyright (c) 2012 json-glib's authors and contributors\nCopyright (c) 2012-2013, 2017-2018 json-glib's developers\nCopyright (c) 2011-2018 the json-glib\n\nAuthors: Adobe Systems Inc.; Collabora Ltd.; Douglas Crockford douglas@crockford.com; Eduardo Lima Mitev <elima@igalia.com>; Emmanuele Bassi; Emmanuele Bassi <ebassi@gnome.org>; Emmanuele Bassi <ebassi@linux.intel.com>; Emmanuele Bassi <ebassi@linux.intel.com> Philip Withnall <philip.withnall@collabora.co.uk>; Emmanuele Bassi <ebassi@openedhand.com>; Evelyn Waugh; Free Software Foundation, Inc.; GNOME Foundation; GTK Development Team; Herman Melville; IETF Trust and the persons identified as the document authors; Intel Corp.; J. R. R. Tolkien; John Hawthorn; Luca Bruno; Luca Bruno <lethalman88@gmail.com>; Luca Bruno <lethalman88@gmail.com> Philip Withnall <philip.withnall@collabora.co.uk>; Nigel Rees; OpenedHand; OpenedHand Ltd; Red Hat Inc.; Red Hat, Inc.; Seong-ho Cho; Simon McVittie; Swecha Localisation Team; THE json-glib'S; The Internet Society; Tim Janik; Vivake Gupta; json-glib; json-glib authors; json-glib's; json-glib's authors and contributors; json-glib's developers; the Ada Initiative and other volunteers (http://geekfeminism.wikia.com/wiki/Conference_anti-harassment/Policy); the Free Software Foundation; the json-glib",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/j/json-glib-1.6.6-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/48T4-n9dXvrGdem-1n2ruiuZauk8t_TRW_8YOKKv7CQ/json-glib-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/json-glib@1.6.6-1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/JsonGlib",
    "licenseConcluded" : "(GPL-3.0-or-later AND Apache-2.0 AND CC0-1.0 AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/json-glib",
    "versionInfo" : "1.6.6-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jsr-305-3.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz\nCopyright (c) 2007-2009, JSR305 expert group",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jsr-305-3.0.2-7.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IogAAQOYbTfw-AU8zFOoC8vm7ea_la4XMQ6nI3qtNvE/jsr-305-~-7.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jsr-305@3.0.2-7.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://code.google.com/p/jsr-305",
    "licenseConcluded" : "(BSD-3-Clause AND CC-BY-2.5)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jsr-305",
    "versionInfo" : "3.0.2-7.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-keyutils-libs-1.6.3-1.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) David Howells (dhowells@redhat.com) 2018\nCopyright (c) 1989, 1991 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2016 Intel Corporation\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) Wang Lei (wang840925@gmail.com) 2010",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/k/keyutils-libs-1.6.3-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/evfF3iAL4C3tZKIKvbza9P7drUXp7XAkXCm52GnwnkM/keyutils-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/keyutils-libs@1.6.3-1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git",
    "licenseConcluded" : "(GPL-2.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/keyutils-libs",
    "versionInfo" : "1.6.3-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-krb5-libs-1.21.1-8.el9-6-arch-x86-64",
    "copyrightText" : "COPYRIGHT (c) 2006,2007 - THE\nCopyright 1985-2023\nCopyright 2006 Andreas Jellinghaus\nCopyright 2004-2008 Apple Inc.\nCopyright 1997, 1998, 1999 Computing Research Labs\nCopyright 1997, 1998, 1999 Computing Research Labs, New Mexico State University\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 1985, 1986, 1989 -1996, 2002, 2011, 2018 Masachusetts Institute of Technology\nCopyright 1990,1991,1992,1993,1994,2000,2004 Massachusetts Institute of Technology\nCopyright 1987, 1988, 1989 Massachusetts Institute of Technology (Student Information Processing Board)\nCopyright 2011 NORDUnet A/S.\nCopyright, OpenVision Technologies, Inc., 1993-1996\nCopyright 2011 Red Hat, Inc.\nCopyright 2007 Secure Endpoints Inc.\nCopyright 1988, Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright 2003 Sun Microsystems, Inc.\nCopyright 1998-2008 The OpenLDAP Foundation\nCopyright 1999-2003 The OpenLDAP Foundation, Redwood City, California, USA.\nCopyright 2000 by Carnegie Mellon University\nCopyright 1995 by Cygnus\nCopyright 1995 by Lehman Brothers, Inc.\nCopyright 1987, 1988, 1989 by Massachusetts Institute of Technology\nCopyright 1993 by OpenVision Technologies, Inc.\nCopyright 1995 by Richard P. Basch\nCopyright 2007 by Secure Endpoints Inc.\nCopyright 1996 by Sun Microsystems, Inc.\nCopyright 1999 by Theodore Ts'o\nCopyright 2000 by Zero-Knowledge Systems, Inc.\nCopyright 1985, 1986, 1987, 1988, 1990 by the Massachusetts Institute\nCopyright 1990,1991,2007,2008 by the Massachusetts Institute of Technology\nCopyright 1997 by the Regents of the University of Michigan\nCopyright 1987 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1995\nCopyright (c) 1984, 1985 Adobe Systems Incorporated\nCopyright (c) 2008 Alexandre Duret-Lutz <adl@gnu.org>\nCopyright (c) 2007 Apple Inc.\nCopyright (c) 1998-2013, Brian Gladman, Worcester, UK.\nCopyright (c) 1994 CyberSAFE Corporation\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 2001, Dr Brian Gladman <brg@gladman.uk.net> , Worcester, UK. par\nCopyright (c) 2000 Dug Song\nCopyright (c) 2000 Dug Song dugsong@UMICH.EDU\nCopyright (c) 1984, 1989-1990, 2000-2015 Free Software Foundation, Inc.\nCopyright (c) 2015-2016, Google Inc.\nCopyright (c) Hewlett-Packard Company 1991\nCopyright (c) 2010, Intel Corporation\nCopyright (c) 2006 Kungliga Tekniska Hogskola\nCopyright (c) 2006 Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1995, 1996, 1997 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2007,2008,2009 Marc Alexander Lehmann\nCopyright (c) 2007,2008,2009 Marc Alexander Lehmann <libev@schmorp.de>\nCopyright (c) 2019 Marc Stevens <marc.stevens@cwi.nl>\nCopyright (c) 1994, 1995 Margo I. Selzer\nCopyright (c) 2005 Marko Kreen\nCopyright (c) 2006 Massachusetts Institute of Technology\nCopyright (c) 1988 Massachusetts Institute of Technology, Student Information Processing Board\nCopyright (c) 2006,2007,2009 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 2002 Naval Research Laboratory\nCopyright (c) 2004-2005, Novell, Inc.\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 2011, PADL Software Pty Ltd.\nCopyright (c) 1990, RSA Data Security, Inc.\nCopyright (c) 1990-2, RSA Data Security, Inc.\nCopyright (c) 2006 Red Hat, Inc.\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1985, 1986, 1988 Richard M. Stallman\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2006 Secure Endpoints Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2004 Sun Microsystems, Inc.\nCopyright (c) 1997, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 1995 The President and Fellows of Harvard University\nCopyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 2000 The Regents of the University of Michigan\nCopyright (c) 1999-2000, The University of Chicago\nCopyright (c) 1998 Todd C. Miller\nCopyright (c) 1998 Todd C. Miller Todd.Miller@courtesan.com\nCopyright (c) 2022 United States Government as represented by the Secretary of the Navy\nCopyright (c) 1994 X Consortium\nCopyright (c) 2017 by Cloudera, Inc.\nCopyright (c) 2000 by Computer Science Laboratory, Rensselaer Polytechnic Institute\nCopyright (c) 1991, 1992, 1994 by Cygnus\nCopyright (c) 1998 by Danilo Almeida\nCopyright (c) 2016 by Red Hat, Inc.\nCopyright (c) 1995, by Sun Microsystems, Inc.\nCopyright (c) 1998 by the FundsXpress, INC.\nCopyright (c) 1985-2023 by the Massachusetts Institute of Technology\nCopyright (c) 1989-1994 by the Massachusetts Institute of Technology, Cambridge, MA, USA.\nCopyright (c) 1985-2023 by the Massachusetts Institute of Technology and its contributors\nCopyright (c) 1985-2012 by the Massachusetts Institute of Technology. par par\nCopyright (c) 1994 by the University of Southern California\nCopyright copy 1991, 1992, 1994\nCopyright copy 1998-2013, Brian Gladman, Worcester, UK.\nCopyright copy 1994 CyberSAFE Corporation\nCopyright copy 2000 Dug Song dugsong@UMICH.EDU\nCopyright copy 2010, Intel Corporation\nCopyright copy 2006 Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden)\nCopyright copy 2006,2007,2009 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright copy 2002 Naval Research Laboratory\nCopyright copy 2004-2005, Novell, Inc.\nCopyright copy 2010, Oracle America, Inc.\nCopyright copy 1990, RSA Data Security, Inc.\nCopyright copy 1990-2, RSA Data Security, Inc.\nCopyright copy 2006 Red Hat, Inc.\nCopyright copy 1983 Regents of the University of California\nCopyright copy 2006 Secure Endpoints Inc.\nCopyright copy 2004 Sun Microsystems, Inc.\nCopyright copy 1997, 1998 The NetBSD Foundation, Inc.\nCopyright copy 1995 The President and Fellows of Harvard University\nCopyright copy 2000 The Regents of the University of Michigan\nCopyright copy 1998 Todd C. Miller Todd.Miller@courtesan.com\nCopyright copy 2022 United States Government as represented by the Secretary of the Navy\nCopyright copy 1998 by the FundsXpress, INC.\nCopyright copy 1985-2023 by the Massachusetts Institute of Technology\nCopyright copy 1985-2023 by the Massachusetts Institute of Technology and its contributors\nCopyright copy 1994 by the University of Southern California\nCopyright (c) 2015-2016 the fiat-crypto authors\nCopyright 2006 g10 Code GmbH\nCopyright 1990,1991 the Massachusetts Institute of Technology\nPortions Copyright (c) 2009 Apple Inc.\nPortions Copyright copy 2009 Apple Inc.\nPortions copyright (c) 2006 Massachusetts Institute of Technology\nPortions copyright copy 2006 Massachusetts Institute of Technology\nRem Copyright 1995 by the Massachusetts Institute of Technology. Rem\n(c) Copyright 2006, Novell, Inc.\n(c) Copyright 1990,1991, 1996, 2008 by the Massachusetts Institute of Technology\n(c) 2011 Emanuele Giaquinta\n(c) 2009-2015 Marc Alexander Lehmann <libecb@schmorp.de>\n(c) N 1994\n(c) 1987 SMI\n(c) Y 1978\ncopyright MIT, Cygnus Support, Novell, OpenVision Technologies, Oracle, Red Hat, Sun Microsystems, FundsXpress, and others\ncopyright MIT, Cygnus Support, OpenVision, Oracle\n\nAuthors: Adobe Systems Incorporated; Alexandre Duret-Lutz; Andreas Jellinghaus; Andreas Schneider <asn@redhat.com>; Andrew Bartlet; Apple Inc.; Barr3y Jaspan, Student; Barry Jaspan; Barry Jaspan of OpenVision Technologies, Inc.; Brian Gladman, Worcester, UK.; Carnegie Mellon University; Cloudera, Inc.; Computer Science Laboratory, Rensselaer Polytechnic Institute; Computing Research Labs; Computing Research Labs, New Mexico State University; CyberSAFE Corporation; Cygnus; Dan Nicholson; Daniel J. Bernstein, <brnstnd@acf10.nyu.edu>; Daniel Richard G.; Danilo Almeida; Dr Brian Gladman , Worcester, UK. par; Dug Song; Dug Song dugsong@UMICH.EDU'; Edward Wang (edward@ucbarpa.berkeley.edu); Emanuele Giaquinta; Frank Dabek; Fred Drake; Free Software Foundation, Inc.; Glen Machin at Sandia; Google Inc.; Hewlett-Packard Company; Intel Corporation; Jeffrey Altman <jaltman@mit.edu>; Jonathan I. Kamens; Joseph D. Touch <touch@isi.edu>; Ken Raeburn; Kungliga Tekniska Hogskola; Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden); Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lehman Brothers, Inc.; MIT, Cygnus Support, Novell, OpenVision Technologies, Oracle, Red Hat, Sun Microsystems, FundsXpress, and others; MIT, Cygnus Support, OpenVision, Oracle; Marc Alexander Lehmann; Marc Stevens; Margo I. Selzer; Marko Kreen; Masachusetts Institute of Technology; Massachusetts Institute of Technology; Massachusetts Institute of Technology (Student Information Processing Board); Massachusetts Institute of Technology, Student Information Processing Board; Matt Crawford <crawdad@fnal.gov>; Matt Crawford crawdad@fnal.gov; N; NORDUnet A/S.; NTT (Nippon Telegraph and Telephone Corporation); Naval Research Laboratory; Noah Friedman <friedman@prep.ai.mit.edu>; Novell, Inc.; OpenVision Technologies, Inc.; Oracle America, Inc.; PADL Software Pty Ltd.; RSA Data Security, Inc.; Red Hat, Inc.; Regents of the University of California; Rem by the Massachusetts Institute of Technology. Rem; Rewritten by Theodore Ts'o; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard M. Stallman; Richard P. Basch; Richard Stallman; SMI; Scott James Remnant; Secure Endpoints Inc.; Steven G. Johnson; Steven M. Bellovin <smb@research.att.com>; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems, Inc.; THE REGENTS OF THE UNIVERSITY OF MICHIGAN; The NetBSD Foundation, Inc.; The OpenLDAP Foundation; The OpenLDAP Foundation, Redwood City, California, USA.; The President and Fellows of Harvard University; The Regents of the University of California; The University of Chicago; Theodore Ts'o; Todd C. Miller; Tom Yu at MIT; United States Government as represented by the Secretary of the Navy; W. David Shambroom <DShambroom@gte.com>; X Consortium; Y; Zero-Knowledge Systems, Inc.; copy; copy Apple Inc.; copy Brian Gladman, Worcester, UK.; copy CyberSAFE Corporation; copy Dug Song dugsong@UMICH.EDU''; copy Intel Corporation; copy Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden); copy Massachusetts Institute of Technology; copy NTT (Nippon Telegraph and Telephone Corporation); copy Naval Research Laboratory; copy Novell, Inc.; copy Oracle America, Inc.; copy RSA Data Security, Inc.; copy Red Hat, Inc.; copy Regents of the University of California; copy Secure Endpoints Inc.; copy Sun Microsystems, Inc.; copy THE REGENTS OF THE UNIVERSITY OF MICHIGAN; copy The NetBSD Foundation, Inc.; copy The President and Fellows of Harvard University; copy Todd C. Miller; copy United States Government as represented by the Secretary of the Navy; copy by the FundsXpress, INC.; copy by the Massachusetts Institute of Technology; copy by the Massachusetts Institute of Technology and its contributors; copy by the University of Southern California; g10 Code GmbH; rharwood@redhat.com; the FundsXpress, INC.; the Massachusetts Institute; the Massachusetts Institute of Technology; the Massachusetts Institute of Technology and its contributors; the Massachusetts Institute of Technology, Cambridge, MA, USA.; the Massachusetts Institute of Technology. par par; the NetBSD Foundation, Inc. and its contributors; the Student Information Processing Board of the Massachusetts Institute of Technology; the University of California, Berkeley; the University of California, Berkeley and its contributors; the University of Michigan's Center; the University of Southern California; the fiat-crypto authors; title About",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/k/krb5-libs-1.21.1-8.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y8l-5TclNXLksjTNzM-YkSDRG5yHRyHriec_IfH_OIc/krb5-~-8.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/krb5-libs@1.21.1-8.el9_6?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://web.mit.edu/kerberos/www/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/krb5-libs",
    "versionInfo" : "1.21.1-8.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-langpacks-core-en-3.0-16.el9-arch-noarch",
    "copyrightText" : "Copyright 2020 Parag Nemade <pnemade@fedoraproject.org>\nCopyright 2016 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/langpacks-core-en-3.0-16.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SHofomMVsXKvj1m2hVJgdHjgHKuPPfDVATZmCeRiFFU/langpacks-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/langpacks-core-en@3.0-16.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/langpacks-core-en",
    "versionInfo" : "3.0-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-langpacks-core-font-en-3.0-16.el9-arch-noarch",
    "copyrightText" : "Copyright 2020 Parag Nemade <pnemade@fedoraproject.org>\nCopyright 2016 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/langpacks-core-font-en-3.0-16.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SHofomMVsXKvj1m2hVJgdHjgHKuPPfDVATZmCeRiFFU/langpacks-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/langpacks-core-font-en@3.0-16.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/langpacks-core-font-en",
    "versionInfo" : "3.0-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-langpacks-en-3.0-16.el9-arch-noarch",
    "copyrightText" : "Copyright 2020 Parag Nemade <pnemade@fedoraproject.org>\nCopyright 2016 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/langpacks-en-3.0-16.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SHofomMVsXKvj1m2hVJgdHjgHKuPPfDVATZmCeRiFFU/langpacks-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/langpacks-en@3.0-16.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/langpacks-en",
    "versionInfo" : "3.0-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libX11-common-1.7.0-11.el9-arch-noarch",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright IBM Corporation 1993\nCopyright 2006 Josh Triplett\nCopyright 1990-1992,1999,2000,2004,2009,2010 Oracle and/or its affiliates\nCopyright 2009 Red Hat, Inc.\nCopyright 1984-1994, 1998 The Open Group\nCopyright 2000 The XFree86 Project, Inc.\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1994, 1996 X Consortium\nCopyright 1999-2000 by Bruno Haible\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991 by Digital Equipment Corporation\nCopyright 1987, 1988, 1990 by Digital Equipment Corporation, Maynard\nCopyright 1987 by Digital Equipment Corporation, Maynard, Massachusetts\nCopyright 1990, 1991, 1992, 1993, 1994 by FUJITSU LIMITED\nCopyright 1991, 1992 by Fuji Xerox Co., Ltd.\nCopyright 1993 by Fujitsu Open Systems Solutions, Inc.\nCopyright 1990, 1991 by OMRON Corporation\nCopyright 1990, 1991 by OMRON Corporation, NTT Software Corporation, and Nippon Telegraph and Telephone Corporation\nCopyright 1992 by Oki Technosystems Laboratory, Inc.\nCopyright 1993, 1994 by Sony Corporation\nCopyright 1993 by SunSoft, Inc.\nCopyright 1992, 1993 by TOSHIBA Corp.\nCopyright 1988 by Wyse Technology, Inc., San Jose, Ca\nCopyright 1993 by the FUJITSU LIMITED\nCopyright 1991 by the Open Software Foundation\nCopyright 1993, 1994 by the Sony Corporation\nCopyright 1993 by the TOSHIBA Corp.\nCopyright (c) 2008 Alexandre Oliva\nCopyright (c) 2008 Andreas Schwab <schwab@suse.de>\nCopyright (c) 1995 David E. Wexelblat\nCopyright (c) 1985, 1986, 1987, 1988, 1989, 1991 Digital Equipment Corporation\nCopyright (c) 1999-2000 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2003-2006,2008 Jamey Sharp, Josh Triplett\nCopyright (c) 2003 Keith Packard\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 2008 Stepan Kasal <kasal@ucw.cz>\nCopyright (c) 2000 The XFree86 Project, Inc.\nCopyright (c) 2007-2009, Troy D. Hanson\nCopyright (c) 1993, 1994 X Consortium\nCopyright (c) 1993, 1995 by Silicon Graphics Computer Systems, Inc.\nPortions Copyright 1990, 1991 by Tektronix, Inc\n(c) 1996\n(c) Copyright 1995 FUJITSU LIMITED\n(c) Copyright 1990 1991 Tektronix, Inc.\n(c) Copyright 1996 by Sebastien Marineau and Holger Veit <marineau@genie.uottawa.ca> <Holger.Veit@gmd.de>\n(c) U3269 CIRCLED",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libX11-common-1.7.0-11.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libX11-common@1.7.0-11.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0dKaWw1mEbLLwlq31JyLkvK0-9k7EiSkWAC4ymQjtYM/libX11-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libX11-common",
    "versionInfo" : "1.7.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libX11-1.7.0-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright IBM Corporation 1993\nCopyright 2006 Josh Triplett\nCopyright 1990-1992,1999,2000,2004,2009,2010 Oracle and/or its affiliates\nCopyright 2009 Red Hat, Inc.\nCopyright 1984-1994, 1998 The Open Group\nCopyright 2000 The XFree86 Project, Inc.\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1994, 1996 X Consortium\nCopyright 1999-2000 by Bruno Haible\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991 by Digital Equipment Corporation\nCopyright 1987, 1988, 1990 by Digital Equipment Corporation, Maynard\nCopyright 1987 by Digital Equipment Corporation, Maynard, Massachusetts\nCopyright 1990, 1991, 1992, 1993, 1994 by FUJITSU LIMITED\nCopyright 1991, 1992 by Fuji Xerox Co., Ltd.\nCopyright 1993 by Fujitsu Open Systems Solutions, Inc.\nCopyright 1990, 1991 by OMRON Corporation\nCopyright 1990, 1991 by OMRON Corporation, NTT Software Corporation, and Nippon Telegraph and Telephone Corporation\nCopyright 1992 by Oki Technosystems Laboratory, Inc.\nCopyright 1993, 1994 by Sony Corporation\nCopyright 1993 by SunSoft, Inc.\nCopyright 1992, 1993 by TOSHIBA Corp.\nCopyright 1988 by Wyse Technology, Inc., San Jose, Ca\nCopyright 1993 by the FUJITSU LIMITED\nCopyright 1991 by the Open Software Foundation\nCopyright 1993, 1994 by the Sony Corporation\nCopyright 1993 by the TOSHIBA Corp.\nCopyright (c) 2008 Alexandre Oliva\nCopyright (c) 2008 Andreas Schwab <schwab@suse.de>\nCopyright (c) 1995 David E. Wexelblat\nCopyright (c) 1985, 1986, 1987, 1988, 1989, 1991 Digital Equipment Corporation\nCopyright (c) 1999-2000 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2003-2006,2008 Jamey Sharp, Josh Triplett\nCopyright (c) 2003 Keith Packard\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 2008 Stepan Kasal <kasal@ucw.cz>\nCopyright (c) 2000 The XFree86 Project, Inc.\nCopyright (c) 2007-2009, Troy D. Hanson\nCopyright (c) 1993, 1994 X Consortium\nCopyright (c) 1993, 1995 by Silicon Graphics Computer Systems, Inc.\nPortions Copyright 1990, 1991 by Tektronix, Inc\n(c) 1996\n(c) Copyright 1995 FUJITSU LIMITED\n(c) Copyright 1990 1991 Tektronix, Inc.\n(c) Copyright 1996 by Sebastien Marineau and Holger Veit <marineau@genie.uottawa.ca> <Holger.Veit@gmd.de>\n(c) U3269 CIRCLED",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libX11-1.7.0-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libX11@1.7.0-11.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0dKaWw1mEbLLwlq31JyLkvK0-9k7EiSkWAC4ymQjtYM/libX11-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libX11",
    "versionInfo" : "1.7.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXau-1.0.9-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1988, 1993, 1994, 1998 The Open Group\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXau-1.0.9-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXau@1.0.9-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mehmalVhS2af8OT3GW7ApozpBxE5fnxV7-4eKveJTNU/libXau-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXau",
    "versionInfo" : "1.0.9-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXcomposite-0.4.5-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2001,2003 Keith Packard\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2006, 2007, Oracle and/or its affiliates\nCopyright (c) 2006 Sun Microsystems\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXcomposite-0.4.5-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXcomposite@0.4.5-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZF0GNoOJpuOj7i8p9Msp2hAgtDCB5uCeiFyW2bUoDxY/libXcomposite-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXcomposite",
    "versionInfo" : "0.4.5-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXext-1.3.4-8.el9-arch-x86-64",
    "copyrightText" : "Copyright Digital Equipment Corporation, 1996\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1992 Network Computing Devices\nCopyright 1986, 1987, 1988, 1989, 1994, 1998 The Open Group\nCopyright 1991,1993 by Digital Equipment Corporation, Maynard, Massachusetts, and Olivetti Research Limited, Cambridge, England\nCopyright 1986, 1987, 1988 by Hewlett-Packard Corporation\nCopyright (c) 1996 Digital Equipment Corporation, Maynard, Massachusetts\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 1994, 1995 Hewlett-Packard Company\nCopyright (c) 1999, 2005, 2006, 2013, Oracle and/or its affiliates\nCopyright (c) 2007-2008 Peter Hutterer\nCopyright (c) 1997 Silicon Graphics, Inc.\nCopyright (c) 1989, 1994 X Consortium\nCopyright (c) 1991 X Consortium, Inc.\nCopyright (c) 1989 X Consortium, Inc. and Digital Equipment Corporation\nCopyright (c) 1994, 1995 X Consortium, Inc. and Hewlett-Packard Company\nCopyright (c) 1992 X Consortium, Inc. and Intergraph Corporation\nCopyright (c) 1993 X Consortium, Inc. and Silicon Graphics, Inc.\nCopyright (c) 1997 by Silicon Graphics Computer Systems, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXext-1.3.4-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXext@1.3.4-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ANPgALhdtcXsw1S_pWKNJiLbJX1OeqfV1PWk89WQK7U/libXext-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXext",
    "versionInfo" : "1.3.4-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXi-1.7.10-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2017 Free Software Foundation, Inc.\nCopyright 2008 Peter Hutterer\nCopyright 2006 Peter Hutterer <peter@cs.unisa.edu.au>\nCopyright 2009 Red Hat, Inc.\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1989, 1998 The Open Group\nCopyright 1989 by Hewlett-Packard Company, Palo Alto, California\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 1989, 1990, 1991, 1992 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXi-1.7.10-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXi@1.7.10-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AfdgMMUmWyyCy_PquQZM96GJXuEFitzdGzQ4FQZ35Po/libXi-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXi",
    "versionInfo" : "1.7.10-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXrender-0.9.10-16.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2013 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2001,2003 Keith Packard\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2000 SuSE, Inc.\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXrender-0.9.10-16.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXrender@0.9.10-16.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-0esFcwEwOGeNXH2v4ZD0SEG5nzYk3HL5XtHjnotyRk/libXrender-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXrender",
    "versionInfo" : "0.9.10-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXtst-1.2.3-16.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2013 Free Software Foundation, Inc.\nCopyright 1995 Network Computing Devices\nCopyright 1994 Network Computing Devices, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright 1992, 1993, 1995, 1998 The Open Group\nCopyright 1990, 1991 by UniSoft Group Limited\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007, Oracle and/or its affiliates\nCopyright (c) 1992, 1994, 1995 X Consortium\nCopyright (c) 1992 by UniSoft Group Ltd.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXtst-1.2.3-16.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXtst@1.2.3-16.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bm9gHfo7WMDQKlUe7ZN-Z1hDsJKeuLfvTpwOcUotC50/libXtst-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXtst",
    "versionInfo" : "1.2.3-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libacl-2.3.1-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc\nCopyright (c) 2007 Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 2000, 2002 Andreas Gruenbacher <agruen@suse.de>\nCopyright (c) 1999, 2000 Andreas Gruenbacher <andreas.gruenbacher@gmail.com>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2000 Free Software Foundation, Inc. Andreas Grunbacher <a.gruenbacher@computer.org> , 2000\nCopyright (c) 2007 Free Software Foundation, Inc. Antonio Trueba <atrueba@users.sourceforge.net> , 2007\nCopyright (c) 2006 Free Software Foundation, Inc. Daniel Nylander <po@danielnylander.se> , 2006\nCopyright (c) 2004 Free Software Foundation, Inc. Jakub Bogusz <qboosh@pld-linux.org> , 2004\nCopyright (c) 2005 Free Software Foundation, Inc. Sylvain Archenault <sylvain.archenault@laposte.net> , 2005\nCopyright (c) 2001-2002 Silicon Graphics, Inc\nCopyright (c) 1994 X Consortium\nCopyright (c) 1999 by Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\n(c) 1999 Andreas Gruenbacher, <a.gruenbacher@computer.org>\n(c) 2000 Andreas Gruenbacher, <andreas.gruenbacher@gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libacl-2.3.1-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libacl@2.3.1-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eHHw6urD7S2wrBS8rgWTL5fSXG6rbdWyE9C8T_i4sOk/acl-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://savannah.nongnu.org/projects/acl",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libacl",
    "versionInfo" : "2.3.1-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libarchive-3.5.3-5.el9-6-arch-x86-64",
    "copyrightText" : "Copyright by Tim Kientzle\nCopyright (c) 2016 Martin Matuska\nCopyright (c) 1989, 1990, 1993 The Regents of the University of California\nCopyright (c) 2003-2009 Tim Kientzle\nCopyright (c) 2003-2018 <author(s)>\n\nAuthors: <author(s)>; Dick Haight; Martin Matuska; The Regents of the University of California; Tim Kientzle",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libarchive-3.5.3-5.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mA4T7rV0MTIKzKfJrtXbhc1B4wJa-XpzSYABjE835Ic/libarchive-~-5.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libarchive@3.5.3-5.el9_6?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.libarchive.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libarchive",
    "versionInfo" : "3.5.3-5.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libassuan-2.5.5-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2001-2013 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url http://fsf.org\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2001-2013 Free Software Foundation, Inc.\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 2000 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001-2021 g10 Code GmbH\nCopyright 2001-2020 g10 Code GmbH",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libassuan-2.5.5-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nazYcywqUzNisYBc0USuWJ2GmwA7FSXwZI2NRhbQt_8/libassuan-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libassuan@2.5.5-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libassuan",
    "versionInfo" : "2.5.5-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libattr-2.5.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2007 Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 2002 Andreas Gruenbacher <agruen@suse.de>\nCopyright (c) 2001-2002 Andreas Gruenbacher <andreas.gruenbacher@gmail.com>\nCopyright (c) 2002, 2003 Andreas Grunbacher <a.gruenbacher@computer.org>\nCopyright (c) 2007 Antonio Trueba <atrueba@users.sourceforge.net>\nCopyright (c) 2006 Daniel Nylander <po@danielnylander.se>\nCopyright (c) 2015 Dmitry V. Levin <ldv@altlinux.org>\nCopyright (c) 2007 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005 Guilhelm Panaget <guilhelm.panaget@free.fr>\nCopyright (c) 2004, 2005 Jakub Bogusz <qboosh@pld-linux.org>\nCopyright (c) 2004 Luk Claes <luk.claes@ugent.be>\nCopyright (c) 2008 Petr Pisar <petr.pisar@atlas.cz>\nCopyright (c) 2000-2002,2004 Silicon Graphics, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libattr-2.5.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/peGJWZaprb1fARi3RHOrNAqDV_T781XpKFlWAtzERhM/attr-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libattr@2.5.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://savannah.nongnu.org/projects/attr",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libattr",
    "versionInfo" : "2.5.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libblkid-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libblkid-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libblkid",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libbrotli-1.0.9-7.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2015 The Brotli Authors\nCopyright (c) 2009, 2010, 2013-2016 by the Brotli Authors\n\nAuthors: Evan Nemerson <evan@nemerson.com>; Google Inc.; the Brotli Authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libbrotli-1.0.9-7.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libbrotli@1.0.9-7.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gm4rk3GxFLdybt4M8Q_gk10iuu-bQXllt60J0dt3cxY/brotli-~-7.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/brotli",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libbrotli",
    "versionInfo" : "1.0.9-7.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcap-ng-0.8.2-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2009, 2013, 2020 Red Hat Inc.\nCopyright 2009-10, 2013, 2017, 2020 Red Hat Inc.\nCopyright 2009 Red Hat Inc., Durham, North Carolina\nCopyright 2009,2014-15,2017 Red Hat Inc., Durham, North Carolina\nCopyright 2009-2020 Steve Grubb <sgrubb@redhat.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2009,2012,2020 Red Hat Inc.\nCopyright (c) 2009-10,2012,2017,2020 Red Hat Inc.\nCopyright (c) 2009 Steve Grubb sgrubb@redhat.com\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcap-ng-0.8.2-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcap-ng@0.8.2-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7_GVt9BDcCCK83SWo14qvP4sffEzvpcj0nICBvgaC4M/libcap-ng-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://people.redhat.com/sgrubb/libcap-ng/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcap-ng",
    "versionInfo" : "0.8.2-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcap-2.48-9.el9-2-arch-x86-64",
    "copyrightText" : "Copyright (c) 1997\nCopyright (c) 1997 Aleph One\nCopyright (c) 1997,2007 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 1997,2007-8,2020 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 1997-8 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2007,11,19,20 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2007,2019 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2007-8,2019 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2008,20 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 2008-11,16,19,2020 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 2019-21 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997 Andrew Main <zefram@dcs.warwick.ac.uk>\nCopyright (c) 1998 Finn Arne Gangstad <finnag@guardian.no>\nCopyright (c) 2010 Serge Hallyn <serue@us.ibm.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcap-2.48-9.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcap@2.48-9.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nypfUSoKxO8yMxQlO1yt-ObMhfSTaNOB28QyxuvYSNg/libcap-~-9.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://sites.google.com/site/fullycapable/",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcap",
    "versionInfo" : "2.48-9.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcom-err-1.46.5-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1986, 1987, 1988\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1990, 1991, 1992 Free Software Foundation, Inc.\nCopyright 2014 Google Inc.\nCopyright 2019 Google LLC\nCopyright IBM Corporation, 2007\nCopyright 1987,1988 Massachusetts Institute of Technology\nCopyright 1987, 1988, 1989 Massachusetts Institute of Technology (Student Information Processing Board)\nCopyright Oracle, 2014\nCopyright 2014, Oracle, Inc.\nCopyright 1998-2000 Red Hat, Inc\nCopyright 1999-2000 Red Hat Software\nCopyright 2000 Red Hat corp\nCopyright 1988, Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright 2017 The Android Open Source Project\nCopyright Theodore Ts'o, 1996-1999\nCopyright 1999 by David Beattie\nCopyright 1987, 1988, 1989 by Massachusetts Institute of Technology\nCopyright 2014 by Oracle, Inc.\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright 1998 by Theodore Ts'o and PowerQuest, Inc.\nCopyright 1988 by the Massachusetts Institute of Technology\nCopyright 1987 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001\nCopyright (c) 2014 Adam Kropelin\nCopyright (c) 2001 Alcove <http://www.alcove.com/>\nCopyright (c) 2000 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2001 Andreas Gruenbacher, <a.gruenbacher@computer.org>\nCopyright (c) Andrew Esh 2001\nCopyright (c) Andrew Tridgell 1999-2005\nCopyright (c) 1998 Andrey Shedel (andreys@ns.cr.cyco.com)\nCopyright (c) Andries Brouwer\nCopyright (c) 2005 Ben Gardner <bgardner@wabtec.com>\nCopyright (c) 1994-2008 Carnegie Mellon University\nCopyright (c) 2003,2004 Cluster\nCopyright (c) 2018 Collabora Ltd.\nCopyright (c) 2001 Daniel Phillips\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1989,90,91,92,93,94,96,97 Free Software Foundation, Inc.\nCopyright (c) 1996 Free Software Foundation, Inc. Michel Robitaille <robitail@IRO.UMontreal.CA>\nCopyright (c) 1995 Gadi Oxman\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2012, Intel Corporation\nCopyright (c) Jeremy Allison 2000-2006\nCopyright (c) 2008 John Darrington <j.darrington@elvis.murdoch.edu.au>\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 1997 Kaz Kylheku <kaz@ashi.footprints.net>\nCopyright (c) 2004-2006 Kern Sibbald\nCopyright (c) 1997 Klee Dienes\nCopyright (c) 1997, 1998, 2001 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 1997 Mark Habersack\nCopyright (c) 1988 Massachusetts Institute of Technology, Student Information Processing Board\nCopyright (c) 1995-1996 Michael Nonweiler <mrn20@cam.ac.uk>\nCopyright (c) 2009 NEC Software Tohoku, Ltd.\nCopyright (c) 2018 Nicholas Clark <nicholas.clark@gmail.com>\nCopyright (c) 2014 Oracle\nCopyright (c) Paul Rusty Russell 2000\nCopyright (c) 2001 Red Hat, Inc.\nCopyright (c) 2010 Red Hat, Inc., Lukas Czerner <lczerner@redhat.com>\nCopyright (c) 1999 Red Hat Software\nCopyright (c) 1988 Regents of the University of California\nCopyright (c) 1992, 1993 Remy Card <card@masi.ibp.fr>\nCopyright (c) 1993 Remy Card (card@masi.ibp.fr)\nCopyright (c) 1992, 1993, 1994 Remy Card (card@masi.ibp.fr) Laboratoire\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1992, 1993, 1994 Remy Card <card@masi.ibp.fr> Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 2014 Robert Yang <liezhi.yang@windriver.com>\nCopyright (c) 2014 SGI.\nCopyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c) 2000 Silicon Graphics, Inc.\nCopyright (c) 2000 Stephen C. Tweedie\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2009 Sun Microsystems, Inc.\nCopyright (c) 2007 The Android Open Source Project\nCopyright (c) 1993 Theodore Ts'o\nCopyright (c) 2001 Theodore Ts'o (tytso@mit.edu)\nCopyright (c) 2003-2006 Theodore Ts'o <tytso@mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 1994 Ulrich Windl ALte Regensburger Strasse\nCopyright (c) 2003 VMware, Inc.\nCopyright (c) 2011 Whamcloud, Inc.\nCopyright (c) 1997-2003 Yann Dirson <dirson@debian.org>\nCopyright (c) 2012 Zheng Liu <wenqing.lz@taobao.com>\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2006, 2007 by Andreas Dilger <adilger@clusterfs.com>\nCopyright (c) 1999, 2001 by Andries Brouwer\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 by Theodore Ts'o\nCopyright (c) 1997, 1998 by Theodore Ts'o and PowerQuest, Inc.\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1985-2005 by the Massachusetts Institute of Technology\nCopyright co 2018 Oracle\nCopyright transferred from Raider Solutions, Inc\nJeremy Fitzhardinge <jeremy@zip.com.au> 1998\nPortions Copyright 1998-2000, Theodore Ts'o\nTheodore Ts'o, Copyright 2007, 2008, 2009\n(c) 1999 Andrea Arcangeli <andrea@suse.de>\n(c) 2000 Andreas Gruenbacher, <a.gruenbacher@computer.org>\n(c) Copyright 2003, 2004, 2008 by Theodore Ts'o\n(c) 2002 David Woodhouse <dwmw2@infradead.org>\n(c) 2010 Red Hat, Inc., Lukas Czerner <lczerner@redhat.com>\ncopyrighted by Linus Torvalds <Linus.Torvalds@cs.helsinki.fi>\ncopyrighted by remap tt\ncopyrighted by the Free Software Foundation\nportions Copyright (c) 1994 Theodore Ts'o\nportions copyright (c) 2007 Cluster",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcom_err-1.46.5-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcom_err@1.46.5-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eZeimKJoKWevIamBWGDyRIyimK6hJUH8NMa0Wk6oBW4/e2fsprogs-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://e2fsprogs.sourceforge.net/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcom_err",
    "versionInfo" : "1.46.5-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcurl-minimal-7.76.1-31.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2009 - 2020, John Malmberg\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2014, Bill Nagel <wnagel@tycoint.com> , Exacq Technologies\nCopyright (c) 2019, Bjorn Stenberg, <bjorn@haxx.se>\nCopyright (c) 2001-2004 Damien Miller <djm@openbsd.org>\nCopyright (c) 1998-2016 Daniel Stenberg\nCopyright (c) 1998 - 2021, Daniel Stenberg, <daniel@haxx.se>\nCopyright (c) 1996 - 2021, Daniel Stenberg, <daniel@haxx.se> , and many contributors\nCopyright (c) 2000 - 2020 David Odin\nCopyright (c) 2006 - 2020, David Shaw <dshaw@jabberwocky.com>\nCopyright (c) 2001 - 2020, Eric Lavigne\nCopyright (c) 2017, Florin Petriuc, <petriuc.florin@gmail.com>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2003 - 2021, Gisle Vanem <gvanem@yahoo.no>\nCopyright (c) 2004 - 2014, Guenter Knauf\nCopyright (c) 2010, Hoi-Ho Chan, <hoiho.chan@gmail.com>\nCopyright (c) 2010, Howard Chu, <hyc@highlandsun.com>\nCopyright (c) 2010, Howard Chu, <hyc@openldap.org>\nCopyright (c) 1996-2019 Internet Software Consortium\nCopyright (c) 2020 - 2021, Jacob Hoffman-Andrews, <github@hoffman-andrews.com>\nCopyright (c) 2015, Jay Satiro, <raysatiro@yahoo.com>\nCopyright (c) 2018 - 2020 Jeroen Ooms <jeroenooms@gmail.com>\nCopyright (c) 2011 - 2020, Jim Hollinger\nCopyright (c) 2008 Kaveh Ghazi <ghazi@caip.rutgers.edu>\nCopyright (c) 1998, 1999 Kungliga Tekniska Hogskolan\nCopyright (c) 1995, 1996, 1997, 1998, 1999 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2012 - 2014, Linus Nielsen Feltzing, <linus@haxx.se>\nCopyright (c) 2012, Marc Hoersken, <info@marc-hoersken.de>\nCopyright (c) 2012, Mark Salisbury, <mark.salisbury@hp.com>\nCopyright (c) 2009, Markus Moeller, <markus_moeller@compuserve.com>\nCopyright (c) 2019 - 2020, Michael Forney, <mforney@mforney.org>\nCopyright (c) 2012 - 2014, Nick Zitzmann, <nickzman@gmail.com>\nCopyright (c) 2017 - 2021 Red Hat, Inc.\nCopyright (c) 2017 Reini Urban <rurban@cpan.org>\nCopyright (c) 2020 - 2021, Simon Josefsson, <simon@josefsson.org>\nCopyright (c) 2003 - 2019 Simtec Electronics\nCopyright (c) 2012 - 2020, Steve Holme, <steve_holme@hotmail.com>\nCopyright (c) 2003 - 2020 The OpenEvidence Project\nCopyright (c) 1994 X Consortium\nCopyright (c) 2017 - 2018, Yiming Jing, <jingyiming@baidu.com>\nCopyright (c) 1996 - 2020 by Internet Software Consortium\nCopyright (c) 2006-2015 wolfSSL Inc.\ncopyright by the original\n\nAuthors: $year, Daniel Stenberg; Alexander Peslyak; Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Almroth; Andrew Lambert; Andrey Cherezov; Bill Nagel , Exacq Technologies; Bjorn Stenberg; Bruno de Carvalho; Casey O'Donnell; Chris Double; Christophe Espern; Clifford Wolf; Cris Bailiff and Balint Szilakszi; Damien Miller; Dan Wood; Daniel Stenberg; Daniel Stenberg, , and many contributors; Danil Osipchuk; David Odin; David Shaw; David Strauss; David Szafranski; Eiffel Software; Eric Lavigne; Eric Young (eay@cryptsoft.com); Florin Petriuc; Fran,cois Pinard; Free Software Foundation, Inc.; Galois, Inc; Gary V. Vaughan; Gisle Vanem; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guenter Knauf; Hoi-Ho Chan; Howard Chu; Internet Software Consortium; Ishan SinghLevett; Jacob Hoffman-Andrews; Jan Schaumann; Jay Satiro; Jean-Philippe Barrette-LaPierre; Jeff Pohlmeyer; Jeffrey Phillips; Jeffrey Pohlmeyer; Jeremy Brown; Jeroen Ooms; Jim Hollinger; John Malmberg; Jud Bishop; Kaveh Ghazi; Kenneth Bogert; Kungliga Tekniska Hogskolan; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lars Nilsson; Liam Healy; Linus Nielsen Feltzing; Marc Hoersken; Mark Salisbury; Markus Moeller; Michael Forney; Michael L. Gran; Mikhail Merkuryev; Nick Zitzmann; Nikos Mavrogiannopoulos, Tomas Mraz, Stanislav Zidek, Robert Kolcun, Andreas Schneider; Paul Howe; Paul Querna; Paul Vixie; Peter Sylvester, Jean-Paul Merlin; Peter Verhas; Ray Smith; Red Hat, Inc.; Reini Urban; Richard Atterer; Rob Crittenden (rcritten@redhat.com); Roland Krikava; Ross Bamford; Scott James Remnant; Simon Josefsson; Simtec Electronics; Stephen Nestinger and Jonathan Rogado; Sterling Hughes; Steve Holme; The OpenEvidence Project; Tim Hudson (tjh@cryptsoft.com); Tom Tromey <tromey@cygnus.com>; Viktor Szakats; Vincent Sanders <vince@kyllikki.org>; X Consortium; Yiming Jing; a community; the OpenSSL Project; the original; wolfSSL Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcurl-minimal-7.76.1-31.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcurl-minimal@7.76.1-31.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/j7ldn8lpWdBaJSt41m_cf-hSIMGbwBl-EpN1PaBuivY/curl-~-31.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://curl.se/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcurl-minimal",
    "versionInfo" : "7.76.1-31.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libdnf-0.69.0-13.el9-arch-x86-64",
    "copyrightText" : "Copyright 2004-2009 Kitware, Inc.\nCopyright 2015 Lautsprecher Teufel GmbH\nCopyright 2009 Mathieu Malaterre <mathieu.malaterre@gmail.com>\nCopyright 2009 Rich Wareham\nCopyright (c) 2011, Chris Foster\nCopyright (c) 2015 Colin Walters <walters@verbum.org>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2017 Jaroslav Rohel <jrohel@redhat.com>\nCopyright (c) 2012 Raphael Kubo da Costa <rakuco@webkit.org>\nCopyright (c) 2012-2013 Red Hat, Inc.\nCopyright (c) 2009-2015 Richard Hughes <richard@hughsie.com>\nCopyright richard@hughsie.com Richard Hughes 2014 http://validator.w3.org/check/referer\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libdnf-0.69.0-13.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libdnf@0.69.0-13.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-U3Lq_zMAftlUiy-BC9DfECH0bkESD0DMaDTtY-rzcQ/libdnf-~-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/libdnf",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libdnf",
    "versionInfo" : "0.69.0-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libevent-2.1.12-8.el9-4-arch-x86-64",
    "copyrightText" : "Copyright 2002 Christopher Clark\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2000-2011 Insight Software Consortium\nCopyright 2000-2013 Kitware, Inc.\nCopyright 2003 Michael A. Davis <mike@datanerds.net>\nCopyright 2005, Nick Mathewson\nCopyright 2007-2012 Nick Mathewson and Niels Provos\nCopyright 2000-2007 Niels Provos\nCopyright 2007-2012 Niels Provos, Nick Mathewson\nCopyright 2007-2012 Niels Provos and Nick Mathewson\nCopyright 2000-2007 Niels Provos <provos@citi.umich.edu>\nCopyright (c) 2010 BitTorrent, Inc.\nCopyright (c) 2004-2018 Bootstrap Authors\nCopyright (c) 2010 Chris Davis, Niels Provos, and Nick Mathewson\nCopyright (c) 2002 Christopher Clark\nCopyright (c) 2008, Damien Miller <djm@openbsd.org>\nCopyright (c) 1996 - 2013, Daniel Stenberg, <daniel@haxx.se>\nCopyright (c) 1996, David Mazieres <dm@uun.org>\nCopyright (c) 2000 Dug Song <dugsong@monkey.org>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2006 Maxim Yegorushkin <maxim.yegorushkin@gmail.com>\nCopyright (c) 2003 Michael A. Davis <mike@datanerds.net>\nCopyright (c) 2009, Michihiro NAKAJIMA\nCopyright (c) 2007-2012 Niels Provos, Nick Mathewson\nCopyright (c) 2007-2012 Niels Provos and Nick Mathewson\nCopyright (c) 2000-2007 Niels Provos <provos@citi.umich.edu>\nCopyright (c) 2015 Olaf Mandel <olaf@mandel.name>\nCopyright (c) 2009 Oren Ben-Kiki <oren@ben-kiki.org>\nCopyright (c) 2007 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2007 Sun Microsystems\nCopyright (c) 1993 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012, iSEC Partners\n\nAuthors: Adam Langley <agl@imperialviolet.org>; Alban Diquet; Alexandre Oliva <oliva@dcc.unicamp.br>; BitTorrent, Inc.; Bootstrap Authors; Chris Davis, Niels Provos, and Nick Mathewson; Christopher Clark; Damien Miller; Daniel Stenberg; David Mazieres; David Pacheco (dp.spambait@gmail.com); Dug Song; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Insight Software Consortium; Kitware, Inc.; Maxim Yegorushkin; Michael A. Davis; Michihiro NAKAJIMA; Nick Mathewson; Nick Mathewson and Niels Provos; Niels Provos; Niels Provos and Nick Mathewson; Niels Provos, Nick Mathewson; Olaf Mandel; Oren Ben-Kiki; Scott James Remnant; Steven G. Johnson; Sun Microsystems; The Regents of the University of California; Todd C. Miller; Tom Tromey <tromey@cygnus.com>; X Consortium; iSEC Partners; rewritten by Hagne Mahre and then Hannah",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libevent-2.1.12-8.el9_4.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libevent@2.1.12-8.el9_4?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D-Mab0F0MUc0WEQa7LsE52BDdbpOo7-jOrVpQuM32GU/libevent-~-8.el9_4.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libevent.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND ISC)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libevent",
    "versionInfo" : "2.1.12-8.el9_4"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libffi-3.4.2-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008-2019, 2021 Anthony Green and Red Hat, Inc.\nCopyright 1985, 1986, 1988, 1990-2019 Free Software Foundation, Inc.\nCopyright (c) 2009, 2010, 2011, 2012 ARM Ltd.\nCopyright (c) 2012 Alan Hourihane\nCopyright (c) 2009 Alan Jenkins <alan-jenkins@tuffmail.co.uk>\nCopyright (c) 2012 Alexandre K. I. de Mendonca <alexandre.keunecke@gmail.com>\nCopyright (c) 2012 Alexandre K. I. de Mendonca <alexandre.keunecke@gmail.com> , Paulo Pizarro <paulo.pizarro@gmail.com>\nCopyright (c) 2017-2018 Alexey Kopytov\nCopyright (c) 1998, 2012 Andreas Schwab\nCopyright (c) 2004 Anthony Green\nCopyright (c) 1996-2021 Anthony Green, Red Hat, Inc and others\nCopyright (c) 2008-2019, 2021 Anthony Green and Red Hat, Inc.\nCopyright (c) 2005 Axis Communications AB\nCopyright (c) 2002 Bo Thorsen\nCopyright (c) 2002 Bo Thorsen <bo@suse.de>\nCopyright (c) 2009 Bradley Smith <brad@brad-smith.co.uk>\nCopyright (c) 2010 CodeSourcery\nCopyright (c) 1998 Cygnus Solutions\nCopyright (c) 2008 David Daney\nCopyright (c) 2011 Free Software Foundation\nCopyright (c) 1998 Geoffrey Keating\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2000 Hewlett Packard Company\nCopyright (c) 2013 IBM\nCopyright (c) 2013 Imagination Technologies\nCopyright (c) 2013 Imagination Technologies Ltd.\nCopyright (c) 2003 Jakub Jelinek <jakub@redhat.com>\nCopyright (c) 2000 John Hornkvist\nCopyright (c) 2020 Kalray\nCopyright (c) 2002, 2003, 2004, 2006, 2008 Kaz Kojima\nCopyright (c) 2011 Kyle Moffett\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2020 Madhavan T. Venkataraman\nCopyright (c) 2008 Matteo Frigo\nCopyright (c) 2013 Mentor Graphics\nCopyright (c) 2015 Michael Knyszek <mknyszek@berkeley.edu> 2015 Andrew Waterman <waterman@cs.berkeley.edu> 2018 Stef O'Rear <sorear2@gmail.com>\nCopyright (c) 2015 Michael Petch <mpetch@capp-sysware.com>\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2021 Microsoft, Inc.\nCopyright (c) 2014 Mike Frysinger <vapier@gentoo.org>\nCopyright (c) 2013 Miodrag Vallat. <miod@openbsd.org>\nCopyright (c) 2011 Plausible Labs Cooperative, Inc.\nCopyright (c) 2002 Ranjit Mathew\nCopyright (c) 1998, 2001, 2007, 2008, 2011, 2014 Red Hat\nCopyright (c) 1996 Red Hat, Inc.\nCopyright (c) 2004 Renesas Technology\nCopyright (c) 2010 Rhys Ulerich <rhys.ulerich@gmail.com>\nCopyright (c) 2002 Roger Sayle\nCopyright (c) 2014 Sebastian Macke <sebastian@macke.de>\nCopyright (c) 2004 Simon Posnjak\nCopyright (c) 2000 Software AG\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2013 Synopsys, Inc. (www.synopsys.com)\nCopyright (c) 2013 Synposys, Inc. (www.synopsys.com)\nCopyright (c) 2013 Tensilica, Inc.\nCopyright (c) 2013 The\nCopyright (c) 2012, 2016 Thorsten Glaser\nCopyright (c) 2011 Tilera Corp.\nCopyright (c) 2011 Timothy Wall\nCopyright (c) 2014 Tsukasa Oi\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012, 2013 Xilinx, Inc\nCopyright (c) 2009 the Initial Developer\n(c) 2011 Anthony Green\n(c) 2006 Free Software Foundation, Inc.\n(c) 2003-2004 Randolph Chung <tausq@debian.org>\n(c) 2008 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libffi-3.4.2-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/N8r-3ZhHN0Oc2DF-hMr6bjLc_5UDUs1u9MYdudmv1Tg/libffi-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libffi@3.4.2-8.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://sourceware.org/libffi",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libffi",
    "versionInfo" : "3.4.2-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libfontenc-1.1.3-17.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2014 Free Software Foundation, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998-2001 by Juliusz Chroboczek",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libfontenc-1.1.3-17.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J7_5vmxuMpwS--Q34JW8ZLzuUcneDaGUsV7p1ZRXHkE/libfontenc-~-17.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libfontenc@1.1.3-17.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libfontenc",
    "versionInfo" : "1.1.3-17.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libgcc-11.5.0-5.el9-5-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2009 Free Software Foundation, Inc. <http://fsf.org/>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libgcc-11.5.0-5.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ToYhGOaq6rtJ7Jc0ZRXHRBlFdZvMMhKesYmWPrscvUQ/gcc-~-5.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libgcc@11.5.0-5.el9_5?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org",
    "licenseConcluded" : "(GPL-3.0-or-later WITH GCC-exception-3.1 AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libgcc",
    "versionInfo" : "11.5.0-5.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libgcrypt-1.10.0-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998, 1999, 2000, 2001, 2002, 2003, 2009, 2011 Free Software Foundation, Inc.\nCopyright 2021- IBM Inc.\nCopyright Peter Gutmann, Matt Thomlinson and Blake Coverett 1996-2006\nCopyright Peter Gutmann, Paul Kendall, and Chris Wedgwood 1996-1999\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright 2012 Simon Josefsson and Niels Moller\nCopyright Stephan Mueller <smueller@chronox.de> , 2013\nCopyright Stephan Mueller <smueller@chronox.de> , 2014 - 2021 Design\nCopyright 1997, 1998, 1999, 2001 Werner Koch\nCopyright (c) 2020 Alibaba Group\nCopyright (c) 2018 Bundesamt fur Sicherheit\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 2013 Christian Grothoff\nCopyright (c) 2013-2014 Dmitry Eremin-Solenikov\nCopyright (c) 2012 Dmitry Kasatkin\nCopyright (c) 1992, 1994, 1998, 2001, 2002 Fee Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1994, 1996, 1998, 2000, 2002 2003 Free Software Foundation, Inc. 2013 g10 Code GmbH\nCopyright (c) 2024, Hubert Kario, Red Hat\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2017 Jia Zhang\nCopyright (c) 2021, Joshua E. Hill <josh@keypair.us>\nCopyright (c) 2013-2022 Jussi Kivilinna\nCopyright (c) 2012-2017 Jussi Kivilinna <jussi.kivilinna@iki.fi>\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 2018 Martin Storsjo <martin@martin.st>\nCopyright (c) 2006-2007 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 2003 Nikos Mavroyanopoulos\nCopyright (c) 1996-2006 Peter Gutmann, Matt Thomlinson and Blake Coverett\nCopyright (c) 1996-1999 Peter Gutmann, Paul Kendall, and Chris Wedgwood\nCopyright (c) 2010 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 1999 Richard Henderson <rth@redhat.com>\nCopyright (c) 2019 Shawn Landden <shawn@git.icu>\nCopyright (c) 2012 Simon Josefsson\nCopyright (c) 2012 Simon Josefsson, Niels Moller\nCopyright (c) 2014 Stephan Mueller\nCopyright (c) 2017 - 2021, Stephan Mueller <smueller@chronox.de>\nCopyright (c) 1998 The Internet Society\nCopyright (c) 2020 Tianjia Zhang\nCopyright (c) 2020 Tianjia Zhang <tianjia.zhang@linux.alibaba.com>\nCopyright (c) 1997 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 19YY\nCopyright (c) 1997, 1998, 1999 by Werner Koch\nCopyright (c) 2012-2022 g10 Code GmbH\nCopyright 2013 g10 Code GmbH\ncopyright Peter Gutmann (and various others) 1996, 1997, 1998, 1999\ncopyrighted by the Free Software Foundation\ncopyright to FSF.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libgcrypt-1.10.0-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libgcrypt@1.10.0-11.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TmomwhZp_7qX75OAX5giaTOBNWMarFLHNxapL2HawjM/libgcrypt-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libgcrypt",
    "versionInfo" : "1.10.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libgpg-error-1.42-5.el9-arch-x86-64",
    "copyrightText" : "Copyright 1989, 1991 Free Software Foundation, Inc.\nCopyright LGPL BuildRoot\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005 Free Software Foundation, Inc. Acest\nCopyright (c) 2014 Jedi Lin\nCopyright (c) 2010 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 1999 Richard Henderson <rth@redhat.com>\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 1998-2006, 2008-2017 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 19YY\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2018, 2021 g10 Code GmbH\nCopyright 2006 g10 Code GmbH",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libgpg-error-1.42-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libgpg-error@1.42-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IL_ykCBp0LWcmXVM2gqjMankEM12rnIxk77wTxOk2EY/libgpg-error-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/related_software/libgpg-error/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libgpg-error",
    "versionInfo" : "1.42-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libibverbs-57.0-2.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT (c) 2015 Obsidian Research Corporation\nCopyright 2020-2021, Alibaba Group\nCopyright 2019-2024 Amazon.com, Inc.\nCopyright 2018-2024 Amazon.com, Inc. or its affiliates\nCopyright 2015-2017, Broadcom Limited and/or its subsidiaries\nCopyright 2023 Bytedance.com, Inc. or its affiliates\nCopyright 2003-2016, Chelsio Communications, Inc.\nCopyright 2011 Ed Schouten <ed@FreeBSD.org> David Chisnall <theraven@FreeBSD.org>\nCopyright 2008-2013, Emulex\nCopyright 2008, Genome Research Ltd 2014, Ana Beatriz Guerrero Lopez <ana@debian.org> 2015-2016, Jason Gunthorpe <jgunthorpe@obsidianresearch.com> 2016-2024, Benjamin Drung <bdrung@ubuntu.com> 2016-2017, Talat Batheesh <talatb@mellanox.com>\nCopyright 2016, Hisilicon Limited\nCopyright 2008-2019, IBM Corporation\nCopyright 2004-2016, Intel Corporation\nCopyright 2005-2014, Intel Corporation. 2005, Ammasso, Inc. 2005, Voltaire Inc.\nCopyright 2005-2014, Intel Corporation. 2014-2015, Mellanox Technologies LTD.\nCopyright 2004-2012, Intel Corporation. 2004-2005, Topspin Communications. 2005-2007, Cisco Systems, Inc. 2005, PathScale, Inc. 2005, Mellanox Technologies Ltd.\nCopyright 2016 Kitware, Inc.\nCopyright 2006 Mellanox Technologies\nCopyright 2017 Mellanox Technologies, Inc.\nCopyright 2019, Mellanox Technologies, Inc. 2020-2024 Nvidia, Inc.\nCopyright 2004-2017, Mellanox Technologies Ltd. 2004, Infinicon Corporation. 2004-2014, Intel Corporation. 2004, Topspin Corporation. 2004-2009, Voltaire Inc. 2013 Lawrence Livermore National Security 2013, Oracle and/or its affiliates\nCopyright 2022, Microsoft Corporation\nCopyright 2015-2016 Obsidian Research Corp.\nCopyright 2015-2017, Obsidian Research Corporation\nCopyright 2015-2017, Obsidian Research Corporation. 2016-2017 Mellanox Technologies, Inc\nCopyright 2005 PathScale, Inc. 2006-2009 QLogic Corporation 2015 Intel Corporation\nCopyright 2016 Philippe Proulx <pproulx@efficios.com>\nCopyright 2006-2010, QLogic Corp. 2005, PathScale, Inc. 2013, Intel Corporation\nCopyright 2015-2016, QLogic Corporation\nCopyright 1996-2013, Red Hat, Inc.\nCopyright 2009-2011, System Fabric Works, Inc. 2009-2011, Mellanox Technologies Ltd.\nCopyright 2005 Topspin Communications\nCopyright 2004-2005, Topspin Communications. 2005-2007, Cisco, Inc. 2005-2017, Mellanox Technologies Ltd.\nCopyright 2005, Topspin Communications. 2006, Cisco Systems, Inc. 2006, Mellanox Technologies Ltd.\nCopyright 2004-2005, Topspin Communications. 2005-2006, Cisco Systems. 2005, Mellanox Technologies Ltd.\nCopyright 2012-2016 VMware, Inc.\nCopyright (c) 2020-2021, Alibaba Group\nCopyright (c) 2005 Ammasso, Inc.\nCopyright (c) 2015-2017, Broadcom\nCopyright (c) 2003-2014 Chelsio Communications, Inc.\nCopyright (c) 2006-2016 Chelsio, Inc.\nCopyright (c) 2006, 2007 Cisco, Inc.\nCopyright (c) 2005 Cisco Systems\nCopyright (c) 2005, 2006 Cisco Systems, Inc.\nCopyright (c) 2011 Ed Schouten <ed@FreeBSD.org> David Chisnall <theraven@FreeBSD.org>\nCopyright (c) 2008-2013 Emulex\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009 HNR Consulting\nCopyright (c) 2016 Hisilicon Limited\nCopyright (c) 2008-2019, IBM Corporation\nCopyright (c) 2004 Infinicon Corporation\nCopyright (c) 2020 Intel Corperation\nCopyright (c) 2013. Intel Corporation\nCopyright (c) 2011 Intel Corporation, Inc.\nCopyright (c) 2007 Lawrence Livermore National Lab\nCopyright (c) 2008 Lawrence Livermore National Laboratory\nCopyright (c) 2008 Lawrence Livermore National Security\nCopyright (c) 2005, 2006, 2007, 2008 Mellanox Technologies\nCopyright (c) 2012 Mellanox Technologies, Inc.\nCopyright (c) 2002-2005 Mellanox Technologies LTD.\nCopyright (c) 2022, Microsoft Corporation\nCopyright (c) 2021, NVIDIA CORPORATION & AFFILIATES.\nCopyright (c) 2020 Nvidia\nCopyright (c) Nvidia Corporation\nCopyright (c) 2020 Nvidia, Inc.\nCopyright (c) 2005 Open Grid Computing, Inc.\nCopyright (c) 2011,2016 Oracle and/or its affiliates\nCopyright (c) 2005. PathScale, Inc.\nCopyright (c) 2007. QLogic Corp.\nCopyright (c) 2006-2007 QLogic Corporation\nCopyright (c) 2006 QLogic, Inc.\nCopyright (c) 2012 Red Hat, Inc.\nCopyright (c) 2025 SUSE LLC\nCopyright (c) 2011-2015 Stephan Brumme\nCopyright (c) 2009 System Fabric Works, Inc.\nCopyright (c) 2001-2003 The Regents of the University of California\nCopyright (c) 2004 Topspin Communications\nCopyright (c) 2004 Topspin Corporation\nCopyright (c) 2012-2016 VMware, Inc.\nCopyright (c) 2004 Voltaire Corporation\nCopyright (c) 2004, 2005 Voltaire, Inc.\nCopyright (c) 2007 Xsigo Systems Inc.\n(c) Timothy B. Terriberry (tterribe@xiph.org) 2001-2009 CC0 Public\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libibverbs-57.0-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libibverbs@57.0-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5gfnR6tLj6BhaW-D2oMDglLd9V29QCOBmppPyyCHFcY/rdma-core-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/linux-rdma/rdma-core",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libibverbs",
    "versionInfo" : "57.0-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libidn2-2.3.0-7.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright 2011-2017 Simon Josefsson\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2015 Bastien ROUCARIES\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2012 Dan Winship\nCopyright (c) 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright (c) 20118 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2003 Free Software Foundation, Inc. Acest\nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2001, 2002 Nikos Mavrogiannopoulos\nCopyright (c) 2019 Orivej Desh\nCopyright (c) 2008 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2012, 2016 Philip Withnall\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2011-2016 Simon Josefsson\nCopyright (c) 2011-2019 Simon Josefsson, Tim Ruehsen\nCopyright (c) 2018-2019 Tim Ruehsen\nCopyright (c) 2016 Tim Ruhsen\nCopyright (c) 1991-2016 Unicode, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright 2011- s Simon Josefsson, Tim Ruehsen\n(c) 2018 Unicode(r), Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libidn2-2.3.0-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libidn2@2.3.0-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DwYzueGxRorH8oHixHKFWGzkX3sFotsk0z1EnPTHQH4/libidn2-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libidn/#libidn2",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libidn2",
    "versionInfo" : "2.3.0-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libksba-1.5.1-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 2012 Canonical Ltd.\nCopyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url http://fsf.org\nCopyright (c) 2010 Diego Elio Petteno <flameeyes@gmail.com>\nCopyright (c) 2000, 2001 Fabio Fiorina\nCopyright (c) 2009 Francesco Salvestrini <salvestrini@users.sourceforge.net>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) The Internet Society (1999)\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2010, 2011 2012, 2013, 2014, 2015, 2018, 2019, 2020, 2021 g10 Code GmbH\nCopyright 2001, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015 g10 Code GmbH\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libksba-1.5.1-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libksba@1.5.1-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kEX15AOB8PaRiMBM6A4GcYQ0Ypts7auT3T9UDL4U4vk/libksba-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libksba",
    "versionInfo" : "1.5.1-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libmaxminddb-1.5.2-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2012 Jake Gelbman <gelbman@gmail.com>\nCopyright 2013-2014 MaxMind, Inc.\nCopyright (c) 2009 David Schultz <das@FreeBSD.org>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2005 Pascal Gloor <pascal.gloor@spale.com>\nCopyright (c) 1988, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libmaxminddb-1.5.2-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libmaxminddb@1.5.2-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YsuK3Eg9lXNTQZByHm9-4iuvo86WNOkN1LnndQ25INQ/libmaxminddb-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maxmind.github.io/libmaxminddb",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libmaxminddb",
    "versionInfo" : "1.5.2-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libmodulemd-2.13.0-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 2018 Stephen Gallagher\nCopyright (c) 2020 Red Hat\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) 2017-2018 Stephen Gallagher\nCopyright (c) 2017-2018 Stephen Gallagher <sgallagh@redhat.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libmodulemd-2.13.0-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libmodulemd@2.13.0-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Vcvkc-PytBjlLEjXqOWwBssM1uoHEP9UEnUqU1_3_yc/libmodulemd-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fedora-modularity/libmodulemd",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libmodulemd",
    "versionInfo" : "2.13.0-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libmount-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libmount-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libmount@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libmount",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libnghttp2-1.43.0-6.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT 2012, 2015, 2016, Tatsuhiro Tsujikawa\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright Joyent, Inc. and other Node contributors\nCopyright 2011 Kitware, Inc.\nCopyright 2010 by SHIBUKAWA Yoshiki\nCopyright 2007-2009 by the Sphinx team\nCopyright (c) 2009 Alan W. Irwin\nCopyright (c) 2009 Andrew Collier\nCopyright (c) 2008 Benjamin Kosnik <bkoz@redhat.com>\nCopyright (c) 2015 British Broadcasting Corporation\nCopyright (c) 2003-2013 Christopher M. Kohlhoff (chris at kohlhoff dot com)\nCopyright (c) 2008 Daniel Casimiro <dan.casimiro@gmail.com>\nCopyright (c) 2013 Daniel Mullner <muellner@math.stanford.edu>\nCopyright (c) 2015 DeNA Co., Ltd.\nCopyright (c) 1984, 1989-1990, 2000-2015, 2018-2020 Free Software Foundation, Inc.\nCopyright (c) 2014, 2015 Google Inc.\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2009 Horst Knorr <hk_classes@knoda.org>\nCopyright (c) 2012 Internet Initiative Japan Inc.\nCopyright (c) 2015 Kazuho Oku, DeNA Co., Ltd.\nCopyright (c) 2016, 2018 Krzesimir Nowak <qdlacz@gmail.com>\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2009 Matteo Settenvini <matteo@member.fsf.org>\nCopyright (c) 2008 Michael Tindal\nCopyright (c) 2015 Moritz Klammler <moritz@klammler.eu>\nCopyright (c) 2015 Paul Norman <penorman@mac.com>\nCopyright (c) 2008 Pete Greenwell <pete@mu.org>\nCopyright (c) 2009 Peter Adolphs\nCopyright (c) 2016 Peter Wu <peter@lekensteyn.nl>\nCopyright (c) 2009 Rafael Laboissiere <rafael@laboissiere.net>\nCopyright (c) 2005-2014 Rich Felker\nCopyright (c) 2013 Roy Stogner <roystgnr@ices.utexas.edu>\nCopyright (c) 2009 Sebastian Huber <sebastian-huber@web.de>\nCopyright (c) 1994 Sun Microsystems, Inc.\nCopyright (c) 2012, 2014, 2015, 2016 Tatsuhiro Tsujikawa\nCopyright (c) 1988-1993 The Regents of the University of California\nCopyright (c) 2008 Thomas Porschberg <thomas@randspringer.de>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Zack Weinberg <zackw@panix.com>\nCopyright (c) 2010 by the contributors (see AUTHORS file)\nCopyright (c) 2017 mruby developers\nCopyright (c) 2012, 2014, 2015, 2016 nghttp2 contributors\nCopyright (c) 2017 ngtcp2 contributors\nG. Vanem <gvanem@yahoo.no> 2013\n(c) ISALPHA (c) ISDIGIT (c)\n(c) Syoyo Fujita in Javascript (and other languages) https://code.google.com/p/aobench\ncopyright by the original\ncopyright (c) 2014 Specified Non-Profit Corporation mruby Forum\ncopyright u'2012, 2015, 2016, Tatsuhiro Tsujikawa\n\nAuthors: Alan W. Irwin; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Sokolov <sokolov@google.com>; Andrew Collier; Benjamin Kosnik; British Broadcasting Corporation; Christopher M. Kohlhoff (chris at kohlhoff dot com); Daniel Casimiro; Daniel Mullner; DeNA Co., Ltd.; Fran,cois Pinard; Free Software Foundation, Inc.; G. Vanem; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim; Horst Knorr; ISALPHA ISDIGIT; Internet Initiative Japan Inc.; Joyent, Inc. and other Node contributors; Kazuho Oku, DeNA Co., Ltd.; Kitware, Inc.; Krzesimir Nowak; Lorenz Nickel <lorenz.nickel@gmx.net>; Maarten Bosmans; Matteo Settenvini; Michael Tindal; Moritz Klammler; Paul Norman; Pete Greenwell; Peter Adolphs; Peter Wu; Rafael Laboissiere; Reza Tavakoli <9096461+tavrez@users.noreply.github.com>; Rich Felker; Richard Stallman; Roy Stogner; SHIBUKAWA Yoshiki; Scott James Remnant; Sebastian Huber; Specified Non-Profit Corporation mruby Forum; Sun Microsystems, Inc.; Syoyo Fujita in Javascript (and other languages); Tatsuhiro Tsujikawa; Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>; Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com>; The Regents of the University of California; Thomas Porschberg; Tom Tromey <tromey@cygnus.com>; X Consortium; Zack Weinberg; doxygen. Using; h2o project (https://github.com/h2o/h2o); mkstatictbl.py; mruby developers; nghttp2 contributors; ngtcp2 contributors; the Sphinx team; the contributors (see AUTHORS file); the original; u'2012, Tatsuhiro Tsujikawa",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libnghttp2-1.43.0-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R0RqH-QeoJ4RM-pBHmgtd25rfFsWkGLAdTq_AALARZI/nghttp2-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libnghttp2@1.43.0-6.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://nghttp2.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libnghttp2",
    "versionInfo" : "1.43.0-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libnl3-3.11.0-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 2011-2014, Dave Furfero\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 2001 Jeff Garzik <jgarzik@pobox.com>\nCopyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com\nCopyright (c) 2007 Ariel Flesler\nCopyright (c) 2018 Avast\nCopyright (c) 2003-2006 Baruch Even <baruch@ev-en.org>\nCopyright (c) 2012 Benedikt Spranger <b.spranger@linutronix.de>\nCopyright (c) 2015 Beniamino Galvani <bgalvani@redhat.com>\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2015 Cong Wang <cwang@twopensource.com>\nCopyright (c) 2013 Cong Wang <xiyou.wangcong@gmail.com>\nCopyright (c) 2015 Cumulus Networks\nCopyright (c) 2012 Cumulus Networks, Inc\nCopyright (c) 2014 Dan Williams <dcbw@redhat.com>\nCopyright (c) 2015 David Ahern <dsa@cumulusnetworks.com>\nCopyright (c) 1998 David S. Miller (davem@redhat.com)\nCopyright (c) 2023 Dimitri van Heesch\nCopyright (c) 2019 Eyal Birger <eyal.birger@gmail.com>\nCopyright (c) 1984, 1989-1990, 2000-2015, 2018-2021 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2016 Intel Corp.\nCopyright (c) 2008, Intel Corporation\nCopyright (c) 2016 Jef Oliver <jef.oliver@intel.com>\nCopyright (c) 2014 Jiri Pirko <jiri@resnulli.us>\nCopyright (c) 2015 Jonas Johansson <jonasj76@gmail.com>\nCopyright (c) 2010 Karl Hiramoto <karl@hiramoto.org>\nCopyright (c) 2016 Magnus Oberg <magnus.oberg@westermo.se>\nCopyright (c) 2022 MaxLinear, Inc.\nCopyright (c) 2003-2006 Mediatrix Telecom, inc. <ericb@mediatrix.com>\nCopyright (c) 2013 Michael Braun <michael-dev@fami-braun.de>\nCopyright (c) 2007, 2008 Patrick McHardy <kaber@trash.net>\nCopyright (c) 2005 Petr Gotthard <petr.gotthard@siemens.com>\nCopyright (c) 2007 Philip Craig <philipc@snapgear.com>\nCopyright (c) 2012 Rich Fought <Rich.Fought@watchguard.com>\nCopyright (c) 2015 Sabrina Dubroca <sd@queasysnail.net>\nCopyright (c) 2013 Sassano Systems LLC <joe@sassanosystems.com>\nCopyright (c) 2007 Secure Computing Corporation\nCopyright (c) Shailabh Nagar, IBM Corp. 2006\nCopyright (c) 2012 Shriram Rajagopalan <rshriram@cs.ubc.ca>\nCopyright (c) 2005 Siemens AG Oesterreich\nCopyright (c) 2022 Stanislav Zaikin <zstaseg@gmail.com>\nCopyright (c) 2018 Steven Benner (http://stevenbenner.com/)\nCopyright (c) 2014 Susant Sahani <susant@redhat.com>\nCopyright (c) 2016 Sushma Sitaram <sushma.sitaram@intel.com>\nCopyright (c) 2012 Texas Instruments Incorporated - http://www.ti.com\nCopyright (c) 2003-2010 Thomas Graf <tgraf@redhat.com>\nCopyright (c) 2003-2006 Thomas Graf <tgraf@suug.ch>\nCopyright (c) 2017 Volodymyr Bendiuga <volodymyr.bendiuga@gmail.com>\nCopyright (c) 2018 Volodymyr Bendiuga <volodymyr.bendiuga@westermo.se>\nCopyright (c) 2005-2010 W3C (MIT, ERCIM, Keio)\nCopyright (c) 2018 Wang Jian <jianjian.wang1@gmail.com>\nCopyright (c) 2009 Wolfgang Grandegger <wg@grandegger.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2013 Yasunobu Chiba <yasu@dsl.gr.jp>\nCopyright (c) 1997-2020 by Dimitri van Heesch\nCopyright (c) 2021 - 2022 jothepro\nCopyright jQuery Foundation and other contributors\nPortions Copyright 2002 Intel eli.kupermann@intel.com, christopher.leech@intel.com\nPortions Copyright 2001 Sun Microsystems (thockin@sun.com)\nPortions Copyright (c) Sun Microsystems 2008\n(c) Balbir Singh, IBM Corp. 2006\n(c) Jay Lan, SGI, 2006\n(c) OpenJS Foundation and other contributors\n(c) UCB 1986-1988\ncopyright 2011, Thomas Graf <tgraf@suug.ch>\ncopyrighted by the Free Software Foundation\n\nAuthors: Alexander Duyck <alexander.h.duyck@intel.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Ariel Flesler; Avast; Balbir Singh, IBM Corp.; Baruch Even; Ben Greear <greearb@candelatech.com>; Benedikt Spranger; Beniamino Galvani; Bootstrap Authors; Cong Wang; Cumulus Networks; Cumulus Networks, Inc; Dan Williams; Dave Furfero; David Ahern; David Lebrun <david.lebrun@uclouvain.be>; David S. Miller; Dimitri van Heesch; Eli Cohen <eli@mellanox.com>; Eli Cohen eli@mellanox.com; Eyal Birger; Fran,cois Pinard; Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>; Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Donald Becker, <becker@super.org> Alan Cox, <alan@lxorguk.ukuu.org.uk>; Free Software Foundation; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>; Intel; Intel Corp.; Intel Corporation; Jay Lan, SGI; Jef Oliver; Jeff Garzik; Jiri Pirko; Jonas Johansson; Karl Hiramoto; Lennert Buytenhek <buytenh@gnu.org>; Magnus Oberg; MaxLinear, Inc.; Mediatrix Telecom, inc.; Michael Braun; Mihai Bazon; OpenJS Foundation and other contributors; Original taken from the GNU Project; Patrick McHardy; Pedro Roque <roque@di.fc.ul.pt>; Peter Rosin <peda@lysator.liu.se>; Petr Gotthard; Philip Craig; Rich Fought; Richard Stallman; Roopa Prabhu <roopa@cumulusnetworks.com>; Ross Biro Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Corey Minyard; Sabrina Dubroca; Sassano Systems LLC; Scott James Remnant; Secure Computing Corporation; Shailabh Nagar, IBM Corp.; Shriram Rajagopalan; Siemens AG Oesterreich; Stanislav Zaikin; Steven Benner; Stuart Rackham; Sun Microsystems; Susant Sahani; Sushma Sitaram; Texas Instruments Incorporated; Thomas Graf; Tom Tromey <tromey@cygnus.com>; Troy D. Hanson; UCB; Vasil Dinkov, Vadikom Web Ltd.; Volodymyr Bendiuga; W3C (MIT, ERCIM, Keio); Wang Jian; Wolfgang Grandegger; X Consortium; Yasunobu Chiba; jQuery Foundation and other contributors; jothepro; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libnl3-3.11.0-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vwG56OkWvPxZiAbfF24l16vRUHNpzcKPAjKgmVpRSjY/libnl3-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libnl3@3.11.0-1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.infradead.org/~tgr/libnl/",
    "licenseConcluded" : "LGPL-2.1-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libnl3",
    "versionInfo" : "3.11.0-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libpcap-1.10.0-4.el9-arch-x86-64-epoch-14",
    "copyrightText" : "Copyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2006-2010, Haiku, Inc.\nCopyright 1989 by Carnegie Mellon\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 2017 Ali Abdulkadir <autostart.ini@gmail.com>\nCopyright (c) 2007 Andy Lutomirski\nCopyright (c) 2001 Atsushi Onoe\nCopyright (c) 2005-2009 CACE Technologies\nCopyright (c) 2005 - 2008 CACE Technologies, Davis (California)\nCopyright (c) 2005 - 2009 CACE Technologies, Inc. Davis (California)\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Fulko Hew, SITA INC Canada, Inc <fulko.hew@sita.aero>\nCopyright (c) 2008 Gabor Stefanik\nCopyright (c) 2011 Jakub Zawadzki\nCopyright (c) 2007, 2008 Johannes Berg\nCopyright (c) 2016 Julian Andres Klode <jak@debian.org>\nCopyright (c) 1996 Juniper Networks, Inc.\nCopyright (c) 2014 Luigi Rizzo\nCopyright (c) 2013 Matthew Arsenault\nCopyright (c) 2014 Michal Labedzki for Tieto Corporation\nCopyright (c) 2013, Michal Sekletar\nCopyright (c) 2007 Mike Kershaw\nCopyright (c) 1999 - 2005 NetGroup, Politecnico di Torino (Italy)\nCopyright (c) 2006 Paolo Abeni (Italy)\nCopyright (c) 2013, Petar Alilovic, Faculty of Electrical Engineering and Computing, University of Zagreb\nCopyright (c) 2017 Pure Storage, Inc.\nCopyright (c) 2002-2005 Sam Leffler, Errno Consulting\nCopyright (c) 1998 Softweyr LLC.\nCopyright (c) 1987, 1988, 1989, 1990, 1991, 1992, 1994, 1995, 1996, 1997 The Regents of the University of California\nCopyright (c) The TCPdump Group\nCopyright (c) 1998, 2015 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2000 Torsten Landschoff <torsten@debian.org> Sebastian Krahmer <krahmer@cs.uni-potsdam.de>\nCopyright (c) 1997 Yen Yen Lim and North Dakota State University\nCopyright (c) 2018 jingle YANG.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libpcap-1.10.0-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libpcap@1.10.0-4.el9?arch=x86_64&epoch=14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i05pAq-QoSRYlOAqmfBMf9CnYLI2_Dt4PXqZcjVMLys/libpcap-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.tcpdump.org/",
    "licenseConcluded" : "LicenseRef-scancode-bsd-new-tcpdump",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libpcap",
    "versionInfo" : "1.10.0-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libpeas-1.30.0-4.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2003, 2004 Christian Persch\nCopyright (c) 1997, 1998, 1999, 2000 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2011 Free Software Foundation, Inc. Kristjan SCHMIDT <kristjan.schmidt@googlemail.com> , 2011, 2017. Tiffany ANTOPOLSKI <tiffany.antopolski@gmail.com> , 2011\nCopyright (c) 2010 - Garrett Regier\nCopyright (c) 2011 Gnome Telugu Contributors\nCopyright (c) 2008 Ignacio Casal Quinteiro\nCopyright (c) 2011 Iranian Free Software Users Group (IFSUG.org)translation team\nCopyright (c) 2008 - Jesse van den Kieboom\nCopyright (c) 2011 Krasimir Chonov <mk2616@abv.bg>\nCopyright (c) 2010 Listed\nCopyright (c) 2003 Marco Pesenti Gritti\nCopyright (c) 2002-2005 - Paolo Maggi\nCopyright (c) 2003-2006 Paolo Maggi, Paolo Borelli\nCopyright (c) 2007-2009 Paolo Maggi, Paolo Borelli, Steve Frecinaux\nCopyright (c) 2002 Paolo Maggi and James Willcox\nCopyright (c) 2012 Rosetta Contributors\nCopyright (c) 2007 - Steve Frecinaux\nCopyright (c) 2009 Steve Frecinaux Website http://code.istique.net\nCopyright (c) 2009-10 Steve Frecinaux Website https://wiki.gnome.org/Projects/Libpeas\nCopyright (c) 2010 Steve Frecinaux Website https://wiki.gnome.org/Projects/Libpeas\nCopyright (c) 2011 THE PACKAGE'S\nCopyright (c) 2011 THE libpeas'S\nCopyright (c) 2011 Tommi Vainikainen\nCopyright (c) 2010, 2011, 2012, 2013 libpeas\nCopyright (c) 2010 libpeas's\nCopyright (c) 2019 libpeas's authors\nCopyright (c) 2011 the Free Software Foundation, Inc.\nCopyright (c) 2010-2019 the libpeas\n\nAuthors: Christian Persch; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. Kristjan SCHMIDT , Tiffany ANTOPOLSKI; Garrett Regier; Garrett Regier <garrettregier@gmail.com>; Gnome Telugu Contributors; Ignacio Casal Quinteiro; Iranian Free Software Users Group (IFSUG.org)translation team; Jesse van den Kieboom; Krasimir Chonov; Listed; Marco Pesenti Gritti; Paolo Maggi; Paolo Maggi and James Willcox; Paolo Maggi, Paolo Borelli; Paolo Maggi, Paolo Borelli, Steve Frecinaux; Rosetta Contributors; Steve Frecinaux; Steve Frecinaux <code@istique.net>; THE PACKAGE'S; THE libpeas'S; Tom Schoonjans <Tom.Schoonjans@gmail.com>; Tommi Vainikainen; libpeas; libpeas'S; libpeas's authors; the Free Software Foundation; the Free Software Foundation, Inc.; the libpeas",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libpeas-1.30.0-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libpeas@1.30.0-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C8txj278URwSKYBPaTQmoNjsDSWJ8o7_wij4NTO1cqM/libpeas-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/Libpeas",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libpeas",
    "versionInfo" : "1.30.0-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libpng-1.6.37-12.el9-arch-x86-64-epoch-2",
    "copyrightText" : "COPYRIGHT 251 2013,2015 John Cunningham Bowler\nCOPYRIGHT Written by Glenn Randers-Pehrson, 2016\nCOPYRIGHT Written by John Cunningham Bowler, 2010\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2015 The Chromium Authors\nCopyright (c) 2000-2008 Adam M. Costello and Cosmin Truta\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2017-2018 Arm Holdings\nCopyright (c) 2006-11-28 Charles Poynton\nCopyright (c) 2001 Christoph Pfisterer\nCopyright (c) 2018-2019 Cosmin Truta\nCopyright (c) 1995, 1996 Frank J. T. Wojcik\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2002, 2007, 2009 Glenn Randers-Pehrson and Andrey A. Chernov\nCopyright (c) 2012 Glenn Randers-Pehrson and Christopher M. Wheeler\nCopyright (c) 1998-2008 Greg Roelofs\nCopyright (c) 1998, 1999, 2002, 2006, 2008, 2010-2014 Greg Roelofs and Glenn Randers-Pehrson\nCopyright (c) 1995 Guy Eric Schalnat, Group\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) John Bowler, 2013\nCopyright (c) 2011-2013 John Cunningham Bowler\nCopyright (c) 2001, Laurent\nCopyright (c) 2000 Marc O. Gloor\nCopyright (c) 1996 Massachusetts Institute of Technology\nCopyright (c) 2002 Patrick R.L. Welche\nCopyright (c) 2000, Pawel Mrochen\nCopyright (c) 2004 Simon-Pierre Cadieux\nCopyright (c) 1995-2019 The\nCopyright (c) 1998 Tim Wegner\nCopyright (c) 2008 Vincent Torri\nCopyright (c) 2003 W3C. (MIT, ERCIM, Keio)\nCopyright (c) Willem van Schaik, 1999, 2011, 2012\nCopyright (c) 1995-2000 Wolf Faust\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998 by Andreas R. Kleinert\n(c) Copyright 1997 Tom Tanner Test\n(c) Willem van Schaik\ncopyright Glenn Randers-Pehrson\ncopyright 1995 Guy Eric Schalnat, Group 42, Inc.\ncopyright Willem van Schaik, 1999-2019\ncopyright (c) 1999-2019 by Willem van Schaik\ncopyrighted by the Free Software Foundation\n(c) readpng2$ (c) PROGHDRS\n\nAuthors: Adam M. Costello and Cosmin Truta; Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Dilger; Andreas R. Kleinert; Arm Holdings; Charles Poynton; Christian Ehrlicher; Christoph Pfisterer; Cosmin Truta; Fran,cois Pinard; Frank J. T. Wojcik; Free Software Foundation, Inc.; Gary V. Vaughan; Glenn Randers-Pehrson; Glenn Randers-Pehrson and Andrey A. Chernov; Glenn Randers-Pehrson and Christopher M. Wheeler; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Greg Roelofs; Greg Roelofs and Glenn Randers-Pehrson; Greg Roelofs and contributors; Guy Eric Schalnat, Group; Guy Eric Schalnat, Group 42, Inc.; James Yu; John Bowler; John Cunningham Bowler; Laurent; Mandar Sahastrabuddhe; Mans Rullgard; Marc O. Gloor; Martin Zinser; Massachusetts Institute of Technology; Michal Zalewski <lcamtuf@google.com>; Mike Klein and Matt Sarett; Mike Klein and Matt Sarett, Google, Inc.; Patrick R.L. Welche; Pawel Mrochen; Richard Townsend <Richard.Townsend@arm.com>; Roger Leigh; Scott James Remnant; Simon-Pierre Cadieux; The Chromium Authors; Tim Wegner; Tom Tanner Test; Tom Tromey <tromey@cygnus.com>; Vadim Barkov; Vincent Torri; W3C. (MIT, ERCIM, Keio); Willem van Schaik; Wolf Faust; X Consortium; default. Also; readpng2$ PROGHDRS; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libpng-1.6.37-12.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libpng@1.6.37-12.el9?arch=x86_64&epoch=2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KrAo78Uc7Zi4_uRviUMU5EVseVIEGWR4iePH4xLjQ8M/libpng-~-12.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.libpng.org/pub/png/",
    "licenseConcluded" : "Zlib",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libpng",
    "versionInfo" : "1.6.37-12.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-librepo-1.14.5-2.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2012 Colin Walters <walters@verbum.org>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc\nCopyright (c) 2016 Martin Hatina\nCopyright (c) 2021 Red Hat, Inc\nCopyright (c) 2014 Richard Hughes\nCopyright (c) 2014 Richard Hughes <richard@hughsie.com>\nCopyright (c) 2012 Tomas Mlcoch",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/librepo-1.14.5-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/librepo@1.14.5-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_ol63-rGLWhuOa_xc0Yp5WOKOwjOZTE3sSsQN46tc30/librepo-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/librepo",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/librepo",
    "versionInfo" : "1.14.5-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libreport-filesystem-2.15.2-6.el9-arch-noarch",
    "copyrightText" : "Copyright 2006 Rob Landley <rob@landley.net>\nCopyright (c) ABRT Team\nCopyright (c) 2015 ABRT team <abrt-devel-list@redhat.com>\nCopyright (c) 2010 Denys Vlasenko (dvlasenk@redhat.com)\nCopyright (c) 2001 Erik Andersen\nCopyright (c) 2004 Erik Andersen <andersen@codepoet.org>\nCopyright (c) 2009 Jiri Moskovcak (jmoskovc@redhat.com)\nCopyright (c) 2003 Manuel Novoa III <mjn3@codepoet.org>\nCopyright (c) 2001 Matt Krai\nCopyright (c) RedHat inc.\nCopyright (c) 2005, 2006 Rob Landley <rob@landley.net>\nCopyright (c) 2004-2008 Rodney Dawes <dobey.pwns@gmail.com>\nCopyright (c) 2009 Zdenek Prikryl (zprikryl@redhat.com)\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org>\nCopyright (c) 1995, 1996, 1997 by Ulrich Drepper <drepper@gnu.ai.mit.edu>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libreport-filesystem-2.15.2-6.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libreport-filesystem@2.15.2-6.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1IgcgfeUqb5Mj7IfoiHFT05VbcOfUK_BGIJ0b0WWer8/libreport-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://abrt.readthedocs.org/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libreport-filesystem",
    "versionInfo" : "2.15.2-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-librhsm-0.0.3-9.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2016 Michael Mraka <michael.mraka@redhat.com>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/librhsm-0.0.3-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/librhsm@0.0.3-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XDq9r_f4Vkd-_sbtzCbft3BHLEh48-vPbfmhsJeT12U/librhsm-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/librhsm",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/librhsm",
    "versionInfo" : "0.0.3-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libselinux-3.6-3.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2004 Red Hat, Inc., James Morris <jmorris@redhat.com>\nEamon Walsh (ewalsh@tycho.nsa.gov) 2007\nKaiGai Kohei (kaigai@ak.jp.nec.com) 2009\nKaiGai Kohei <kaigai@ak.jp.nec.com> 2009",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libselinux-3.6-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libselinux@3.6-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oAbk1DCnLq9tRY1MDfYZtvPUSpxVB7W_kIDGgzdnchM/libselinux-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SELinuxProject/selinux/wiki",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libselinux",
    "versionInfo" : "3.6-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsemanage-3.6-5.el9-6-arch-x86-64",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Mellanox Technolgies Inc.\nCopyright (c) 2017 Mellanox Technologies Inc\nCopyright (c) 2017 Mellanox Techonologies Inc\nCopyright (c) 2005 Red Hat Inc.\nCopyright (c) 2004-2005 Tresys Technology, LLC\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsemanage-3.6-5.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G1jHdmg5zvM1PpnCC60DdW-AOkm5UQoeLvSw-snXxy4/libsemanage-~-5.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SELinuxProject/selinux/wiki",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsemanage",
    "versionInfo" : "3.6-5.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsepol-3.6-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 2011 Tresys Technology, LLC.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1997 Manoj Srivastava <srivasta@debian.org>\nCopyright (c) 2017 Mellanox Technologies Inc.\nCopyright (c) 2017 Mellanox Techonolgies Inc.\nCopyright (c) 2008 NEC Corporation\nCopyright (c) 2003 - 2004 Red Hat, Inc.\nCopyright (c) 2003 Tresys Technology, LLC\nCopyright (c) 2004-2005 Trusted Computer Solutions, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsepol-3.6-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsepol@3.6-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PTX_o2hBqmOQg-WlbIYcif_ubXutIEF3mytKphBWBZo/libsepol-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SELinuxProject/selinux/wiki",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsepol",
    "versionInfo" : "3.6-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsigsegv-2.13-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-1999, 2002-2012, 2016-2021 Bruno Haible <bruno@clisp.org>\nCopyright 2008-2010 Eric Blake <ebb9@byu.net>\nCopyright 2002-2021 Free Software Foundation, Inc.\nCopyright 1988, 1989 Hans-J. Boehm, Alan J. Demers\nCopyright 2002-2005, 2009 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 1993-1999, 2002-2003, 2006, 2008-2009, 2016-2017, 2021 Bruno Haible <bruno@clisp.org>\nCopyright (c) 2008 Eric Blake <ebb9@byu.net>\nCopyright (c) 2018 Nylon Chen <nylon7@andestech.com>\nCopyright (c) 2002 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 1999-2002 Ralf S. Engelschall <rse@engelschall.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1999 by Hewlett-Packard Company\nCopyright (c) 1996-1999 by Silicon Graphics\nCopyright (c) 1991-1995 by Xerox Corporation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsigsegv-2.13-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/r8D46_BZDVtFTQ1X58tqWx2fGo9BS3z56RaegpyDI-g/libsigsegv-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsigsegv@2.13-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libsigsegv/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsigsegv",
    "versionInfo" : "2.13-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsmartcols-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsmartcols-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsmartcols@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsmartcols",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsolv-0.7.24-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008-2009 Alexander Neundorf <neundorf@kde.org>\nCopyright 2007 Company Inc\nCopyright 2004-2009 Kitware, Inc.\nCopyright 2000-2009 Kitware, Inc., Insight Software Consortium\nCopyright (c) 2000-2001, Aaron D. Gifford\nCopyright (c) 2011-2013, Ingo Weinhold <ingo_weinhold@gmx.de>\nCopyright (c) 2007, Novell Inc.\nCopyright (c) 2005-2014 Rich Felker\nCopyright (c) 2007-2017, SUSE Inc.\nCopyright (c) 2007-2015, SUSE LLC\nCopyright (c) 1992, 1993 The Regents of the University of California\nCopyright (c) 2001-2008 Ville Laurikari\nCopyright (c) 2001-2009 Ville Laurikari <vl@iki.fi>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsolv-0.7.24-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsolv@0.7.24-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jfnsuGylPkzFT_78oH1a2paT9bCBv-5EsZfLrwykAbY/libsolv-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/openSUSE/libsolv",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsolv",
    "versionInfo" : "0.7.24-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libstdcPLUSPLUS-11.5.0-5.el9-5-arch-x86-64",
    "copyrightText" : "Copyright (c) 2008-2021 Free Software Foundation, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libstdc++-11.5.0-5.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libstdc%2B%2B@11.5.0-5.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ToYhGOaq6rtJ7Jc0ZRXHRBlFdZvMMhKesYmWPrscvUQ/gcc-~-5.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org",
    "licenseConcluded" : "(GPL-2.0-or-later AND GPL-3.0-or-later WITH GCC-exception-3.1 AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libstdc++",
    "versionInfo" : "11.5.0-5.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libtasn1-4.16.0-9.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990-2019 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2019 Radical Eye Software\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2009 Allan Caffee <allan.caffee@gmail.com>\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) 2015,2018 Bastien ROUCARIES\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2012 Dan Winship\nCopyright (c) 2015 Enrico M. Crisostomo <enrico.m.crisostomo@gmail.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 2008 John Darrington <j.darrington@elvis.murdoch.edu.au>\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2001, 2002 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2012, 2016 Philip Withnall\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Simon Josefsson\nCopyright (c) 2007-2017 Stefan Sauer\nCopyright (c) 2017-2019 Tim Ruehsen\nCopyright (c) 2008 Tom Howard <tomhoward@users.sf.net>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright <http://www.ams.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libtasn1-4.16.0-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libtasn1@4.16.0-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Co9MB1V_ZtSnIGZFc0d6Yrf8Do9x0bTRd04dQCtoQSU/libtasn1-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/libtasn1/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libtasn1",
    "versionInfo" : "4.16.0-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libtool-ltdl-2.4.6-46.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1999, 2003, 2011-2015 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 1994 X Consortium\n(c) 1996 Free Software Foundation, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libtool-ltdl-2.4.6-46.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libtool-ltdl@2.4.6-46.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KOwCFKAsTxnbnR-9vVv8ngv82O2RwLdYwxEuDjXZX5I/libtool-~-46.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/libtool/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libtool-ltdl",
    "versionInfo" : "2.4.6-46.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libunistring-0.9.10-15.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2007 Free Software Foundation, Inc. @url http://fsf.org\nCopyright (c) 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 1999-2005 Patrice Dumas <dumas@centre-cired.fr> , Derek Price <derek@ximbiot.com> , Adrian Aichner <adrian@xemacs.org>\nCopyright (c) 2001-2011 VALUE LegalTrademarks VALUE OriginalFilename unistring.dll\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libunistring-0.9.10-15.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libunistring@0.9.10-15.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KaBbhfRj3DRmDfH5MGkPgKegJGDJl1hKnvfaPWgHqJ8/libunistring-~-15.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libunistring/",
    "licenseConcluded" : "LGPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libunistring",
    "versionInfo" : "0.9.10-15.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libusbx-1.0.26-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2006-2008, Haiku Inc.\nCopyright 2020-2021 Peter Stoiber\nCopyright (c) 2014 Akshay Jaggi <akshay1994.leo@gmail.com>\nCopyright (c) 2013-2018 Chris Dickens <christopher.a.dickens@gmail.com>\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2007-2009 Daniel Drake <dsd@gentoo.org>\nCopyright (c) 2001-2002 David Brownell (dbrownell@users.sourceforge.net)\nCopyright (c) 2013 Federico Manzan (f.manzan@gmail.com)\nCopyright (c) 1987,88,89,90,91,92,93,94,95,96,98,99,2000,2001 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2019 Google LLC.\nCopyright (c) 2011-2013 Hans de Goede <hdegoede@redhat.com>\nCopyright (c) 2012 Harald Welte <laforge@gnumonks.org>\nCopyright (c) 2001 Johannes Erdfelt <johannes@erdfelt.com>\nCopyright (c) 2009-2013 Ludovic Rousseau <ludovic.rousseau@gmail.com>\nCopyright (c) 2012-2013 Martin Pieuchot <mpi@openbsd.org>\nCopyright (c) 2010-2012 Michael Plante <michael.plante@gmail.com>\nCopyright (c) 2019 Nathan Hjelm <hjelmn@cs.umm.edu>\nCopyright (c) 2008-2021 Nathan Hjelm <hjelmn@cs.unm.edu>\nCopyright (c) 2013 Nathan Hjelm <hjelmn@mac.ccom>\nCopyright (c) 2012-2013 Nathan Hjelm <hjelmn@mac.com>\nCopyright (c) 2008-2016 Nathan Hjelm <hjelmn@users.sourceforge.net>\nCopyright (c) 2016, Oracle and/or its affiliates\nCopyright (c) 2009-2013 Pete Batard <pete@akeo.ie>\nCopyright (c) 2012 Pete Batard (pete@akeo.ie)\nCopyright (c) 2010-2012 Peter Stuge <peter@stuge.se>\nCopyright (c) 2019 Pino Toscano <toscano.pino@tiscali.it>\nCopyright (c) 2012-2013 RealVNC Ltd.\nCopyright (c) 2012-2013 RealVNC Ltd. <toby.gray@realvnc.com>\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) 2008 Roger Williams (rawqux@users.sourceforge.net)\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2001 Stephen Williams (steve@icarus.com)\nCopyright (c) 2012-2013 Toby Gray <toby.gray@realvnc.com>\nCopyright (c) 2011 Vitali Lovich <vlovich@aliph.com>\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libusbx-1.0.26-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/L59uiS7V2c5atzwwSVNld1XJc4cb9Gs73OCQ0ri8bNg/libusbx-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libusb.info",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libusbx",
    "versionInfo" : "1.0.26-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libuuid-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libuuid-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libuuid@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "(0BSD AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libuuid",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libuv-1.42.0-2.el9-4-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright Joyent, Inc. and other Node contributors\nCopyright 2002 Niels Provos <provos@citi.umich.edu>\nCopyright 2017 - Refael Ackermann Distributed\nCopyright (c) 2006-2008 Alexander Chemeris\nCopyright (c) 2011, 2018 Ben Noordhuis <info@bnoordhuis.nl>\nCopyright (c) 1995, 1999 Berkeley Software Design, Inc.\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 2006-2008 Diego Petteno\nCopyright (c) 2014, Emergya (Cloud4all, FP7/2007-2013 grant agreement 289016)\nCopyright (c) 2012, Google Inc.\nCopyright (c) 2013, Kenneth MacKay\nCopyright (c) 2013, Sony Mobile Communications AB\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1996-1999 by Internet Software Consortium\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 2015-present libuv project contributors\nCopyright (c) 2006-2008 xine project\nCopyright libuv contributors\nCopyright libuv project contributors\nCopyright the libuv project contributors\n(c) (c) L (c)\ncopyright Alexander Chemeris. Three\ncopyright Berkeley Software Design Inc, Kenneth MacKay and Emergya\ncopyright Google Inc. and Sony Mobile Communications AB.\ncopyright Niels Provos. Two\ncopyright the Internet Systems Consortium, Inc.\n\nAuthors: Alexander Chemeris; Alexander Chemeris. Three; Ben Noordhuis; Berkeley Software Design Inc, Kenneth MacKay and Emergya; Berkeley Software Design, Inc.; Daniel Richard G.; Diego Petteno; Emergya (Cloud4all, FP7/2007-2013 grant agreement 289016); Google Inc.; Google Inc. and Sony Mobile Communications AB.; Internet Software Consortium; Internet Systems Consortium, Inc.; Joyent, Inc. and other Node contributors; Kenneth MacKay; L; Niels Provos; Niels Provos. Two; Refael Ackermann Distributed; Sony Mobile Communications AB; Steven G. Johnson; libuv contributors; libuv project contributors; the Internet Systems Consortium, Inc.; the libuv project contributors; xine project",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libuv-1.42.0-2.el9_4.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libuv@1.42.0-2.el9_4?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qyjWbhJVxJx3wW_rgfRX5S5m0Ea6mrohBmFYTe_YPK4/libuv-~-2.el9_4.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libuv.org/",
    "licenseConcluded" : "(BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libuv",
    "versionInfo" : "1.42.0-2.el9_4"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libverto-0.3.2-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2011 Red Hat, Inc.\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libverto-0.3.2-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qo2g0LklrY10gBGAdJsm3JZIlz-NmXA6PaCC9M9Ly70/libverto-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libverto@0.3.2-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/latchset/libverto",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libverto",
    "versionInfo" : "0.3.2-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxcb-1.13.1-9.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2001-2006 Bart Massey, Jamey Sharp, and Josh Triplett\nCopyright (c) 2001-2004 Bart Massey and Jamey Sharp\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2009 Jatin Golani\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libxcb-1.13.1-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2BxepafAs_vSybqZ4n2ONMLIYuEvblbcJNYH20-p-S0/libxcb-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxcb@1.13.1-9.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://xcb.freedesktop.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxcb",
    "versionInfo" : "1.13.1-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxcrypt-compat-4.4.18-3.el9-arch-x86-64",
    "copyrightText" : "Copyright Alexander Peslyak\nCopyright Alexander Peslyak, Bjorn Esser\nCopyright Alexey Degtyarev\nCopyright Andrew Collier FSF\nCopyright 2015 Bjorn Esser\nCopyright Bjorn Esser\nCopyright Colin Percival\nCopyright David Burren\nCopyright Francesco Salvestrini FSF\nCopyright Free Software Foundation, Inc.\nCopyright Guido U. Draheim, Maarten Bosmans FSF\nCopyright Juniper Networks, Inc.\nCopyright Kevin Cernekee FSF\nCopyright Maarten Bosmans FSF\nCopyright Michael Bretterklieber, Bjorn Esser\nCopyright Mike Frysinger FSF\nCopyright Philip Withnall FSF\nCopyright 2005, 2008, 2009 2011 SUSE LINUX Products GmbH, Germany\nCopyright Scott James Remnant, Dan Nicholson GPL\nCopyright Solar Designer, Colin Percival\nCopyright 2000-2011 Solar Designer, 2017 Zack Weinberg\nCopyright Steven G. Johnson, Daniel Richard G. GPL\nCopyright 2002, 2003, 2004 SuSE Linux AG, Germany\nCopyright Thorsten Kukuk, Bjorn Esser, Zack Weinberg LGPL\nCopyright 2007-2017 Thorsten Kukuk and Zack Weinberg\nCopyright Tim Toolan FSF\nCopyright Vitaly Chikunov, Bjorn Esser\nCopyright Zack Weinberg\nCopyright Zack Weinberg and Free Software Foundation, Inc\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2013, Alexey Degtyarev <alexey@renatasystems.org>\nCopyright (c) 2015 Allan Jude <allanjude@FreeBSD.org>\nCopyright (c) 1998-1999 Archie Cobbs <archie@freebsd.org>\nCopyright (c) 2019 Bjorn Esser\nCopyright (c) 2017-2019 Bjorn Esser <besser82@fedoraproject.org>\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 1994 David Burren\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2004, Juniper Networks, Inc.\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2003 Michael Bretterklieber\nCopyright (c) 2014 Mike Frysinger <vapier@gentoo.org>\nCopyright (c) 2014, 2015, 2016 Philip Withnall <philip.withnall@collabora.co.uk>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 1998-2014 Solar Designer\nCopyright (c) 2002, 2007 SuSE Linux AG, Germany\nCopyright (c) 2007-2017 Thorsten Kukuk\nCopyright (c) 1998-1999 Whistle Communications, Inc.\nCopyright (c) 2017 Zack Weinberg\nCopyright (c) 2020 Zack Weinberg <zackw@panix.com>\nCopyright (c) 2018 vt@altlinux.org\ncopyright 1992-2017 Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libxcrypt-compat-4.4.18-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/m4HkP-jbPjs5G-tMNFTCec6pni87PC1MuZCJ0pUSpXQ/libxcrypt-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxcrypt-compat@4.4.18-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/besser82/libxcrypt",
    "licenseConcluded" : "(0BSD AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND LGPL-2.0-or-later AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxcrypt-compat",
    "versionInfo" : "4.4.18-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxcrypt-4.4.18-3.el9-arch-x86-64",
    "copyrightText" : "Copyright Alexander Peslyak\nCopyright Alexander Peslyak, Bjorn Esser\nCopyright Alexey Degtyarev\nCopyright Andrew Collier FSF\nCopyright 2015 Bjorn Esser\nCopyright Bjorn Esser\nCopyright Colin Percival\nCopyright David Burren\nCopyright Francesco Salvestrini FSF\nCopyright Free Software Foundation, Inc.\nCopyright Guido U. Draheim, Maarten Bosmans FSF\nCopyright Juniper Networks, Inc.\nCopyright Kevin Cernekee FSF\nCopyright Maarten Bosmans FSF\nCopyright Michael Bretterklieber, Bjorn Esser\nCopyright Mike Frysinger FSF\nCopyright Philip Withnall FSF\nCopyright 2005, 2008, 2009 2011 SUSE LINUX Products GmbH, Germany\nCopyright Scott James Remnant, Dan Nicholson GPL\nCopyright Solar Designer, Colin Percival\nCopyright 2000-2011 Solar Designer, 2017 Zack Weinberg\nCopyright Steven G. Johnson, Daniel Richard G. GPL\nCopyright 2002, 2003, 2004 SuSE Linux AG, Germany\nCopyright Thorsten Kukuk, Bjorn Esser, Zack Weinberg LGPL\nCopyright Tim Toolan FSF\nCopyright Vitaly Chikunov, Bjorn Esser\nCopyright Zack Weinberg\nCopyright Zack Weinberg and Free Software Foundation, Inc\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libxcrypt-4.4.18-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxcrypt@4.4.18-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/m4HkP-jbPjs5G-tMNFTCec6pni87PC1MuZCJ0pUSpXQ/libxcrypt-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/besser82/libxcrypt",
    "licenseConcluded" : "(0BSD AND BSD-2-Clause AND BSD-3-Clause AND LGPL-2.0-or-later AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxcrypt",
    "versionInfo" : "4.4.18-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxml2-2.9.13-10.el9-6-arch-x86-64",
    "copyrightText" : "Copyright' Copyright (c) 1999 http://www.w3.org/ W3C ( http://www.lcs.mit.edu/ MIT, http://www.inria.fr/ INRIA, http://www.keio.ac.jp/ Keio )\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2001, 2004 .br\nCopyright (c) 2000\nCopyright (c) 1999-2000 BP6.com\nCopyright (c) 1998 Bjorn Reese and Daniel Stenberg\nCopyright (c) 2000,2012 Bjorn Reese and Daniel Veillard\nCopyright (c) 2001 Bjorn Reese <breese@users.sourceforge.net>\nCopyright (c) 2010-2017 Christopher Swenson\nCopyright (c) 1998-2012 Daniel Veillard\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2000 Gary Pennington and Daniel Veillard\nCopyright (c) 2012 Google Inc.\nCopyright (c) 2002, 2003 John Fleck\nCopyright (c) 2012 Vojtech Fried\nCopyright (c) 1994-99 Wired Digital Inc.\nCopyright (c) 1994 X Consortium\nCopyright http://www.w3.org/Consortium/Legal/ipr-notice\n(c) Copyright Microsoft Cor\n(c) Copyright Microsoft Corporation, 1999\n(c) 2000 GameSquad.net\n(c) International Organization\n(c) 1999-2, 59 SAX.startElement(br) SAX.endElement(br)\n(c) 1999, 2000 WAP Forum Ltd.\ncopyright Netscape Communications, 1999 Dan Libby",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libxml2-2.9.13-10.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxml2@2.9.13-10.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zXh5C9G83MLoAI03kjiReUiPNtYgMd85h7Ql23D9ryg/libxml2-~-10.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://xmlsoft.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxml2",
    "versionInfo" : "2.9.13-10.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libyaml-0.2.5-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2017-2020 Ingy\nCopyright (c) 2006-2016 Kirill Simonov\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libyaml-0.2.5-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libyaml@0.2.5-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/L-3G_wDGKq7-PGfemsonol9y39KGVr_0xMsplewSkYA/libyaml-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yaml/libyaml",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libyaml",
    "versionInfo" : "0.2.5-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libzstd-1.5.5-1.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) Meta Platforms, Inc. and affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libzstd-1.5.5-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libzstd@1.5.5-1.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o0oZLQPUQ4XdKv_cIULnGcR3OeVG8E4VnQ89AgcrC4o/zstd-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/facebook/zstd",
    "licenseConcluded" : "(BSD-3-Clause AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libzstd",
    "versionInfo" : "1.5.5-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lksctp-tools-1.0.19-3.el9-4-arch-x86-64",
    "copyrightText" : "Copyright 2001, D. Otis\nCopyright 2003 La Monte HP Yarroll <piggy@acm.org>\nCopyright 2001 Motorola, Cisco, Intel, Nokia, La Monte Yarroll\nCopyright 2002 Nokia, La Monte Yarroll, Intel\nCopyright (c) 1999 Cisco\nCopyright (c) 1999-2000 Cisco, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2003 Hewlett-Packard Development Company, L.P\nCopyright (c) 2011 IETF Trust\nCopyright (c) 2011 IETF Trust and the persons identified as the document authors\nCopyright (c) 2001 Intel Corp.\nCopyright (c) 2002 Intel Corporation\nCopyright (c) 2001 International Business Machines, Corp.\nCopyright (c) 2001 La Monte H.P. Yarroll\nCopyright (c) 1999-2000 Motorola\nCopyright (c) 1999-2001 Motorola, Inc.\nCopyright (c) 2001 Nokia\nCopyright (c) 2001 Nokia, Inc.\nCopyright (c) The IETF Trust (2007)\nCopyright (c) The IETF Trust (2007). Abstract\nCopyright (c) The Internet Society (2000)\n(c) Copyright Frank Filz IBM Corp. 2005\n(c) Copyright Fujitsu Ltd. 2008, 2009\n(c) Copyright Hewlett-Packard Company 2004\n(c) Copyright 2007 Hewlett-Packard Development Company, L.P.\n(c) Copyright IBM Corp. 2001, 2003\n(c) Copyright REDHAT Corp. 2018\n(c) Copyright Sridhar Samudrala IBM Corp. 2004, 2005\n(c) Copyright Xin Long REDHAT Corp. 2018\n(c) 2002 Intel Corporation Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>\n(c) 2002 Intel Corporation Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com> Sridhar Samudrala <sri@us.ibm.com>\ncopyrighted by the Free Software Foundation\n\nAuthors: Cisco; Cisco, Inc.; D. Otis; Francois-Xavier Kowalski; Frank Filz IBM Corp.; Fred Douglis <douglis@research.att.com>; Free Software Foundation, Inc.; Fujitsu Ltd.; Hewlett-Packard Company; Hewlett-Packard Development Company, L.P.; IANA. Four; IBM Corp.; IETF Trust; IETF Trust and the persons identified as the document authors; Intel Corp.; Intel Corporation; Intel Corporation Inaky Perez-Gonzalez; Intel Corporation Inaky Perez-Gonzalez Sridhar Samudrala; International Business Machines, Corp.; La Monte H.P. Yarroll; La Monte H.P. Yarroll <piggy@acm.org>; La Monte HP Yarroll; La~Monte H.P. Yarroll; Matthew Ward, CS Department, Worcester Polytechnic Institute; Motorola; Motorola, Cisco, Intel, Nokia, La Monte Yarroll; Motorola, Inc.; Nokia; Nokia, Inc.; Nokia, La Monte Yarroll, Intel; REDHAT Corp.; Sridhar Samudrala IBM Corp.; The IETF Trust; The IETF Trust Abstract; The Internet Society; Xin Long REDHAT Corp.; lksctp-developers@lists.sourceforget.net; the Free Software Foundation; yfj@stanford.edu",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lksctp-tools-1.0.19-3.el9_4.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lksctp-tools@1.0.19-3.el9_4?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zirVUDydWYjDZfzkdrD-eyLSs3A-04gbmMU_zJnpwTo/lksctp-tools-~-3.el9_4.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://lksctp.sourceforge.net",
    "licenseConcluded" : "(LGPL-2.0-only AND MIT AND GPL-2.0-or-later AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lksctp-tools",
    "versionInfo" : "1.0.19-3.el9_4"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lmdb-libs-0.9.29-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2011-2021 Howard Chu, Symas Corp.\nCopyright 2000-2021 The OpenLDAP Foundation\nCopyright 1999-2003 The OpenLDAP Foundation, Redwood City, California, USA.\nCopyright (c) 2009, 2010 Martin Hedenfalk <martin@bzero.se>\nPortions Copyright 2001-2021 Howard Chu, Symas Corp.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lmdb-libs-0.9.29-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lmdb-libs@0.9.29-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/v9pdm5ZCAKqs8RcRe3ghoZZ2e_49oATr9jV_F1kwOYs/lmdb-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://symas.com/mdb",
    "licenseConcluded" : "OLDAP-2.8",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lmdb-libs",
    "versionInfo" : "0.9.29-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lua-libs-5.4.4-4.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1994 2022 Lua.org, PUC-Rio\nCopyright (c) 1994-2013 Lua.org, PUC-Rio\nCopyright (c) 2020 2022 Lua.org, PUC-Rio. Freely\nCopyright (c) 1994-2022 Lua.org, PUC-Rio $$LuaAuthors R. Ierusalimschy, L. H. de Figueiredo, W. Celes\nCopyright (c) 2015 Tom Callaway <spot@fedoraproject.org>\n\nAuthors: Lua.org, PUC-Rio; Lua.org, PUC-Rio $$LuaAuthors R. Ierusalimschy, L. H. de Figueiredo, W. Celes; Lua.org, PUC-Rio. Freely; Tom Callaway; a http://www.lua.org/authors.html' team at http://www.puc-rio.br",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lua-libs-5.4.4-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lua-libs@5.4.4-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6DzTXXK3eDqSfeAExQv5RDRSb99B4yLG8Osdjm7gG7w/lua-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.lua.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lua-libs",
    "versionInfo" : "5.4.4-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lua-posix-35.0-8.el9-arch-x86-64",
    "copyrightText" : "Copyright Natanael Copa <natanael.copa@gmail.com> 2008-2010 Clean\nCopyright Reuben Thomas <rrt@sc3d.org> 2010-2011\nCopyright (c) 2013-2020 Gary V. Vaughan\nCopyright (c) 2008-2010 Natanael Copa <natanael.copa@gmail.com>\nCopyright (c) 2010-2013 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 2006-2020 luaposix authors\n\nAuthors: Gary V. Vaughan; Leo Razoumov <slonik.az@gmail.com>; Natanael Copa; Natanael Copa Clean; Reuben Thomas; luaposix authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/lua-posix-35.0-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I9b2QlHSLFAh0ZXZtwAe7OxaJk4eIExnoS-dCoCqdEM/lua-posix-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lua-posix@35.0-8.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://luaforge.net/projects/luaposix/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lua-posix",
    "versionInfo" : "35.0-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lua-5.4.4-4.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1994 2022 Lua.org, PUC-Rio\nCopyright (c) 1994-2013 Lua.org, PUC-Rio\nCopyright (c) 2020 2022 Lua.org, PUC-Rio. Freely\nCopyright (c) 2015 Tom Callaway <spot@fedoraproject.org>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/lua-5.4.4-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6DzTXXK3eDqSfeAExQv5RDRSb99B4yLG8Osdjm7gG7w/lua-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lua@5.4.4-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.lua.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lua",
    "versionInfo" : "5.4.4-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lz4-libs-1.9.3-5.el9-arch-x86-64",
    "copyrightText" : "Copyright Kyle Harper\nCopyright Takayuki Matsuoka\nCopyright (c) 2015, Louis P. Santillan <lpsantil@gmail.com>\nCopyright (c) Przemyslaw Skibinski 2016-present\nCopyright (c) 2011-2016, Yann Collet\nCopyright (c) 2011-2020 Yann Collet\nCopyright (c) Yann Collet 2011-present\nCopyright (c) 2014, lpsantil\nCopyright (c) 2016-present, Facebook, Inc.\nCopyright (c) 2016-present, Przemyslaw Skibinski\nCopyright (c) 2016-present, Przemyslaw Skibinski, Yann Collet\nCopyright (c) 2011-present, Yann Collet\nCopyright (c) 2018-present lzutao <taolzu(at)gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lz4-libs-1.9.3-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OOY6Ndo2TS-H4LJ3vcZblUY_oc-xxT-z2f9JsQvcf8Y/lz4-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lz4-libs@1.9.3-5.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lz4.github.io/lz4/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lz4-libs",
    "versionInfo" : "1.9.3-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-lib-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2018 Google, Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2001-2022 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2004-2017 QOS.ch\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-lib-3.8.5-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XEGvuYGIacFGCMxrLhAVpwDrgxA9MPQnDRDK5IeNnrw/maven-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-lib@3.8.5-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-lib",
    "versionInfo" : "3.8.5-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-openjdk17-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2018 Google, Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2004-2017 QOS.ch\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-openjdk17-3.8.5-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-openjdk17@3.8.5-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XEGvuYGIacFGCMxrLhAVpwDrgxA9MPQnDRDK5IeNnrw/maven-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-openjdk17",
    "versionInfo" : "3.8.5-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-resolver-1.7.3-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2008 The Apache Software Foundation\nCopyright 2010-2021 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-resolver-1.7.3-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-resolver@1.7.3-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eunum1Ifb2ESkl5_agPXm51xIDkzPW7074O4uPIbFlo/maven-resolver-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-resolver",
    "versionInfo" : "1.7.3-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-shared-utils-3.3.4-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-shared-utils-3.3.4-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-shared-utils@3.3.4-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iRWzqPewMbNeyQKjJhRhX5ufd6uI0upx-IUPDngTqQQ/maven-shared-utils-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/shared/maven-shared-utils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-shared-utils",
    "versionInfo" : "3.3.4-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-wagon-3.5.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2003-2021 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-wagon-3.5.1-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-wagon@3.5.1-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g3vcRdlps3b9CzAAAvkYQpGyYk-Q5VGKJVqwqlTK7dc/maven-wagon-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/wagon",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-wagon",
    "versionInfo" : "3.5.1-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2018 Google, Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2004-2017 QOS.ch\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-3.8.5-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven@3.8.5-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XEGvuYGIacFGCMxrLhAVpwDrgxA9MPQnDRDK5IeNnrw/maven-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven",
    "versionInfo" : "3.8.5-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-microdnf-3.9.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2020-2021 Daniel Hams X-Command-Syntax\nCopyright 2016 Igor Gnatenko X-Command-Syntax\nCopyright 2017 Jaroslav Rohel X-Command-Syntax\nCopyright 2021 Neal Gompa X-Command-Syntax\nCopyright 2010-2016 Richard Hughes, Colin Walters, Igor Gnatenko X-Command-Syntax\nCopyright (c) 2016 Colin Walters <walters@verbum.org>\nCopyright (c) 2020-2021 Daniel Hams X-Command-Syntax\nCopyright (c) 2020-2021 Daniel Hams <daniel.hams@gmail.com>\nCopyright (c) 2022 Emil Renner Berthing\nCopyright (c) 2022 Emil Renner Berthing X-Command-Syntax\nCopyright (c) 2022 Emil Renner Berthing <esmil@mailme.dk>\nCopyright (c) 2016 Igor Gnatenko X-Command-Syntax\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2017 Jaroslav Rohel X-Command-Syntax\nCopyright (c) 2017 Jaroslav Rohel <jrohel@redhat.com>\nCopyright (c) 2021 Neal Gompa X-Command-Syntax\nCopyright (c) 2021 Neal Gompa <ngompa13@gmail.com>\nCopyright (c) 2019 Red Hat, Inc.\nCopyright (c) 2019 Red Hat, Inc. X-Command-Syntax\nCopyright (c) 2010-2016 Richard Hughes, Colin Walters, Igor Gnatenko X-Command-Syntax\nCopyright (c) 2010-2015 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/m/microdnf-3.9.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UvGzFfnC0BDLjUZ0pVNxqaAqU0onTeeekwtDcY6-PaQ/microdnf-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/microdnf",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/microdnf",
    "versionInfo" : "3.9.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-mkfontscale-1.2.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright 1993, 1994, 1998 The Open Group\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2008, Oracle and/or its affiliates\nCopyright (c) 2015 Thomas Klausner\nCopyright (c) 1994 X Consortium\nCopyright (c) 2002-2008 by Juliusz Chroboczek\nCopyright (c) 2015 by Thomas Klausner",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/mkfontscale-1.2.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/mkfontscale@1.2.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GfpksaD66iM81TWieqXUgKq_0Mqa2NDKrP2dsYwF9Wc/mkfontscale-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/mkfontscale",
    "versionInfo" : "1.2.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-mpfr-4.1.0-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 2000-2020 Free Software Foundation, Inc.\nCopyright 2002-2020 Free Software Foundation, Inc.\nCopyright 2008-2020 Free Software Foundation, Inc.\nCopyright 2020 Free Software Foundation, Inc.\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright $y. $z Free Software Foundation\ncopyright 2004 line\ncopyright to FSF\ncopyright to Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/m/mpfr-4.1.0-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZhjeGTlLT2ghGsXIBSUNSBM92vz65QjKQMJm-sovEgI/mpfr-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/mpfr@4.1.0-7.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.mpfr.org/",
    "licenseConcluded" : "LGPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/mpfr",
    "versionInfo" : "4.1.0-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ncurses-base-6.2-10.20210508.el9-arch-noarch",
    "copyrightText" : "AttrOf (c), GetPair (c)\nCopyright 1998-2012,2018 Free Software Foundation, Inc.\nCopyright 1980,1991,1992,1993 The Regents of the University of California\nCopyright 2018-2020,2021 Thomas E. Dickey\nCopyright 1994 X Consortium\nCopyright 2001 by Pradeep Padala\nCopyright 1996-2020,2021 by Thomas E. Dickey\nCopyright (c) 1989 BULL SA\nCopyright (c) 1980, 1991, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Pradeep Padala\nEugene V. Melaragno <aldomel@ix.netcom.com> 2000\nThomas E. Dickey <dickey@clark.net> 1996\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com>\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Juergen Pfeifer\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Sven Verdoolaege\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Thomas E. Dickey\n(c) CMD Coding Method Delimiter E CNL Cursor Next\ncopyright 1997 by Joey Hess",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/ncurses-base-6.2-10.20210508.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KybE_GrPyZFp64vtU-cVoFyI9Om2xUqfbdQCrTJUh5E/ncurses-~-~.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ncurses-base@6.2-10.20210508.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://invisible-island.net/ncurses/ncurses.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ncurses-base",
    "versionInfo" : "6.2-10.20210508.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ncurses-libs-6.2-10.20210508.el9-arch-x86-64",
    "copyrightText" : "AttrOf (c), GetPair (c)\nCopyright 1998-2002,2003 Free Software Foundation, Inc.\nCopyright 1980,1991,1992,1993 The Regents of the University of California\nCopyright 2018-2020,2021 Thomas E. Dickey\nCopyright 1994 X Consortium\nCopyright 2001 by Pradeep Padala\nCopyright 1996-2020,2021 by Thomas E. Dickey\nCopyright (c) 1989 BULL SA\nCopyright (c) 1980, 1991, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Pradeep Padala\nEugene V. Melaragno <aldomel@ix.netcom.com> 2000\nThomas E. Dickey <dickey@clark.net> 1996\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com>\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Juergen Pfeifer\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Sven Verdoolaege\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Thomas E. Dickey\n(c) CMD Coding Method Delimiter E CNL Cursor Next\ncopyright 1997 by Joey Hess",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/ncurses-libs-6.2-10.20210508.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KybE_GrPyZFp64vtU-cVoFyI9Om2xUqfbdQCrTJUh5E/ncurses-~-~.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ncurses-libs@6.2-10.20210508.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://invisible-island.net/ncurses/ncurses.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ncurses-libs",
    "versionInfo" : "6.2-10.20210508.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nettle-3.10.1-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 2001-2003, 2005, 2006\nCopyright 2009-2012 Aleksey Kravchenko <rhash.admin@gmail.com>\nCopyright 2012-2013 Andrew M.\nCopyright 2019 Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nCopyright 1991, 1996, 1999, 2000, 2007 Free Software Foundation, Inc.\nCopyright 2000-2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright, Next Conventions, Prev Introduction\nCopyright 2002, 2013 Niels Moller\nCopyright 2013 Nikos Mavrogiannopoulos\nCopyright, Prev Top\nCopyright, Previous Top\nCopyright (c) 2021 Amitay Isaacs, IBM Corporation\nCopyright (c) 2021 Amitay Isaacs & Martin Schwenke, IBM Corporation\nCopyright (c) 2015 Amos Jeffries, Niels Moller\nCopyright (c) 2011 Andres Mejia\nCopyright (c) 2017 Daiki Ueno\nCopyright (c) 2002 Dan Egnor, Niels Moller\nCopyright (c) 1992 Dana L. How\nCopyright (c) 2011 Daniel Kahn Gillmor\nCopyright (c) 2020 Dmitry Baryshkov\nCopyright (c) 2015 Dmitry Eremin-Solenikov\nCopyright (c) 2015 Dmity Eremin-Solenikov\nCopyright (c) 2024 Eric Richter, IBM Corporation\nCopyright (c) 2014 Exegin Technologies Limited\nCopyright (c) 1998, 2001 FSF, Ray Dassen, Niels Moller\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2023- IBM Inc.\nCopyright (c) 1999 J.H.M. Dassen (Ray) <jdassen@wi.LeidenUniv.nl>\nCopyright (c) Jeremy Allison 2012\nCopyright (c) 2006, 2012 Jeronimo Pellegrini, Niels Moller\nCopyright (c) 2017 Jia Zhang\nCopyright (c) 2013 Joachim Strombergon\nCopyright (c) 2013 Joachim Strombergson\nCopyright (c) 2011 Katholieke Universiteit Leuven\nCopyright (c) 2020 Mamone Tarsha\nCopyright (c) 2021, 2022 Mamone Tarsha, Niels Moller\nCopyright (c) 2021 Martin Schwenke & Alastair D'Silva, IBM Corporation\nCopyright (c) 2021 Martin Schwenke, Amitay Isaacs & Alastair D'Silva, IBM Corporation\nCopyright (c) 2021 Martin Schwenke & Amitay Isaacs, IBM Corporation\nCopyright (c) Michael Adam 2012\nCopyright (c) 2021 Michael Weiser\nCopyright (c) 2006,2007 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 2021 Nicolas Mora\nCopyright (c) 2021 Nicolas Mora 2021 Niels Moller\nCopyright (c) 2000-2002, 2004, 2005, 2011, 2012, 2016, 2020 Niels Moller\nCopyright (c) 2003 Niels Moller, Andreas Sigfridsson\nCopyright (c) 2002 Niels Moller, Dan Egnor\nCopyright (c) 2002, 2009, 2014 Niels Moller, Magnus Holmgren\nCopyright (c) 2003 Niels Moller, Marcus Comstedt\nCopyright (c) 2001, 2012 Niels Moller, Nikos Mavrogiannopoulos\nCopyright (c) 2020 Niels Moller and Mamone Tarsha\nCopyright (c) 2020 Niels Moller and Torbjorn Granlund\nCopyright (c) 2012 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Nikos Mavrogiannopoulos, Niels Moller\nCopyright (c) 2003 Nikos Mavroyanopoulos\nCopyright (c) 2014 Owen Kirby\nCopyright (c) 2001, 2004 Peter Gutmann, Andrew Kuchling, Niels Moller\nCopyright (c) 2000, 2001, 2002 Rafael R. Sevilla, Niels Moller\nCopyright (c) 2013 Red Hat\nCopyright (c) 2015 Red Hat, Inc.\nCopyright (c) 1998 Ross Anderson, Eli Biham, Lars Knudsen\nCopyright (c) 1999 Ruud de Rooij <ruud@debian.org>\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 2012 Simon Josefsson, Niels Moller\nCopyright (c) 1998-2015 Solar Designer\nCopyright (c) Stefan Metzmacher 2012\nCopyright (c) 2020 Stephen R. van den Berg\nCopyright (c) 2021 Tianjia Zhang <tianjia.zhang@linux.alibaba.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2022 Zoltan Fridrich\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/nettle-3.10.1-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e7hDnnShV_6aL6iU5WLtH5jQRg_HkPSAAXP_I00RHBg/nettle-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nettle@3.10.1-1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.lysator.liu.se/~nisse/nettle/",
    "licenseConcluded" : "(GPL-2.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nettle",
    "versionInfo" : "3.10.1-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nmap-ncat-7.92-3.el9-arch-x86-64-epoch-3",
    "copyrightText" : "Aqauteur (c) 1996 -2005 Insecure &.Com LLC\nCOPYRIGHT IBM CORP 1996,2004 - LCFD Error\nCOPYRIGHT content (c) d+ Cisco Systems\nCommand Shell Copyright 2006-20\nCopyright 2005-....\nCopyright AMX LLC\nCopyright Axis Communications. Network CD-ROM Server\nCopyright 1997, 2000, 2001, 2002, 2006, Benjamin Sittler\nCopyright 2002 - 2004 220- BolinTech Inc p/BolinTech Dream FTP\nCopyright (C ) AMX Corp 2002-2003\nCopyright (C )2003 Hewlett-Packard Development Company\nCopyright CONTENT Copyright (c ) 2003 3Com Corporation\nCopyright (C ) d+ Multi-Tech Systems, Inc ., Multi-Tech Systems, Inc\nCopyright (C ) d+- d+ by Zhone Technologies\nCopyright (C ) d d d d Star Micronics co ., Ltd\nCopyright, 3Com Corporation or its subsidiaries\nCopyright 1998-2008 Double Precision, Inc\nCopyright Dug Song\nCopyright 2003-2004, Engenio Information Technologies, Inc\nCopyright 2005, Extron Electronics, IPL T S2\nCopyright 2008 Fingerprint HP\nCopyright 1992-2015 Free Software Foundation, Inc.\nCopyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll\nCopyright Guy Martin 2006-20\nCopyright 2001,2003 Hewlett-Packard Development Company\nCopyright 2006-2009 Horizon Control Inc\nCopyright IBM Corp 1999\nCopyright IBM Corporation, 1999\nCopyright 2005-2021 Insecure.Com LLC\nCopyright 2008 Insecure.Com LLC Ndiff\nCopyright Jean-loup Gailly Osma Ahvenlampi <Osma.Ahvenlampi@hut.fi>\nCopyright 1995-2017 Jean-loup Gailly and Mark Adler\nCopyright Kepler Project 2003 (http://www.keplerproject.org/luafilesystem)\nCopyright 2007, Lua.org\nCopyright 2007, Lua.org & PUC-Rio (https://svn.nmap.org/nmap/docs/licenses/MIT)\nCopyright 1995-2017 Mark Adler\nCopyright 2007 Microsoft Corporation Fingerprint Microsoft\nCopyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2003-2010, Red Condor, Inc\nCopyright 2000-2002 Redline Communications Inc Username p/Redline Communications\nCopyright 2001 Sun Microsystems Inc.\nCopyright Tektronix, Inc\nCopyright Tiago Dionizio (tiago.dionizio@gmail.com)\nCopyright TippingPoint 2002, 2003, 2004 and 2005\nCopyright WebGate Inc\nCopyright by ARESCOM\nCopyright 1989 by Carnegie Mellon\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright by Huawei Technologies Co ., Ltd Login\nCopyright by Huawei Technologies Co ., Ltd Login p/Huawei Home Gateway\nCopyright 2006, 2011 by SnertSoft\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c ) 2000\nCopyright (c) 2006 Adam Jackson\nCopyright (c) 2014 Alexander Lamaison <alexander.lamaison@gmail.com>\nCopyright (c) 2017 Ali Abdulkadir <autostart.ini@gmail.com>\nCopyright (c) 1996, 1997 Andreas Dilger\nCopyright (c) 1996, 1997 Andreas Dilger Distributed\nCopyright (c) 2007 Andy Lutomirski\nCopyright (c) 2016, Art <https://github.com/wildart>\nCopyright (c) 2001 Atsushi Onoe\nCopyright (c) 2004-2006 Benjamin Erb\nCopyright (c) 1997,99 Borland Corp.\nCopyright (c) 1997,99 Borland Corporation\nCopyright (c) 1998 Brian Raiter <breadbox@muppetlabs.com>\nCopyright (c) 1996-2009 Brocade Communications Systems, Inc. Brocade NetIron CER\nCopyright (c) 1996-2011 Brocade Communications Systems, Inc. HW Stackable\nCopyright (c) 2005 - 2010 CACE Technologies, Davis (California)\nCopyright (c) 2005 - 2009 CACE Technologies, Inc. Davis (California)\nCopyright (c) 2003 Chris Anderson <christop@charm.net>\nCopyright (c) Chris Leick <c.leick@vollbio.de> , 2008\nCopyright (c) 1997 Christian Michelsen Research AS Advanced Computing\nCopyright (c ) 2004 - 2006 3Com Corporation\nCopyright (c) 2003 Cosmin Truta\nCopyright (c) 2010 Craig Heffner\nCopyright (c) 2008-2009 Daniel Roethlisberger <daniel@roe.ch>\nCopyright (c) 2009-2014 Daniel Stenberg\nCopyright (c) 2010-2014, Daniel Stenberg <daniel@haxx.se>\nCopyright (c) 2005-2008 Daniel Stone\nCopyright (c) 1998-2003 Daniel Veillard\nCopyright (c ) 1995,1996 Danny Gasparovski and others\nCopyright (c) 1996 David Mazieres <dm@lcs.mit.edu>\nCopyright (c) 2002-2003 Dmitriy Anisimkov\nCopyright (c) 1999-2011 Douglas Gilbert\nCopyright (c) 2000-2006 Dug Song <dugsong@monkey.org>\nCopyright (c ) ELSA AG\nCopyright (c ) ELSA AG, Aachen Germany\nCopyright (c) 1998 Egbert Eich\nCopyright (c) 2007 Eli Fant <elifantu@mail.ru>\nCopyright (c ) 2005 - 2008 Enterasys, Inc\nCopyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\nCopyright (c) 2007-2008 Even Rouault\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006 Expat maintainers\nCopyright (c) 1996-2000 Express Logic Inc.\nCopyright (c) 1996-2001 Express Logic Inc. ThreadX JADE/Green Hills\nCopyright (c) 1996-2007 Foundry Networks, Inc. Fingerprint Foundry Networks FES2402\nCopyright (c) 1996-2002 Foundry Networks, Inc. Fingerprint Foundry Networks ServerIron\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1994, 1995-8, 1999, 2001 Free Software Foundation, Inc.\nCopyright (c ) 2000-2002, Fuji Xerox Co ., Ltd\nCopyright (c) 2007 Fulko Hew, SITA INC Canada, Inc <fulko.hew@sita.aero>\nCopyright (c) 2008 Gabor Stefanik\nCopyright (c) 2013 Gavin Kistner\nCopyright (c) 2013-2014 Gavin Kistner <!@phrogz.net>\nCopyright (c) 1998-2005 Gilles Vollant\nCopyright (c) 1998 - 2010 Gilles Vollant, Even Rouault, Mathias Svensson\nCopyright (c) 1998-2010 Gilles Vollant (minizip) http://www.winimage.com/zLibDll/minizip.html\nCopyright (c) 1998, 1999, 2000 Glenn Randers-Pehrson\nCopyright (c) 2007-2008, Google Inc.\nCopyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) Henrik Ravn 2004\nCopyright (c ) 1998-2006 Huawei Technologies Co ., Ltd\nCopyright (c) 1990-2000 Info-ZIP.\nCopyright (c) Insecure.Com LLC (fyodor@insecure.org)\nCopyright (c) 2006-2007 Intel Corporation\nCopyright (c ) 2002 InterSystems Inc\nCopyright (c) 2011 Jakub Zawadzki\nCopyright (c) 1998-2003 James Henstridge 2004-2006 Johan Dahlin\nCopyright (c) 1995-1998 Jean-loup Gailly\nCopyright (c) 1995-1996 Jean-loup Gailly, Brian Raiter and Gilles Vollant\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-2003 Jean-loup Gailly and Mark Adler\nCopyright (c) Jiang Jie\nCopyright (c) 2006-2008 Johan Dahlin\nCopyright (c) 2007, 2008 Johannes Berg\nCopyright (c) 2016 Julian Andres Klode <jak@debian.org>\nCopyright (c) 2000-2001 Juliusz Chroboczek\nCopyright (c) 1996 Juniper Networks, Inc.\nCopyright (c ) 2001 KYOCERA MITA CORPORATION Copyright (c ) 2003 Revised Edition KYOCERA MITA CORPORATION\nCopyright (c) 1999 Keith Packard\nCopyright (c) 2003 Kepler Project\nCopyright (c) 1995-1999 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 2010 Lars Nordin <Lars.Nordin@SDlabs.se>\nCopyright (c) 1994-2008 Lua.org, PUC-Rio\nCopyright (c) 2006 Luc Verhaegen\nCopyright (c) 2014 Luigi Rizzo\nCopyright (c) 2013-2015 Marc Hoersken <info@marc-hoersken.de>\nCopyright (c) 1995-2003 Mark Adler\nCopyright (c) 1999 Masaki Hirabaru <masaki@merit.edu>\nCopyright (c) 2009-2010 Mathias Svensson http://result42.com\nCopyright (c) 2014 Michal Labedzki for Tieto Corporation\nCopyright (c) 2013, Michal Sekletar\nCopyright (c) 1988-2005 Microsoft Corporation\nCopyright (c) 2007 Mike Kershaw\nCopyright (c) 2005,2006 Mikhail Gusarov\nCopyright (c) 2005,2006 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2009 NVIDIA Corporation\nCopyright (c) 1999 - 2005 NetGroup, Politecnico di Torino (Italy)\nCopyright (c) 2006 Nokia Corporation\nCopyright (c) 2006 Paolo Abeni (Italy)\nCopyright (c) 2011 Patrick Joseph Donnelly\nCopyright (c) 2016 Patrick Joseph Donnelly (batrick@batbytes.com)\nCopyright (c) 2015 Patrick Monnerat, D+H <patrick.monnerat@dh.com>\nCopyright (c) 2013, Petar Alilovic, Faculty of Electrical Engineering and Computing, University of Zagreb\nCopyright (c) 2006-2008 Peter Hutterer\nCopyright (c) 1995-1997 Peter Mattis, Spencer Kimball and Josh MacDonald\nCopyright (c) 2008 Peter Simons <simons@cryp.to>\nCopyright (c) 1999, 2000 Politecnico di Torino\nCopyright (c) 2017 Pure Storage, Inc.\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Python Software Foundation\nCopyright (c) QNX Software Systems Ltd. 1982,1998 Fingerprint Omron\nCopyright (c) 1994-2008 Ralf S. Engelschall <rse@engelschall.com>\nCopyright (c) 2007-2009 Red Hat, Inc.\nCopyright (c) 1999 Red Hat Software\nCopyright (c) 1988-1997 Sam Leffler\nCopyright (c) 2002-2005 Sam Leffler, Errno Consulting\nCopyright (c) 2004-2007 Sara Golemon <sarag@libssh2.org>\nCopyright (c) 1991-1997 Silicon Graphics, Inc.\nCopyright (c) 2008, 2009 Simon Josefsson\nCopyright (c) 2009, 2010 Simon Josefsson <simon@josefsson.org>\nCopyright (c) 2006-2009 Simon Thum\nCopyright (c) 1998 Softweyr LLC.\nCopyright (c ) StarWind Software d+- d\nCopyright (c) 1987, 2003-2006, 2008-2009 Sun Microsystems, Inc.\nCopyright (c ) 2005-2007 TeamF1, Inc (www .TeamF1 .com )\nCopyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright (c) 1998, 1999, 2000 Thai Open Source Software Center Ltd and Clark Cooper\nCopyright (c) 2006-2007 The\nCopyright (c) 2007-2011 The LIBLINEAR Project\nCopyright (c) The Nmap Project\nCopyright (c) 1998-2008 The OpenSSL Project\nCopyright (c) 1982, 1986, 1993 The Regents of the University of California\nCopyright (c) The TCPdump Group\nCopyright (c) 2003-2010 Tiago Dionizio\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2000 Torsten Landschoff <torsten@debian.org> Sebastian Krahmer <krahmer@cs.uni-potsdam.de>\nCopyright (c ) 2002 - 2011 Trapeze Networks, Inc\nCopyright (c) 1997-2008 University of Cambridge\nCopyright (c) 2007-2011 VMware, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c ) 2002-2006 Xerox Corporation\nCopyright (c) 1997 Yen Yen Lim and North Dakota State University\nCopyright (c) 1998 by Andreas R. Kleinert\nCopyright (c) 1998 by Bob Dellaca\nCopyright (c ) 2001, 2002, 2003, 2004 by Cisco Systems, Inc\nCopyright (c) 1995-2006 by Cisco Systems, Inc. Fingerprint Cisco Catalyst\nCopyright (c) 2003 by Cosmin Truta\nCopyright (c) 2009 by Daiki Ueno\nCopyright (c) 2008-2010 by Daniel Stenberg\nCopyright (c) 1998-2010 - by Gilles Vollant\nCopyright (c) 2004 by Henrik Ravn\nCopyright (c) 1996 by Internet Software Consortium\nCopyright (c) 1998,1999,2000 by Jacques Nomssi Nzali\nCopyright (c) 1995-2003 by Jean-loup Gailly\nCopyright (c) d+ Bestellen Software, LLC\nCopyright (c ) d+ Nortel Networks, Inc\nCopyright (c ) d+- d+ Alcatel-Lucent\nCopyright (c ) d+- d+, Fuji Xerox Co ., Ltd\nCopyright (c ) d+- d+ HUAWEI TECH CO LTD\nCopyright (c ) 2004-(20 d d) Hangzhou H3C Tech Co ., Ltd\nCopyright (c ) d+- d+ Hangzhou H3C Tech Co ., Ltd\nCopyright (c ) 20 d d Microsoft Corporation\nCopyright (c ) 2000-2 d d d, Fuji Xerox Co ., Ltd\nCopyright (c ) d d d d\nCopyright (c ) (? d+, d+ d+- d+), Fuji Xerox Co ., Ltd\nCopyright (c ) d d d d GWAVA, Inc\nCopyright (c ) 2002 - d d d d Juniper Networks, Inc\nCopyright (c ) d d d d, Red Hat, Inc ., and individual contributors\nCopyright (c ) d d d d TDSi Ltd\nCopyright 1998- d+ Double Precision, Inc\nCopyright 1998-( d+) Double Precision, Inc\nCopyright d+, LSI Logic Inc\nCopyright 1985- d+ Microsoft Corp\nCopyright d+ Sun Microsystems, Inc\nCopyright 2001-20 d d\nCopyright d+- d+ Bytefusion Ltd Unregistered Evaluation\nCopyright d+- d+ GoodTech Systems, Inc\nCopyright 2004-20 d d H2 Group\nCopyright 2004-20 d d H2 Group Sorry\nCopyright d+- d+ Redline Communications Inc\nCopyright 2005- d (datetime.today .year), ncontent\nCopyright 1985- d d d d Microsoft Corp\nCopyrighted Materials, 2006\nCopyright 1996-200 p/Quagga routing software\nCopyright xa92008 Motorola, Inc\nCopyright xa9 d+ Netopia, Inc\nCopyright xa9 d+- d+ TNT Software, Inc\nPortions Copyright 1989 by Carnegie Mellon\nPortions Copyright (c) 2001 Daniel Hartmeier\nPortions Copyright (c) 2001-2008 Insecure.Com LLC\nPortions Copyright (c) 1996 Juniper Networks, Inc.\nPortions Copyright (c) 1995, 1996, 1997 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nPortions Copyright (c) 1983 Regents of the University of California\nPortions Copyright (c) 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997 The Regents of the University of California\nPortions Copyright (c) 1997 Yen Yen Lim and North Dakota State University\nPortions Copyright (c) 1995, 1996, 1997, 1998, and 1999 WIDE Project\nPortions Copyright (c) 2001 by Cisco systems, Inc.\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa\nStar Online Blue Burst Game Server Copyright 1999-2004 SONICTEAM\n(c) 2005\n(c) Avaya Networks Fingerprint Cisco\n(c) Copyright Henrik Ravn 2004\n(c) 2004-2009 Fingerprint Endian\n(c) 1996 -2005 Insecure &.Com LLC\n(c) 1996 -2007 Insecure &.Com LLC &. Az Nmap\n(c) 1996 -2005 Insecure &.Com LLC &. O Nmap\n(c) 1996-2020 Insecure.Com LLC 'The Nmap Project Nmap\n(c) 1995-2017 Jean-loup Gailly & Mark Adler\n(c) 1995-2010 Jean-loup Gailly and Mark Adler\n(c) 1999-2006 Juniper Networks, Inc.\n(c) 1985-2003 Microsoft Corp. (Chinese) Fingerprint Microsoft\n(c) 2006 NewMedia-NET GmbH\n(c) Nortel Networks Linksys\n(c) 1996,2000 On Time Informatik\n(c) 1996 -2005Shi Insecure\n(c) 2001 Tektronix\n(c) 1996 -2005 a Insecure &.Com LLC &. Nmap este marca inregistrata a Insecure &.Com LLC &\n(c) 1996-2010 by Insecure.Com LLC.\n(c) 2005 en2018 Insecure &.Com LLC &\n(c) 1996 en2020 Insecure &.Com LLC 'The Nmap Project &. Nmap\ncopyright HLS Austria 1991\ncopyright Patrik Karlsson\ncopyright Ron Bowes\ncopyright Same as Nmap\ncopyright 2006 by Internet Security Systems, Inc\ncopyright (c) 2005-2012 Insecure &.Com LLC\ncopyright (c) 1996-2010 Julian R Seward\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyright (c) 1991-2010, Thomas G. Lane, Guido Vollbeding\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\nholder is Tim Hudson (tjh@cryptsoft.com)\n\nAuthors: (C  AMX Corp; (C  d d d d Star Micronics co ., Ltd; (C  d+ Multi-Tech Systems, Inc ., Multi-Tech Systems, Inc; (C  d+- d+ by Zhone Technologies; (c  (? d+, d+ d+- d+), Fuji Xerox Co ., Ltd; (c  - 3Com Corporation; (c  - Enterasys, Inc; (c  - Trapeze Networks, Inc; (c  - d d d d Juniper Networks, Inc; (c  20 d d Microsoft Corporation; (c  2004-(20 d d) Hangzhou H3C Tech Co ., Ltd; (c  Danny Gasparovski and others; (c  ELSA AG; (c  ELSA AG, Aachen Germany; (c  Fuji Xerox Co ., Ltd; (c  Huawei Technologies Co ., Ltd; (c  InterSystems Inc; (c  KYOCERA MITA CORPORATION (c  Revised Edition KYOCERA MITA CORPORATION; (c  StarWind Software d+- d; (c  TeamF1, Inc (www .TeamF1 .com; (c  Xerox Corporation; (c  by Cisco Systems, Inc; (c  d d d d; (c  d d d d GWAVA, Inc; (c  d d d d TDSi Ltd; (c  d d d d, Red Hat, Inc ., and individual contributors; (c  d d d, Fuji Xerox Co ., Ltd; (c  d+ Nortel Networks, Inc; (c  d+- d+ Alcatel-Lucent; (c  d+- d+ HUAWEI TECH CO LTD; (c  d+- d+ Hangzhou H3C Tech Co ., Ltd; (c  d+- d+, Fuji Xerox Co ., Ltd; 2005Shi Insecure; 220- BolinTech Inc p/BolinTech Dream FTP; 3Com Corporation or its subsidiaries; A.M. Kuchling <amk@amk.ca>; AMX LLC; ARESCOM; Aaron Leininger; Adam Jackson; Adam Stevko; Aleksandar Nikolic; Aleksandar Nikolic Ange Gutek; Aleksandar Nikolic John R. Bond; Aleksandr Timorin Daniel Miller; Alessandro ZANNI <alessandro.zanni@bt.com> Daniel Miller; Alexander Lamaison; Alexander Rudakov; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Meshcheryakov; Alexey Neyman <avn@pigeonpoint.com>; Alexey Tyurin; Ali Abdulkadir; Andreas Dilger; Andreas Dilger Distributed; Andreas R. Kleinert; Andrew Orr; Andrey Zhukov; Andy Lutomirski; Ange Gutek; Ange Gutek Patrik Karlsson; Ange Gutek Peter Hill Gyanendra Mishra Paulino Calderon; Ange Gutek Rob Nicholls; Aqauteur Insecure &.Com LLC; Art; Arturo Buanzo Busleiman; Atanu Ghosh (atanu@cs.ucl.ac.uk); Atsushi Onoe; Avaya Networks Fingerprint Cisco; Axis Communications. Network CD-ROM Server; Benjamin Erb; Benjamin Sittler; Bernd Stroessenreuther <berny1@users.sourceforge.net> Gyanendra Mishra; Bertrand Bonnefoy-Claudet; Bertrand Bonnefoy-Claudet <bertrand@cryptosense.com>; Bob Dellaca; Bob Dellaca <bobdl@xtra.co.nz>; Borland Corp.; Borland Corporation; Brandon Enright; Brandon Enright Ron Bowes; Brendan Coles; Brendan Coles Gyanendra Mishra; Brian Raiter; Brian Raiter <breadbox@muppetlabs.com>; Brocade Communications Systems, Inc. Brocade NetIron CER; Brocade Communications Systems, Inc. HW Stackable; CACE Technologies, Davis (California); CACE Technologies, Inc. Davis (California); CONTENT (c  3Com Corporation; CONTENT ChenXiaohui; Carlos Pantelides; Carlos Rios <c_rios@sonda.cl>; Carnegie Mellon; Cerberus, LLC; Chanthy Toeung <chanthy.toeung@ca.kontron.com>; Chris Anderson; Chris Anderson <christop@charm.net>; Chris Bontje <chris_bontje@selinc.com>; Chris Gibson (chris@linuxops.net); Chris Leick; Chris Woodbury; Chris Woodbury Thomas Buchanan; Christian Michelsen Research AS Advanced Computing; Cisco Systems, Inc. Fingerprint Cisco Catalyst; Cisco systems, Inc.; Claudio Criscione; Claudio Criscione, Paolo Canaletti; Claudiu Perta; Claudiu Perta <claudiu.perta@gmail.com>; Clemens Lang <cllang@redhat.com>; Colin Rice <dah4k0r@gmail.com>; Command Shell; Computer Net Solutions; Cosmin Truta; Cosmin Truta <cosmint@cs.ubbcluj.ro>; Craig Heffner; Daiki Ueno; Daniel Borca; Daniel Ehrlich (ehrlich@cse.psu.edu); Daniel Hartmeier; Daniel Miller; Daniel Miller. Patrik Karlsson; Daniel Roethlisberger; Daniel Stenberg; Daniel Stenberg <daniel@haxx.se>; Daniel Stone; Daniel Veillard; Daniele Orlandi <daniele@orlandi.com>; Darren Reed <Darren.Reed@Sun.COM>; David Fifield; David Fifield <david@bamsoftware.com>; David Fifield Ange Gutek; David Fifield Xu Weilin; David Fifield. James Levine; David Mazieres; David Mazieres <dm@lcs.mit.edu>; David Turner, Robert Wilhelm, and Werner Lemberg; David Vincenzetti (vince@cryptonet.it); Devin Bjelland; Dhiru Kholia; Didier Stevens Daniel Miller; Didier Stevens and Daniel Miller; Diego Casorran (dcr8520@amiga.org); Diego Nehab; Diego Nehab RCS; Digital Equipment Corporation; Diman Todorov; Dirk Eddelbuettel <edd@debian.org>; Djalal Harouni; Dmitriy Anisimkov; Dmitriy Anisimkov <anisimkov@yahoo.com>; Double Precision, Inc; Doug Hoyte; Doug Hoyte Patrick Donnelly; Doug Hoyte http://www.hcsw.org DNS Caching; Doug Hoyte. That; Douglas Gilbert; Dr Steve Sangwine <sjs@essex.ac.uk>; Duarte Silva <duarte.silva@serializing.me>; Dug Song; Dug Song. Song, Dug A; ETH Zurich, http://en.wikipedia.org/wiki/Bluebottle_OS Fingerprint Bluebottle OS Class ETH Zurich Bluebottle; Easy Ftp Server WWW-Authenticate BASIC; Eddie Bell; Eddie Bell <ejlbell@gmail.com>; Eddie Bell Piotr Olma; Eddie Bell Rob Nicholls Ange Gutek David Fifield; Eddie Bell ejlbell@gmail.com; Egbert Eich; Elan Amir (elan@leeb.cs.berkeley.edu); Eli Fant; Emiliano Ticci; Emiliano Ticci <emiticci@gmail.com>; Engenio Information Technologies, Inc; Eric Gershman; Eric Jacksch (jacksch@tenebris.ca); Eric Young; Eric Young (eay@cryptsoft.com); Eugene V. Alexeev; Even Rouault; Expat maintainers; Express Logic Inc.; Express Logic Inc. ThreadX JADE/Green Hills; Extron Electronics, IPL T S2; Fabio Mascarenhas; Felix Groebert; Felix Obenhuber <felix@obenhuber.de>; Ferdy Riphagen; Fingerprint Endian; Fingerprint HP; Flemming Johansen (fsj@csd.cri.dk); Foundry Networks, Inc. Fingerprint Foundry Networks FES2402; Foundry Networks, Inc. Fingerprint Foundry Networks ServerIron; Fran,cois Pinard; Francisco Leon; Frank Spierings; Free Software Foundation, Inc.; Fulko Hew; Fulko Hew (fulko.hew@gmail.com); Fulko Hew, SITA INC Canada, Inc; Fyodor <fyodor@insecure.org>; G. Vanem <gvanem@yahoo.no>; GNU Automake; Gabor Stefanik; Gary V. Vaughan; Gary Veum (veum@boa.gsfc.nasa.gov); Gavin Kistner; George Chatzisofroniou; Gianluca Varenni <gianluca.varenni@cacetech.com>; Gilbert HOYEK (gil_hoyek@hotmail.com), Elias M. KHOURY; Gilles Vollant; Gilles Vollant (info@winimage.com); Gilles Vollant <info@winimage.com>; Gilles Vollant, Even Rouault, Mathias Svensson; Gioacchino Mazzurco <gmazzurco89@gmail.com>; Glenn Randers-Pehrson; Glenn Wilkinson <glenn@sensepost.com>; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gorjan Petrovski; Gorjan Petrovski Hani Benhabiles; Grant Averett; Grubsky Grigory <g.grubsky@securitycode.ru>; Guenter Knauf; Guy Eric Schalnat, Group 42, Inc.; Guy Harris (guy@alum.mit.edu), Mark Pizzolato; Guy Harris (guy@alum.mit.edu), Mark Pizzolato <List-tcpdump-workers@subscriptions.pizzolato.net> , Mark C. Brown (mbrown@hp.com), and Sagun Shakya <Sagun.Shakya@Sun.COM>; Guy Martin; Guy Martin <gmsoft@tuxicoman.be>; Gyanendra Mishra; Gyanendra Mishra Daniel Miller; HLS Austria; Hani Benhabiles; Hani Benhabiles Daniel Miller Patrick Donnelly; Hani Benhabiles Gyanendra Mishra; Hannes Kaelber <hannes.kaelber@x2e.de>; Hans-Christoph Schemmel <hans-christoph.schemmel@cinterion.com>; Harald Welte <laforge@gnumonks.org>; Henri Doreau; Henrik Ravn; Henrik Ravn <henrik@ravn.com>; Hewlett-Packard Development Company; Hobbit hobbit@avian.org; Holger P. Frommer <HPfrommer@hilscher.com>; Horizon Control Inc; Huawei Technologies Co ., Ltd Login; Huawei Technologies Co ., Ltd Login p/Huawei Home Gateway; IANA. Daniel Miller, David; IBM CORP - LCFD Error; IBM Corp; IBM Corporation; Ian Macdonald <ianmacd@xs4all.nl>; Ian Marsh (ianm@sics.se); Icaro Torres Vinamra Bhatia; Info-ZIP; Insecure &.Com LLC; Insecure &.Com LLC &. Az Nmap; Insecure &.Com LLC &. Nmap este marca inregistrata a Insecure &.Com LLC &; Insecure &.Com LLC &. O Nmap; Insecure.Com LLC; Insecure.Com LLC 'The Nmap Project Nmap; Insecure.Com LLC Ndiff; Intel Corporation; Internet Security Systems, Inc; Internet Software Consortium; Jacob Gajek; Jacob Gajek <jgajek@gmail.com>; Jacques Nomssi Nzali; Jakub Zawadzki; Jakub Zawadzki <darkjames-ws@darkjames.pl>; James Henstridge Johan Dahlin; Jasey DePriest; Jay Smith Mak Kolybabi <mak@kolybabi.com>; Jean-Louis CHARTON <Jean-Louis.CHARTON@oikialog.com>; Jean-Loup Gailly, Mark Adler; Jean-loup Gailly; Jean-loup Gailly & Mark Adler; Jean-loup Gailly <jloup@gzip.org>; Jean-loup Gailly Osma Ahvenlampi; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Brian Raiter and Gilles Vollant; Jeff Macdonald (jeff@iacnet.com); Jeff Murphy (jcmurphy@acsu.buffalo.edu); Jens Grimmer <jens.grimmer@ng4t.com>; Jer Hiebert; Jesper Kueckelhahn; Jesper Kueckelhahn Paulino Calderon; Jesper Kueckelhahn Roy Hills; Jiang Jie; Jiayi Ye; Joao Correa; Joao Correa <joao@livewire.com.br>; Joao Paulo de Souza Medeiros; Johan Dahlin; Johannes Berg; John R. Bond; Jorgen Bosman; Josh Amishav-Zlatin; Julian Andres Klode; Julian R Seward; Juliusz Chroboczek; Juniper Networks, Inc.; Justin Cacak; Kahou Lei <kahou82@gmail.com>; Katie Stafford (katie@ktpanda.org); Keith Packard; Kent Vander Velden (graphix@iastate.edu); Kepler Project; Kerio Control Proxy; Kevin Ruland; Kevin Ruland <kevin@rodin.wustl.edu>; Kl0nEz Paulino; Kris Katterjohn; Kris Katterjohn Ange Gutek; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Kurt Grutzmacher; L. Peter Deutsch; Lars Nordin; Leonid Broukhis; Lua.org; Lua.org & PUC-Rio; Lua.org, PUC-Rio; Luc Verhaegen; Ludwig Schwardt <schwardt@sun.ac.za>; Luigi Rizzo; Luis MartinGarcia; Luis MartinGarcia (luis.mgarc@gmail.com); Luis MartinGarcia and Fyodor; Luiz Henrique de Figueiredo <lhf@tecgraf.puc-rio.br> Adapted for Nmap; M. Baris Demiray <barisdemiray@gmail.com>; Mahesh Jethanandani (mahesh@npix.com); Mak Kolybabi; Mak Kolybabi <mak@kolybabi.com>; Mak Kolybabi <mak@kolybabi.com> Gabriel Lawrence; Marc Hoersken; Marek Majkowski; Marek Majkowski <majek04+nse@gmail.com>; Maria Cruz <cruz_petagay@bah.com>; Marin Marzic; Mariusz Ziulek; Mark Adler; Mark Adler <madler@alumni.caltech.edu>; Mark Andrews (mandrews@alias.com); Mark Bristow; Mark Brown <broonie@sirena.org.uk>; Martin Holst Swende; Martin Holst Swende <martin@swende.se>; Martin Kaiser <martin@kaiser.cx>; Martin P.J. Zinser; Martin P.J. Zinser <m.zinser@gsi.de>; Martin Vidner <martin@vidner.net>; Masaki Hirabaru; Materials; Mathias Svensson; Mathias Svensson <mathias@result42.com>; Matthew Boyle Daniel Miller; Matthew Flanagan; Max Filippov <jcmvbkbc@gmail.com>; Micah Hoffman; Michael Kohl; Michael Pattrick; Michael Pattrick <mpattrick@rhinovirus.org>; Michael Schierl <schierlm@gmx.de>; Michael Tuexen <Michael.Tuexen@lurchi.franken.de>; Michal Labedzki for Tieto Corporation; Michal Sekletar; Michele Marchetto <michele@openbsd.org>; Microsoft Corp. (Chinese) Fingerprint Microsoft; Microsoft Corporation; Microsoft Corporation Fingerprint Microsoft; Mikael Keri; Mike Kershaw; Mike Kershaw <dragorn@kismetwireless.net>; Mike Wakerly <mikey@google.com>; Mikhail Gusarov; Mikhail Teterin <mi@ALDAN.algebra.com>; Mikko Saarnivala <mikko.saarnivala@sensinode.com>; NVIDIA Corporation; NetGroup, Politecnico di Torino (Italy); NewMedia-NET GmbH; Nick Nikolaou; Niels Provos; Niklaus Schiess <nschiess@adversec.com>; Niklaus Schiess <nschiess@ernw.de> Dominik Schneider <dschneider@ernw.de>; Niklaus Schiess, Dominik Schneider; Nmap Project maintainer' Nmap Project; Nmap and Zenmap; Noah Friedman <friedman@prep.ai.mit.edu>; Nokia Corporation; Nortel Networks Linksys; On Time Informatik; Oolan Zimmer <oz@gcom.com>; Oren Kladnitsky <orenk@mellanox.com>; Oren Tirosh <oren@hishome.net>; Paolo Abeni (Italy); Paolo Abeni <paolo.abeni@email.it>; Patrick Donnelly; Patrick Donnelly <batrick@batbytes.com>; Patrick Joseph Donnelly; Patrick Monnerat, D+H; Patrik Karlsson; Patrik Karlsson <patrik@cqure.net>; Patrik Karlsson David Fifield Fyodor; Patrik Karlsson Djalal Harouni; Patrik Karlsson Gyanendra Mishra; Patrik Karlsson NEXT PROBE Probe UDP; Patrik Karlsson Piotr Olma Gyanendra Mishra; Patrik Karlsson Tom Sellers; Patrik Karlsson Vasiliy Kulikov; Paul AMAR <aos.paul@gmail.com>; Paul AMAR <aos.paul@gmail.com> Rob Nicholls; Paul AMAR <aos.paul@gmail.com> Ron Bowes; Paul Marquess; Paul Marquess <pmqs@cpan.org>; Paul Tarjan; Paul Vixie; Paulino Calderon; Paulino Calderon <calderon@websec.mx>; Paulino Calderon <calderon@websec.mx> Paul AMAR <aos.paul@gmail.com>; Paulino Calderon <paulino@calderonpale.com>; Pedro A. Aranda Gutierrez <paag@tid.es>; Pedro Joaquin; Petar Alilovic, Faculty of Electrical Engineering and Computing, University of Zagreb; Peter Hutterer; Peter Mattis, Spencer Kimball and Josh MacDonald; Peter O'Gorman (nmap-dev@mlists.thewrittenword.com); Peter O'Gorman and Florian Schmid; Peter Simons; Petr Sumbera <petr.sumbera@oracle.com>; Phil Mulholland <phil@u10networks.com>; Philip Hazel; Philip Pickering; Philip Pickering Gorjan Petrovski Patrik Karlsson Gioacchino Mazzurco; Philip Pickering Piotr Olma; Philip Young; Pierre Lalet; Pierre Lalet <pierre@droids-corp.org>; Piotr Olma; Piotr Olma Gioacchino Mazzurco; Politecnico di Torino; Positive Research and Scadastrangelove (https://code.google.com/p/plcscan/); Pure Storage, Inc.; Python Software Foundation; QNX Software Systems Ltd. Fingerprint Omron; Rajeev R Menon; Ralf S. Engelschall; Raphael Hoegger; Raul Armando Fuentes Samaniego; Raul Fuentes; Raul Fuentes <ra.fuentess.sam+nmap@gmail.com>; Red Condor, Inc; Red Hat Software; Red Hat, Inc.; Redline Communications Inc Username p/Redline Communications; Regents of the University of California; Reuben Thomas; Reuben Thomas and Shmuel; Rewanth Cool; Riccardo Cecolin; Riccardo Cecolin <n@rikiji.de>; Richard Littin, Sean Irvine ( richard,sean @reeltwo.com); Richard Sammet; Richard Stallman; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa; Roberto Ierusalimschy; Ron Bowes; Ron Bowes <ron@skullsecurity.net>; Ron Bowes Andrew Orr; Ron Bowes Andrew Orr Rob Nicholls; Ron Bowes Jiayi Ye Paulino Calderon; Ron Bowes Mak Kolybabi Andrew Orr Russ Tait Milne; Ryan Permeh (ryan@eeye.com); Sagun Shakya (sagun.shakya@sun.com); Sam Leffler; Sam Leffler, Errno Consulting; Sam Roberts <vieuxtech@gmail.com>; Same as Nmap; Sara Golemon; Scott Bertilson (scott@unet.umn.edu); Scott James Remnant; Script Brandon Enright <bmenrigh@ucsd.edu> porttest.dns-oarc.net Duane Wessels <wessels@dns-oarc.net>; Script Brandon Enright <bmenrigh@ucsd.edu> txidtest.dns-oarc.net Duane Wessels <wessels@dns-oarc.net>; Sebastian Dragomir; Sebastian Dragomir <velorien@gmail.com>; Sergey Khegay; Seth Art; Seth Jackson; Shmuel Zeigerman; Silicon Graphics, Inc.; Simon Josefsson; Simon Thum; SnertSoft; Softweyr LLC.; Soldier of Fortran; Solutions, LLC; Star Online Blue Burst Game Server SONICTEAM; Stephen Donnelly <stephen@endace.com>; Stephen Hilt (Digital Bond); Stephen Hilt Michael Toecker; Steve Benson; Sun Microsystems Inc.; Sun Microsystems, Inc.; Sven Klemm <sven@c3d2.de>; Sven Klemm Piotr Olma George Chatzisofroniou; Sven Klemm. Fyodor; Ted Unangst; Tektronix; Tektronix, Inc; Terry Kennedy (terry@spcvxa.spc.edu); Thai Open Source Software Center Ltd and Clark Cooper; The FreeType Project; The LIBLINEAR Project; The Nmap Project; The OpenSSL Project; The Regents of the University of California; The TCPdump Group; The Tcpdump Group https://www.tcpdump.org; Thomas Buchanan; Thomas Buchanan <tbuchanan@thecompassgrp.net>; Thomas Buchanan Kris Katterjohn; Thomas G. Lane, Guido Vollbeding; Tiago Dionizio; Tiago Dionizio <tiago.dionizio@gmail.com>; Tim Hudson; Tim Hudson (tjh@cryptsoft.com); TippingPoint; Todd C. Miller; Tom Sellers; Tom Sellers NEXT PROBE Probe TCP; Tom Tromey <tromey@cygnus.com>; Tommy Lindgren; Toni Ruottu; Torsten Landschoff Sebastian Krahmer; Tyge Lovset <Tyge.Lovset@cmr.no>; Ulf Lamping <ulf.lamping@web.de>; Ulrich Neuman; Ulrik Haugen; University of Cambridge; VMware, Inc.; Varuna De Silva <varunax@gmail.com>; Vasiliy Kulikov; Vikas Singhal; Vikas Singhal Patrik Karlsson; Vinamra Bhatia; Vlatko Kosturjak; Vlatko Kosturjak <kost@linux.hr>; Vlatko Kosturjak Ron Bowes; WIDE Project; WebGate Inc; Wes Peters <wes@softweyr.com>; William McVey; WinRoute Proxy; Wong Wai Tuck; Word, Inc.; X Consortium; Yen Yen Lim and North Dakota State University; Zach Smith; alegen Daniel Miller; as a recurse into group; content Dave Jensen; content DeStar; content Dedicated Micros; content FireBrick Ltd; content Nicolas VIVIEN; content Santiago Bellosta; content Siemens AG; content d+ Cisco Systems; d (datetime.today .year), ncontent; d d; d d H2 Group; d d H2 Group Sorry; d d d d Microsoft Corp; d+ Bestellen Software, LLC; d+ Double Precision, Inc; d+ Microsoft Corp; d+ Sun Microsystems, Inc; d+, LSI Logic Inc; d+- d+ Bytefusion Ltd Unregistered Evaluation; d+- d+ GoodTech Systems, Inc; d+- d+ Redline Communications Inc; en2018 Insecure &.Com LLC &; en2020 Insecure &.Com LLC &; en2020 Insecure &.Com LLC 'The Nmap Project &. Nmap; fyodor@nmap.org; guy@alum.mit.edu; gzip. Files; jah Michael Pattrick; jher@eden.com; mcr@sandelman.ca; p/Quagga routing software; section Generator DocBook XSL Stylesheets; the Brantley Coile Company; the Computer Systems Engineering Group at Lawrence Berkeley Laboratory; the Free Software Foundation; the Kungliga Tekniska Hogskolan and its contributors; the Massachusetts Institute of Technology; the Politecnico di Torino, and its contributors; the SAP Internet Transaction Server; the University of California, Berkeley; the University of California, Berkeley and its contributors; the University of California, Lawrence Berkeley Laboratory and its contributors; the m blue fBApache Software Foundation; x7c TimesWu; xa9 d+ Netopia, Inc; xa9 d+- d+ TNT Software, Inc; xa92008 Motorola, Inc",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nmap-ncat-7.92-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nmap-ncat@7.92-3.el9?arch=x86_64&epoch=3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0lXx6Bqpakqq7BZ-VYcQmIqvLG8Gzohke8DJDSiMg1c/nmap-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://nmap.org/",
    "licenseConcluded" : "LicenseRef-GPL-2.0-only-WITH-LicenseRef-scancode-npsl-exception-0.93",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nmap-ncat",
    "versionInfo" : "7.92-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-npth-1.6-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2016 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 2002, 2003, 2004, 2011 g10 Code GmbH\nCopyright 2011, 2012 g10 Code GmbH",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/npth-1.6-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/npth@1.6-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RVGrpEKn0s9je0lEdrVu8ALrKVENkP3oLarF3eVBMOs/npth-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=npth.git",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/npth",
    "versionInfo" : "1.6-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nspr-4.35.0-17.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nspr-4.35.0-17.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nspr@4.35.0-17.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/nspr/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nspr",
    "versionInfo" : "4.35.0-17.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-softokn-freebl-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-softokn-freebl-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-softokn-freebl@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-softokn-freebl",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-softokn-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-softokn-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-softokn@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-softokn",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-sysinit-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-sysinit-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-sysinit@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-sysinit",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-util-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-util-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-util@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-util",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openldap-2.6.8-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1997, 1998, 1999 Computing Research Labs, New Mexico State University\nCopyright 2014 David Coutadeur, Paris\nCopyright 2011 Devin J. Pohly\nCopyright 2007 Emmanuel Dreyfus\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2006 Hans Leidekker\nCopyright 2003-2004 Hewlett-Packard Company\nCopyright 1999, Howard Chu\nCopyright 2011-2021 Howard Chu, Symas Corp.\nCopyright 2007 Howard Chu <hyc@symas.com>\nCopyright 2004 IBM Corporation\nCopyright 2009 Jonathan Clarke\nCopyright 2009 Jonathan Clarke <jonathan@phillipoux.net>\nCopyright 1999, Juan C. Gomez\nCopyright 1991-1996 Karl Lehenbauer and Mark Diekhans\nCopyright 2007 Michael Steinmann, Calivia\nCopyright Notice' K.3. University of Michigan\nCopyright 2017 Ondrej Kuznik, Symas Corp.\nCopyright 2011 PADL Software Pty Ltd.\nCopyright 2009 Peter Marschall\nCopyright 2000, Pierangelo Masarati\nCopyright 2000-2001 Pierangelo Masarati <ando@sys-net.it>\nCopyright 1992-1996, Regents of the https://www.umich.edu/ University of Michigan\nCopyright 1999-2021 SYMAS Corporation\nCopyright 2004 Sang Seok Lim, IBM\nCopyright 2004 Sang Seok Lim, IBM Corp.\nCopyright 2016-2017 Symas Corp.\nCopyright 2018 Tamim Ziai\nCopyright 1999, The Internet Society\nCopyright 1998-2024 The OpenLDAP Foundation\nCopyright 1999-2003 The OpenLDAP Foundation, Redwood City, California, USA.\nCopyright 1998-2013, The https://www.openldap.org/foundation/ OpenLDAP Foundation\nCopyright 2003 by Howard Chu\nCopyright 2008 by Howard Chu, Symas Corp.\nCopyright (c) 2000-2001, Aaron D. Gifford\nCopyright (c) 2006, 2007, 2009, 2010, 2011, 2012, 2013 Arthur de Jong\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2009 IETF Trust and the persons identified as the document authors\nCopyright (c) 1997, 1998, 1999 Kungliga Tekniska H xf6gskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2009, 2010 Martin Hedenfalk <martin@bzero.se>\nCopyright (c) 1998-1999 NeoSoft, Inc.\nCopyright (c) 1999, 2000 Novell, Inc.\nCopyright (c) 2000 Pierangelo Masarati, <ando@sys-net.it>\nCopyright (c) 1994-2008 Ralf S. Engelschall <rse@engelschall.com>\nCopyright (c) 1989 Regents of the University of California\nCopyright (c) 1990, 1994 Regents of the University of Michigan\nCopyright (c) 1994-1995 Sun Microsystems, Inc.\nCopyright (c) The IETF Trust (2007)\nCopyright (c) The IETF Trust (2007). Abstract\nCopyright (c) The Internet Society (1997-1999)\nCopyright (c) The Internet Society (2000).a\nCopyright (c) 1983, 1988, 1993 The Regents of the University of California\nCopyright (c) 2006 West Consulting\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009 by Emily Backes, Symas Corp.\nCopyrights Copyright 1998-2024 The OpenLDAP Foundation\nPortions Copyright 1998 A. Hartgers\nPortions Copyright 1999 Dmitry Kovalev\nPortions Copyright 2008 Emmanuel Dreyfus\nPortions Copyright 2002, F5 Networks, Inc\nPortions Copyright 2007-2011 Gavin Henry\nPortions Copyright 1998-2003 Hallvard B. Furuseth\nPortions Copyright 2004 Hewlett-Packard Company\nPortions Copyright 1999-2003 Howard Chu\nPortions Copyright 2004-2005 Howard Chu, Symas Corp.\nPortions Copyright 2004-2005 Howard Chu, Symas Corporation\nPortions Copyright 1999-2008 Howard Y.H. Chu\nPortions Copyright IBM Corp. 1997,2002,2003\nPortions Copyright 2001-2006 IBM Corporation\nPortions Copyright 1999 John C. Quillan\nPortions Copyright 2000, John E. Schimmel\nPortions Copyright 1999, Juan C. Gomez\nPortions Copyright 1998-2013 Kurt D. Zeilenga\nPortions Copyright 1999 Lars Uffmann\nPortions Copyright 2004 Mark Adamson\nPortions Copyright 2000 Mark Adamson, Carnegie Mellon\nPortions Copyright 2007 Michal Szulczynski\nPortions Copyright 1998-2006 Net Boolean Incorporated\nPortions Copyright 2017-2021 Ondrej Kuznik, Symas Corporation\nPortions Copyright 1999 PM Lashley\nPortions Copyright 2002 Pierangelo Mararati\nPortions Copyright 2000-2003 Pierangelo Masarati\nPortions Copyright 2008 Pierangelo Masarati, SysNet\nPortions Copyright 2005 Pierangelo Masarati <ando@sys-net.it>\nPortions Copyright 1992-1996 Regents of the University of Michigan\nPortions Copyright 2007-2011 Suretec Systems Limited\nPortions Copyright 2007-2011 Suretec Systems Ltd.\nPortions Copyright 1999-2008 Symas Corporation\nPortions Copyright 2005-2006 SysNet\nPortions Copyright 2013 Ted C. Cheng, Symas Corp.\nPortions Copyright 1991-2004, The Internet Society\nPortions Copyright 2015 by Howard Chu, Symas Corp.\nPortions Copyright 2003-2008 by Howard Chu, Symas Corporation\nPortions Copyright 2003 by IBM Corporation\nPortions Copyright 2016-2017 by Michael Stroder <michael@stroeder.com>\nPortions Copyright 2018 by Ondrej Kuznik, Symas Corp.\nPortions Copyright 2013 by Ted C. Cheng, Symas Corp.\nPortions Copyright (c) DAASI International GmbH, Tamim Ziai\nPortions Copyright (c) 2013 IETF Trust and the persons identified as the document authors\nPortions Copyright (c) 2007 Michal Szulczynski\nPortions Copyright (c) 1999, 2000 Novell, Inc.\nPortions Copyright (c) 2022 Ondrej Kuznik, Symas Corporation\nPortions Copyright (c) 1987 Regents of the University of California\nPortions Copyright (c) 1992-1996 Regents of the University of Michigan\nPortions Copyright (c) The Internet Society (1997-2003)\nPortions Copyright (c) 1994 The Regents of the University of Michigan\nPortions Copyright (c) Virginia Tech, David Hawes\nPortions Copyright (c) 2005 by Howard Chu, Symas Corp.\nPortions Copyright (c) 1996, 1998 by Internet Software Consortium\nPortions Copyright 2002 myinternet Limited\nPortions (c) Copyright PADL Software Pty Ltd. 1999\n(c) Copyright PADL Software Pty Ltd. 2003\n(c) Copyright 1996-1998, TimesTen Performance Software\n(c) Copyright 2011-2024, https://www.OpenLDAP.org/foundation/ OpenLDAP Foundation, info@OpenLDAP.org info@OpenLDAP.org\n(c) 2011 Devin J. Pohly\n(c), (bv)- bv_len\n(c), (bv)- bv_len (dst)- bv_len (dst)- bv_val\n\nAuthors: (bv)- bv_len; (bv)- bv_len (dst)- bv_len (dst)- bv_val; <Kurt.Zeilenga@Isode.COM>; <Kurt@OpenLDAP.org>; <jimse@novell.com>; A. Hartgers; AT&T; Aaron D. Gifford; Aaron Gifford; Alexandre Oliva <oliva@dcc.unicamp.br>; Apurva Kumar; Arthur de Jong; BR SysNet; Bart Hartgers; Brian Candler; Colin Plumb; Computing Research Labs, New Mexico State University; DAASI International GmbH, Tamim Ziai; Dave Storey; David Coutadeur, Paris; David Hawes of Virginia Tech; Devin J. Pohly; Devin J. Pohly <djpohly@gmail.com>; Dmitry Kovalev; Emily Backes; Emily Backes at Symas Corp.; Emily Backes, Symas Corp.; Emmanuel Dreyfus; Eric Allman; Eric Stokes; F5 Networks, Inc; Fran,cois Pinard; Free Software Foundation, Inc.; Gary A. Parker; Gary V. Vaughan; Gavin Henry; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; HAMANO Tsukasa <hamano@osstech.co.jp>; Hallvard B. Furuseth; Hallvard Furuseth; Hans Leidekker; Hewlett-Packard Company; Howard Chu; Howard Chu and Emily Backes; Howard Chu of Symas Corporation; Howard Chu, Symas Corp.; Howard Chu, Symas Corporation; Howard Y.H. Chu; IBM Corp.; IBM Corporation; IETF Trust and the persons identified as the document authors; Ian Clatworthy; Internet Software Consortium; Jan Safranek <jsafrane@redhat.com>; Jan Vcelak <jvcelak@redhat.com>; Jane Doe; Jeff Costlow; Jeff Turner; Jeffery Layton <jlayton@redhat.com>; Jim Kingdon; John C. Quillan; John E. Schimmel; Jonathan Clarke; Jong Hyuk Choi; Jong-Hyuk Choi; Juan C. Gomez; Karl Lehenbauer; Karl Lehenbauer and Mark Diekhans; Karl Lehenbauer, of NeoSoft, Inc.; Kungliga Tekniska H xf6gskolan (Royal Institute of Technology, Stockholm, Sweden); Kurt D. Zeilenga; Kurt Zeilenga; Lars Uffmann; Lawrence Philips; Luke Howard; Luke Howard of PADL Software; Mark Adamson; Mark Adamson, Carnegie Mellon; Martin Hedenfalk; Matus Honek <mhonek@redhat.com>; Michael Steinmann, Calivia; Michael Stroder; Michal Szulczynski; Neil Dunbar <neil.dunbar@hp.com> Emmanuel Dreyfus <manu@netbsd.org>; NeoSoft Inc.; NeoSoft, Inc.; Net Boolean Incorporated; Notice' K.3. University of Michigan; Novell, Inc.; Ondrej Kuznik; Ondrej Kuznik and Howard Chu of Symas Corporation; Ondrej Kuznik, Symas Corp.; Ondrej Kuznik, Symas Corporation; OpenLDAP Foundation; PADL Software Pty Ltd.; PADL Software and Sun Microsystems; PM Lashley; Peter Marschall; Peter Marschall <peter@adpm.de>; Pierangelo Mararati; Pierangelo Masarati; Pierangelo Masarati <ando@OpenLDAP.org>; Pierangelo Masarati, SysNet; Poul-Henning Kamp; Ralf S. Engelschall; Randy Kunkee (kunkee@OpenLDAP.org); Regents of the University of California; Regents of the University of Michigan; Rewritten by Howard Chu; Sang Seok Lim; Sang Seok Lim, IBM; Sang Seok Lim, IBM Corp.; Scott James Remnant; Steve Reid; Sun Microsystems, Inc.; Suretec Systems Limited; Suretec Systems Ltd.; Symas Corp.; Symas Corporation; SysNet; Tamim Ziai; Tamim Ziai of DAASI International GmbH; Tatu Ylonen <ylo@cs.hut.fi>; Ted C. Cheng, Symas Corp.; The IETF Trust; The IETF Trust Abstract; The Internet Society; The Internet Society (2000).a; The OpenLDAP Foundation; The OpenLDAP Foundation, Redwood City, California, USA; The OpenLDAP Project (http://www.openldap.org/); The OpenLDAP Project <http://www.openldap.org/>; The Regents of the University of California; The Regents of the University of Michigan; Tim Howes, Mark Smith, and Gordon Good; TimesTen Performance Software; Tom Tromey <tromey@cygnus.com>; UR http://www.openldap.org; Virginia Tech, David Hawes; West Consulting; Word (thewrittenword.com) and Stanford University (stanford.edu); X Consortium; authors_docs WHERE authors_docs.doc_id; authors_docs WHERE authors_docs.pers_id; authors_docs.pers_id persons.id INSERT INTO authors_docs; authors_docs.pers_id persons.id,'INSERT INTO authors_docs; ebackes@symas.com; hand. Glue; myinternet Limited; per company; rewritten by Kurt D. Zeilenga; thanks Ben Campbell, Phillip Hallam-Baker, and Ted Hardie; thanks the IETF LDAP community; the Emmanuel Dreyfus; the Howard Chu; the Internet Assigned; the OpenLDAP Project. The Project; the University of California, Berkeley; the University of California, Berkeley and its contributors; the University of Michigan; the W3C Internationalization Working Group; the project",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openldap-2.6.8-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sIuW_wyOiOAct0WkS9CT-Yh8dmNCChuC0vEr3GkRzfA/openldap-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openldap@2.6.8-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openldap.org/",
    "licenseConcluded" : "OLDAP-2.8",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openldap",
    "versionInfo" : "2.6.8-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-so-3.0.7-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 2021- IBM Inc.\nCopyright 1999-2021 The OpenSSL Project Authors\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1998-2022 The OpenSSL Project\nCopyright 20xx-20yy The OpenSSL Project Authors\n\nAuthors: 20xx-20yy The OpenSSL Project Authors; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke; Andy Polyakov <appro@openssl.org>; Danny Tsen <dtsen@us.ibm.com>; Dmitry Belyavsky and Hubert Kario; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; IBM Inc.; The OpenSSL Project; The OpenSSL Project Authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openssl-fips-provider-so-3.0.7-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XB3dEoY40CzehCYEYrV6WOHSzghbjfdAtaum1_EzrNA/openssl-fips-provider-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openssl-fips-provider-so@3.0.7-8.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openssl-fips-provider-so",
    "versionInfo" : "3.0.7-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-3.0.7-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 2021- IBM Inc.\nCopyright 1999-2021 The OpenSSL Project Authors\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1998-2022 The OpenSSL Project\nCopyright 20xx-20yy The OpenSSL Project Authors\n\nAuthors: 20xx-20yy The OpenSSL Project Authors; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke; Andy Polyakov <appro@openssl.org>; Danny Tsen <dtsen@us.ibm.com>; Dmitry Belyavsky and Hubert Kario; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; IBM Inc.; The OpenSSL Project; The OpenSSL Project Authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openssl-fips-provider-3.0.7-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/a0ZXTBsNc3LmhIOHs6joSQMyCLGb4lXpKSKHXz5yn1o/openssl-fips-provider-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openssl-fips-provider@3.0.7-8.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openssl-fips-provider",
    "versionInfo" : "3.0.7-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openssl-libs-3.5.1-4.el9-7-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 2004-2014, Akamai Technologies\nCopyright 2017 BaishanCloud\nCopyright 2014 Cryptography Research, Inc.\nCopyright 2011 Google Inc.\nCopyright IBM Corp. 2018\nCopyright 2021- IBM Inc.\nCopyright 2013 M. J. Dominus\nCopyright 2006 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright 2005 Nokia\nCopyright Patrick Powell 1995\nCopyright 2019 Red Hat, Inc.\nCopyright 2017 Ribose Inc.\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright Siemens AG 2015-2019\nCopyright 1998-2023 The OpenSSL Project Authors\nCopyright 2016 VMS Software, Inc.\nCopyright 1998-$YEAR The OpenSSL Authors\nCopyright (c) 2007\nCopyright (c) 2008 Andy Polyakov <appro@openssl.org>\nCopyright (c) 2023, Christoph Mullner <christoph.muellner@vrull.eu>\nCopyright (c) 2015 CloudFlare, Inc.\nCopyright (c) 2012-2014 Daniel J. Bernstein\nCopyright (c) 2004, EdelKey Project\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1989 Free Software Foundation, Inc.\nCopyright (c) 2022, Hongren (Zenithal) Zheng <i@zenithal.me>\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2012-2016 Jean-Philippe Aumasson\nCopyright (c) 2023, Jerry Shih <jerry.shih@sifive.com>\nCopyright (c) 2004 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2017 National Security Research Institute\nCopyright (c) 2006, Network Resonance, Inc.\nCopyright (c) 2019, Oracle and/or its affiliates\nCopyright (c) 2023, Phoebe Chen <phoebe.chen@sifive.com>\nCopyright (c) 2011, RTFM, Inc.\nCopyright (c) 2004, Richard Levitte <richard@levitte.org>\nCopyright (c) 1998-2025 The OpenSSL Project Authors\nCopyright (c) 2002 The OpenTSA Project\nCopyright (c) 2013-2014 Timo Teras <timo.teras@gmail.com>\nCopyright (c) 2013 by Mark Jason Dominus <mjd@cpan.org>\nCopyright 20xx-20yy The OpenSSL Project Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: 1995-$YEAR The OpenSSL Project Authors; 1998-$YEAR The OpenSSL Authors; 1998-$YEAR The OpenSSL Project Authors; 1999-$YEAR The OpenSSL Project Authors; 2000-$YEAR The OpenSSL Project Authors; 2020-$YEAR The OpenSSL Project Authors; 20xx-20yy The OpenSSL Project Authors; <appro@openssl.org>; <zhuchen@loongson.cn>; Akamai Technologies; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke <martin@meltin.net> & Alastair D'Silva <alastair@d-silva.org> for the OpenSSL project; Amitay Isaacs <amitay@ozlabs.org> and Martin Schwenke <martin@meltin.net> for the OpenSSL project; Andy Polyakov; Andy Polyakov <appro@openssl.org>; Antoon Bosselaers; BaishanCloud; Ben Avison <bavison@riscosopen.org>; Christoph Mullner; Christophe Renou and Peter Sylvester, for the EdelKey project; CloudFlare, Inc.; Cryptography Research, Inc.; Daniel J. Bernstein; Danny Tsen <dtsen@us.ibm.com>; David S. Miller and Andy Polyakov; EdelKey Project; Emilia Kasper and Peter Schwabe; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; Eric Rescorla <ekr@rtfm.com>; Fangming Fang <fangming.fang@arm.com>; Free Software Foundation, Inc.; Google Inc.; Hongren (Zenithal) Zheng; IBM Corp.; IBM Inc.; Intel Corporation; Jean-Philippe Aumasson; Jerry Shih; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); M. J. Dominus; Marc Bevand; Mark Jason Dominus; Mark Jason Dominus (MJD); Mark Jason Dominus, Plover Systems; Michael Schout <mschout@cpan.org>; Mike Hamburg; Min Zhou <zhoumin@loongson.cn>; NTT (Nippon Telegraph and Telephone Corporation); National Security Research Institute; Netscape Communications; Network Resonance, Inc.; Nokia; Oracle and/or its affiliates; Patrick Powell; Patrick Powell <papowell@astart.com>; Patrick Steuer <patrick.steuer@de.ibm.com>; Paulo Barreto; Phoebe Chen; RTFM, Inc.; Red Hat, Inc.; Ribose Inc.; Richard Levitte; Rohan McLure <rohan.mclure@linux.ibm.com>; Samuel Lee <Samuel.Lee@arm.com>; Samuel Neves; Sergey Kirillov and Andrey Matyukov; Sergey Kirillov and Andrey Matyukov Intel Corporation; Shay Gueron; Siemens AG; The OpenSSL Project Authors; The OpenTSA Project; Timo Teras; VMS Software, Inc.; Vincent Rijmen; Xiaokang Qian <xiaokang.qian@arm.com>; Zhiguo Zhou <zhiguo.zhou@intel.com> and Wangyang Guo <wangyang.guo@intel.com>; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openssl-libs-3.5.1-4.el9_7.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openssl-libs@3.5.1-4.el9_7?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Sm1xeEsScL_Td328H1UXFCL7Li7LWp_xQdAwQWM77K4/openssl-~-4.el9_7.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openssl-libs",
    "versionInfo" : "3.5.1-4.el9_7"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-p11-kit-trust-0.25.3-3.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2006 Andreas Jellinghaus\nCopyright 1992-2022 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2017, 2021-2023 Red Hat, Inc.\nCopyright (c) 2020 Amazon.com, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Collabora Ltd\nCopyright (c) 1990, 1993 Copyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2003 Internet Software Consortium\nCopyright (c) 2004, 2005, 2007, 2011 Internet Systems Consortium, Inc.\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 2013 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Red Hat Inc\nCopyright (c) 2012 Stef Walter\nCopyright (c) 2004 Stefan Walter\nCopyright (c) 2002-2004 Tim J. Robbins\nCopyright (c) 2000-2002, 2007, 2010 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996, 1998 by Internet Software Consortium\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) 1995 by International Business Machines, Inc.\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus\ncopyright 1997-2017 Simon Tatham\n\nAuthors: Adam Sampson <ats@offog.org>; Adam Williamson <awilliam@redhat.com>; Albert Chin-A-Young <china@thewrittenword.com>; Alexander Bokovoy <abokovoy@redhat.com>; Alexander Sosedkin <asosedkin@redhat.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alon Bar-Lev <alon.barlev@gmail.com>; Alvin Chen <sonoma001@gmail.com>; Amazon.com, Inc.; Anders Kaseorg <andersk@mit.edu>; Anderson Toshiyuki Sasaki <ansasaki@redhat.com>; Andreas Jellinghaus; Andreas Metzler <ametzler@bebt.de>; Andreas Metzler <ametzler@debian.org>; Andreas Metzler <ametzler@downhill.at.eu.org>; Antoine Jacoutot <ajacoutot@gnome.org>; Antoine Jacoutot <ajacoutot@openbsd.org>; Balazs Ur <balazs@urbalazs.hu>; Baruch Siach <baruch@tkos.co.il>; Benjamin Herrenschmidt <benh@kernel.crashing.org>; Bootstrap Authors; Bruno Haible <bruno@clisp.org>; Claes Nasten <pekdon@gmail.com>; Clemens Lang <cllang@redhat.com>; Colin Plumb; Colin Walters <walters@verbum.org>; Collabora Ltd; Daiki Ueno; Daiki Ueno <dueno@redhat.com>; Daiki Ueno <ueno@gnu.org>; Dan Winship <danw@gnome.org>; Daniel Black <danielgb@au.ibm.com>; Daniel Engberg <daniel.engberg.lists@pyret.net>; David Cook <divergentdave@gmail.com>; David Halls <dahalls@gmail.com>; David Korczynski <david@adalogics.com>; David Woodhouse <David.Woodhouse@intel.com>; David Woodhouse <dwmw2@infradead.org>; David Woodhouse <dwmw@amazon.co.uk>; Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>; Doan Tran Cong Danh <congdanhqx@gmail.com>; Dr. Volker Zell <dr.volker.zell@oracle.com>; Eli Schwartz <eschwartz@archlinux.org>; Emmanuel Dreyfus <manu@netbsd.org>; Erdem Meydanli <meydanli@amazon.com>; Fabian Groffen <grobian@gentoo.org>; Florian Weimer <fweimer@redhat.com>; Fran,cois Pinard; Frederik Boster <frederik@boster.de>; Free Software Foundation, Inc.; Free Software Foundation. Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gustavo Zacarias <gustavo@zacarias.com.ar>; Harald Hoyer <harald@redhat.com>; Ingo Franzki <ifranzki@linux.ibm.com>; International Business Machines, Inc.; Internet Software Consortium; Internet Systems Consortium, Inc.; Issam E. Maghni <issam.e.maghni@mailbox.org>; Jakub Jelen <jjelen@redhat.com>; Jan Alexander Steffens; John Hein <dkeabg7vp4@snkmail.com>; Justin King-Lacroix <justinkl@google.com>; Kai Engert <kaie@kuix.de>; Kai Takahashi <www.carrotsoft@gmail.com>; Kalev Lember <kalevlember@gmail.com>; LGTM Migrator <lgtm-migrator@users.noreply.github.com>; Laszlo Ersek <lersek@redhat.com>; Leonardo Brondani Schenkel <leo@tradeshift.com>; Leonardo Brondani Schenkel <leonardo.schenkel@gmail.com>; Lew Palm <l.palm@m-privacy.de>; Lubomir Rintel <lkundrak@v3.sk>; Ludovic Rousseau <ludovic.rousseau@gmail.com>; Mantas Mikulenas <grawity@gmail.com>; Michael Cronenworth <mcronenworth@pdxinc.com>; Michael Cronenworth <mike@cchtml.com>; Mike Barcroft; Milan Crha <mcrha@redhat.com>; Nathan Barrett-Morrison <nathan.morrison@timesys.com>; Nathaniel McCallum <npmccallum@redhat.com>; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos <nmav@gnutls.org>; Nikos Mavrogiannopoulos <nmav@redhat.com>; Pankaj <pankaj.s01@samsung.com>; Pankaj Sharma <pankaj.cscience@gmail.com>; Pascal Ernster <bugs.freedesktop.org@hardfalcon.net>; Pascal Terjan <pterjan@google.com>; Pavel A; Pavel A <pavel.aronsky@daynix.com>; Pino Toscano <pino@debian.org>; Raphael Medaer <raphael@medaer.me>; Red Hat Inc; Red Hat, Inc; Redhat Inc.; Rob McMahon <Rob.McMahon@warwick.ac.uk>; Robert Milasan <rmilasan@suse.com>; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus; Roman Bogorodskiy <bogorodskiy@gmail.com>; Rosen Penev <rosenp@gmail.com>; Scott James Remnant; Simon Haggett <simon.haggett@gmail.com>; Simon Josefsson <simon@josefsson.org>; Simon Tatham; Stanislav Brabec <sbrabec@suse.com>; Stef Waler <stefw@collabora.co.uk>; Stef Walter; Stef Walter <stef@thewalter.net>; Stef Walter <stef@thewalter.net> , Daiki Ueno; Stef Walter <stef@thewalter.net> , Daiki Ueno, Anderson Sasaki; Stef Walter <stef@thewalter.net> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@collabora.co.uk>; Stef Walter <stefw@collabora.co.uk> , Daiki Ueno; Stef Walter <stefw@collabora.co.uk> Laszlo Ersek <lersek@redhat.com>; Stef Walter <stefw@gnome.org>; Stef Walter <stefw@gnome.org> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@redhat.com>; Stef Walter <stefw@redhat.com> Jakub Jelen <jjelen@redhat.com>; Stefan Walter; Stefano Garzarella <sgarzare@redhat.com>; Steve Reid <steve@edmweb.com>; Tavian Barnes <tavianator@tavianator.com>; The Regents of the University of California; Tim J. Robbins; Timo Jyrinki <timo.jyrinki@iki.fi>; Todd C. Miller; Tom Sutcliffe <tomsci@me.com>; Tom Tromey <tromey@cygnus.com>; Tomas Tomecek <ttomecek@redhat.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Vincent JARDIN <vjardin@free.fr>; X Consortium; X Ruoyao <xry111@mengyan1223.wang>; Xi Ruoyao <xry111@xry111.site>; Yuri Chornoivan <yurchor@ukr.net>; Zoltan Fridrich <zfridric@redhat.com>; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno <dueno@redhat.com>; g10 Code GmbH; manphiz@gmail.com <manphiz@gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/p11-kit-trust-0.25.3-3.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/p11-kit-trust@0.25.3-3.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zQcHjj479zVlxNSr8OuRDFzTxubzMlMeH7HwH6MQmEQ/p11-kit-~-3.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://p11-glue.freedesktop.org/p11-kit.html",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/p11-kit-trust",
    "versionInfo" : "0.25.3-3.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-p11-kit-0.25.3-3.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2006 Andreas Jellinghaus\nCopyright 1992-2022 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2017, 2021-2023 Red Hat, Inc.\nCopyright (c) 2020 Amazon.com, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Collabora Ltd\nCopyright (c) 1990, 1993 Copyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2003 Internet Software Consortium\nCopyright (c) 2004, 2005, 2007, 2011 Internet Systems Consortium, Inc.\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 2013 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Red Hat Inc\nCopyright (c) 2012 Stef Walter\nCopyright (c) 2004 Stefan Walter\nCopyright (c) 2002-2004 Tim J. Robbins\nCopyright (c) 2000-2002, 2007, 2010 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996, 1998 by Internet Software Consortium\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) 1995 by International Business Machines, Inc.\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus\ncopyright 1997-2017 Simon Tatham\n\nAuthors: Adam Sampson <ats@offog.org>; Adam Williamson <awilliam@redhat.com>; Albert Chin-A-Young <china@thewrittenword.com>; Alexander Bokovoy <abokovoy@redhat.com>; Alexander Sosedkin <asosedkin@redhat.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alon Bar-Lev <alon.barlev@gmail.com>; Alvin Chen <sonoma001@gmail.com>; Amazon.com, Inc.; Anders Kaseorg <andersk@mit.edu>; Anderson Toshiyuki Sasaki <ansasaki@redhat.com>; Andreas Jellinghaus; Andreas Metzler <ametzler@bebt.de>; Andreas Metzler <ametzler@debian.org>; Andreas Metzler <ametzler@downhill.at.eu.org>; Antoine Jacoutot <ajacoutot@gnome.org>; Antoine Jacoutot <ajacoutot@openbsd.org>; Balazs Ur <balazs@urbalazs.hu>; Baruch Siach <baruch@tkos.co.il>; Benjamin Herrenschmidt <benh@kernel.crashing.org>; Bootstrap Authors; Bruno Haible <bruno@clisp.org>; Claes Nasten <pekdon@gmail.com>; Clemens Lang <cllang@redhat.com>; Colin Plumb; Colin Walters <walters@verbum.org>; Collabora Ltd; Daiki Ueno; Daiki Ueno <dueno@redhat.com>; Daiki Ueno <ueno@gnu.org>; Dan Winship <danw@gnome.org>; Daniel Black <danielgb@au.ibm.com>; Daniel Engberg <daniel.engberg.lists@pyret.net>; David Cook <divergentdave@gmail.com>; David Halls <dahalls@gmail.com>; David Korczynski <david@adalogics.com>; David Woodhouse <David.Woodhouse@intel.com>; David Woodhouse <dwmw2@infradead.org>; David Woodhouse <dwmw@amazon.co.uk>; Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>; Doan Tran Cong Danh <congdanhqx@gmail.com>; Dr. Volker Zell <dr.volker.zell@oracle.com>; Eli Schwartz <eschwartz@archlinux.org>; Emmanuel Dreyfus <manu@netbsd.org>; Erdem Meydanli <meydanli@amazon.com>; Fabian Groffen <grobian@gentoo.org>; Florian Weimer <fweimer@redhat.com>; Fran,cois Pinard; Frederik Boster <frederik@boster.de>; Free Software Foundation, Inc.; Free Software Foundation. Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gustavo Zacarias <gustavo@zacarias.com.ar>; Harald Hoyer <harald@redhat.com>; Ingo Franzki <ifranzki@linux.ibm.com>; International Business Machines, Inc.; Internet Software Consortium; Internet Systems Consortium, Inc.; Issam E. Maghni <issam.e.maghni@mailbox.org>; Jakub Jelen <jjelen@redhat.com>; Jan Alexander Steffens; John Hein <dkeabg7vp4@snkmail.com>; Justin King-Lacroix <justinkl@google.com>; Kai Engert <kaie@kuix.de>; Kai Takahashi <www.carrotsoft@gmail.com>; Kalev Lember <kalevlember@gmail.com>; LGTM Migrator <lgtm-migrator@users.noreply.github.com>; Laszlo Ersek <lersek@redhat.com>; Leonardo Brondani Schenkel <leo@tradeshift.com>; Leonardo Brondani Schenkel <leonardo.schenkel@gmail.com>; Lew Palm <l.palm@m-privacy.de>; Lubomir Rintel <lkundrak@v3.sk>; Ludovic Rousseau <ludovic.rousseau@gmail.com>; Mantas Mikulenas <grawity@gmail.com>; Michael Cronenworth <mcronenworth@pdxinc.com>; Michael Cronenworth <mike@cchtml.com>; Mike Barcroft; Milan Crha <mcrha@redhat.com>; Nathan Barrett-Morrison <nathan.morrison@timesys.com>; Nathaniel McCallum <npmccallum@redhat.com>; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos <nmav@gnutls.org>; Nikos Mavrogiannopoulos <nmav@redhat.com>; Pankaj <pankaj.s01@samsung.com>; Pankaj Sharma <pankaj.cscience@gmail.com>; Pascal Ernster <bugs.freedesktop.org@hardfalcon.net>; Pascal Terjan <pterjan@google.com>; Pavel A; Pavel A <pavel.aronsky@daynix.com>; Pino Toscano <pino@debian.org>; Raphael Medaer <raphael@medaer.me>; Red Hat Inc; Red Hat, Inc; Redhat Inc.; Rob McMahon <Rob.McMahon@warwick.ac.uk>; Robert Milasan <rmilasan@suse.com>; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus; Roman Bogorodskiy <bogorodskiy@gmail.com>; Rosen Penev <rosenp@gmail.com>; Scott James Remnant; Simon Haggett <simon.haggett@gmail.com>; Simon Josefsson <simon@josefsson.org>; Simon Tatham; Stanislav Brabec <sbrabec@suse.com>; Stef Waler <stefw@collabora.co.uk>; Stef Walter; Stef Walter <stef@thewalter.net>; Stef Walter <stef@thewalter.net> , Daiki Ueno; Stef Walter <stef@thewalter.net> , Daiki Ueno, Anderson Sasaki; Stef Walter <stef@thewalter.net> Generator DocBook XSL Stylesheets; Stef Walter <stef@thewalter.net> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@collabora.co.uk>; Stef Walter <stefw@collabora.co.uk> , Daiki Ueno; Stef Walter <stefw@collabora.co.uk> Laszlo Ersek <lersek@redhat.com>; Stef Walter <stefw@gnome.org>; Stef Walter <stefw@gnome.org> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@redhat.com>; Stef Walter <stefw@redhat.com> Jakub Jelen <jjelen@redhat.com>; Stefan Walter; Stefano Garzarella <sgarzare@redhat.com>; Steve Reid <steve@edmweb.com>; Tavian Barnes <tavianator@tavianator.com>; The Regents of the University of California; Tim J. Robbins; Timo Jyrinki <timo.jyrinki@iki.fi>; Todd C. Miller; Tom Sutcliffe <tomsci@me.com>; Tom Tromey <tromey@cygnus.com>; Tomas Tomecek <ttomecek@redhat.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Vincent JARDIN <vjardin@free.fr>; X Consortium; X Ruoyao <xry111@mengyan1223.wang>; Xi Ruoyao <xry111@xry111.site>; Yuri Chornoivan <yurchor@ukr.net>; Zoltan Fridrich <zfridric@redhat.com>; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno <dueno@redhat.com>; g10 Code GmbH; manphiz@gmail.com <manphiz@gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/p11-kit-0.25.3-3.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/p11-kit@0.25.3-3.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zQcHjj479zVlxNSr8OuRDFzTxubzMlMeH7HwH6MQmEQ/p11-kit-~-3.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://p11-glue.freedesktop.org/p11-kit.html",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/p11-kit",
    "versionInfo" : "0.25.3-3.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-pcre2-syntax-10.40-6.el9-arch-noarch",
    "copyrightText" : "Copyright 1992-2021 Free Software Foundation, Inc.\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1997-2022 University of Cambridge\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009-2022 Zoltan Herczeg\nCopyright (c) 2010-2022 Zoltan Herczeg\n(c) 1/I Capture group\n(c) 2/I Capture group\n\nAuthors: 1/I Capture group; 2/I Capture group; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Christian Ehrlicher <Ch.Ehrlicher@gmx.de>; Daniel Richard G.; Daniel Richard G. <skunk@iSKUNK.ORG>; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Henry Spencer; Mark Baker; Peter Rosin <peda@lysator.liu.se>; Philip Hazel; Scott James Remnant; Steven G. Johnson; Tom Tromey <tromey@cygnus.com>; University of Cambridge; X Consortium; Zoltan Herczeg",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre2-syntax-10.40-6.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rrWzoCVx3hMa7oRQBruSpgOoC8QFah8GVKIY1kYQAbQ/pcre2-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/pcre2-syntax",
    "versionInfo" : "10.40-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-pcre2-10.40-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2021 Free Software Foundation, Inc.\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1997-2022 University of Cambridge\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009-2022 Zoltan Herczeg\nCopyright (c) 2010-2022 Zoltan Herczeg\n(c) 1/I Capture group\n(c) 2/I Capture group\n\nAuthors: 1/I Capture group; 2/I Capture group; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Christian Ehrlicher <Ch.Ehrlicher@gmx.de>; Daniel Richard G.; Daniel Richard G. <skunk@iSKUNK.ORG>; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Henry Spencer; Mark Baker; Peter Rosin <peda@lysator.liu.se>; Philip Hazel; Scott James Remnant; Steven G. Johnson; Tom Tromey <tromey@cygnus.com>; University of Cambridge; X Consortium; Zoltan Herczeg",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre2-10.40-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rrWzoCVx3hMa7oRQBruSpgOoC8QFah8GVKIY1kYQAbQ/pcre2-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/pcre2",
    "versionInfo" : "10.40-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-pcre-8.44-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2013-2013 Tilera Corporation(jiwang@tilera.com)\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright 2003 and onwards Google Inc.\nCopyright (c) 2010-2012\nCopyright (c) 2001, Alexander Tokarev\nCopyright (c) 2004-2018 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007-2012, Google Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1997-2020 University of Cambridge\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009-2020 Zoltan Herczeg\nCopyright (c) 2010-2020 Zoltan Herczeg\n(c) 2001 Alexander Tokarev <dwalin@dwalin.ru>\n(c) 2001 Peter S. Voronov\n\nAuthors: Alexander Tokarev; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Christian Ehrlicher <Ch.Ehrlicher@gmx.de>; Daniel Richard G.; Daniel Richard G. <skunk@iSKUNK.ORG>; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Greg J. Badros; Henry Spencer; Mark Baker; Peter Rosin <peda@lysator.liu.se>; Peter S. Voronov; Philip Hazel; Sanjay Ghemawat; Scott James Remnant; Sergei Golubchik <vuvova@gmail.com>; Steven G. Johnson; Tilera Corporation(jiwang@tilera.com); Tom Tromey <tromey@cygnus.com>; University of Cambridge; X Consortium; Zoltan Herczeg; as a recurse into group; onwards Google Inc.; wilsonh@google.com (Wilson Hsieh)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre-8.44-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4pi_uEjEtgmCfhwQYp9ptc2nt9d51Zsa1gpFSEny7y8/pcre-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/pcre@8.44-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/pcre",
    "versionInfo" : "8.44-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-cipher-2.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2008 Sonatype, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-cipher-2.0-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pMs3WgYxqpLRbBqH5w1nQDE1_vetgH9cYw1KQdL9TgA/plexus-cipher-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-cipher@2.0-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-cipher",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-cipher",
    "versionInfo" : "2.0-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-classworlds-2.6.0-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2006 The Codehaus Foundation\nCopyright 2002 (c) The Codehaus\nCopyright 2002 (c) The Werken Company",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-classworlds-2.6.0-13.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pjZC-mTqVTefut3pgZcBXvesSxGtJROISFpCsfhtWSc/plexus-classworlds-~-13.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-classworlds@2.6.0-13.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-classworlds",
    "licenseConcluded" : "(Apache-2.0 AND Plexus)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-classworlds",
    "versionInfo" : "2.6.0-13.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-containers-component-annotations-2.1.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2005 The Apache Software Foundation\nCopyright 2004-2006 Vincent Massol\nCopyright (c) 2004-2005, Codehaus.org\nCopyright (c) 2003 Extreme! Lab, Indiana University\nCopyright (c) 2004-5, The Codehaus\nCopyright (c) 2005, The Codehaus\nCopyright (c) 2003 The Trustees of Indiana University\nCopyright (c) 2006-2007 the original author or authors\n\nAuthors: Andrew Williams; Benjamin Bentmann; Codehaus Foundation; Codehaus.org; Dain Sundstrom; Eugene Kuleshov; Extreme! Lab, Indiana University; Jason van Zyl; Kenney Westerhof; Kristian Rosenvold; The Apache Software Foundation; The Codehaus; The Trustees of Indiana University; Vincent Massol; brett@apache.org Brett Porter; brett@codehaus.org Brett Porter; can check out the project; dan@envoisolutions.com Dan Diephouse; http://www.extreme.indiana.edu/~aslom/ Aleksander Slominski; jason@maven.org Jason van Zyl; kenney@apache.org Kenney Westerhof; kenney@codehaus.org Kenney Westerhof; kenney@neonics.com Kenney Westerhof; michal.maczka@dimatics.com Michal Maczka; michal@codehaus.org Michal Maczka; mmaczka@interia.pl' Michal Maczka; rahul.thakur.xdev@gmail.com Rahul Thakur; the Indiana University Extreme! Lab; the original author or authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-containers-component-annotations-2.1.1-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UwamCNNbik1Tt69owghrkKeym0jVfeEwaRGW1lk-Vh0/plexus-containers-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-containers-component-annotations@2.1.1-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-containers",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND xpp)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-containers-component-annotations",
    "versionInfo" : "2.1.1-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-interpolation-1.26-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2004 The Apache Software Foundation\nCopyright 2007 The Codehaus Foundation\nCopyright (c) 2001-2003 The Apache Software Foundation\nCopyright (c) 2004, The Codehaus",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-interpolation-1.26-13.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0s0GVK3U3GFFaXL7ocRu4DAFCTazs8AoPJY0dy4wUKk/plexus-interpolation-~-13.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-interpolation@1.26-13.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-interpolation",
    "licenseConcluded" : "(Apache-1.1 AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-interpolation",
    "versionInfo" : "1.26-13.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-sec-dispatcher-2.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2008 Sonatype, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-sec-dispatcher-2.0-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wbTXBDrau-bQwEwkn_tQkovblN3aoca1rRSa_dJt-e0/plexus-sec-dispatcher-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-sec-dispatcher@2.0-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-sec-dispatcher",
    "versionInfo" : "2.0-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-utils-3.3.0-11.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2004 Sun Microsystems, Inc.\nCopyright The Apache Software Foundation\nCopyright The Codehaus Foundation\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c) 2006, Javolution (http://javolution.org)\nCopyright (c) 2002 John Casey\nCopyright (c) 2000-2002 The Apache Software Foundation\nCopyright (c) 2003 The Trustees of Indiana University\nCopyright (c) 2001-2003, ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL 60661 USA",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-utils-3.3.0-11.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-utils@3.3.0-11.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/N32ec9wnfedHwJX8_HZwMtenm5Lazm6WUCrpTVkVqus/plexus-utils-~-11.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://codehaus-plexus.github.io/plexus-utils/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND xpp AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-utils",
    "versionInfo" : "3.3.0-11.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-popt-1.18-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2008 Felipe Castro\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. Gabor Kelemen <kelemeng@gnome.hu> , 2007\nCopyright (c) 2007 Free Software Foundation, Inc. Leandro Lucarella <luca@linuxmendoza.org.ar> , 2007\nCopyright (c) 2008 Free Software Foundation, Inc. Seksan Poltree <seksan.poltree@gmail.com> , 2008\nCopyright (c) 2005 Free Software Foundation, Inc. Wei-Lun Chao <chaoweilun@pcmail.com.tw> , 2005\nCopyright (c) 2003 Free Software Foundation, Inc. Yukihiro Nakai <ynakai@redhat.com> , 2003\nCopyright (c) 1999 Free Software Foundation, Inc. Yuri Syrota <rasta@renome.rovno.ua> , 1999\nCopyright (c) 1998 Red Hat Software\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998 by Addison Wesley Longman, Inc.\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2008 popt\n(c) 1998-2000 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/popt-1.18-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/popt@1.18-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ddq1l4nuewynPwiilvZoIS-JTl5QKxPq-mDX2zKPUl8/popt-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/popt/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/popt",
    "versionInfo" : "1.18-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-procps-ng-3.3.17-14.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-2003 Albert Cahalan\nCopyright 1996 Charles L. Blake\nCopyright 2015 Craig Small <csmall@enc.com.au>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1999 George Staikos\nCopyright 1999, George Staikos (staikos@0wned.org)\nCopyright 1996 Helmut Geyer <Helmut.Geyer@iwr.uni-heidelberg.de>\nCopyright 2014 Jaromir Capik <jcapik@redhat.com>\nCopyright 2000 Kjetil Torgrim Homme 2017-2020 Craig\nCopyright 2000 Kjetil Torgrim Homme <kjetilho@ifi.uio.no>\nCopyright 1998 Michael K. Johnson\nCopyright 2004 Nicholas Miell\nCopyright 2003 Robert Love\nCopyright 1998-2002 by Albert Cahalan\nCopyright 1994 by Henry Ware <al172@yfn.ysu.edu>\nCopyright 2017 by James C. Warmer\nCopyright (c) Albert Cahalan\nCopyright (c) 1992 Branko Lankester\nCopyright (c) 1996 Charles Blake <cblake@bbn.com>\nCopyright (c) 1996 Charles L. Blake\nCopyright (c) 2003 Chris Rivera\nCopyright (c) 2015 Craig Small <csmall@enc.com.au>\nCopyright (c) 2012 Craig Small <csmall-procps@enc.com.au>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) Dec 1993\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1994 Henry Ware <al172@yfn.ysu.edu>\nCopyright (c) 2013 Jaromir Capik <jcapik@redhat.com>\nCopyright (c) 2010 Karel Zak <kzak@redhat.com>\nCopyright (c) 1993 Larry Greenfield\nCopyright (c) 1993 Larry Greenfield (greenfie@gauss.rutgers.edu)\nCopyright (c) 1995 Martin Schulze <joey@infodrom.north.de>\nCopyright (c) 1993 Matt Welsh, mdw@sunsite.unc.edu\nCopyright (c) 1993 Matt Welsh, mdw@tc.cornell.edu\nCopyright (c) 1998 Michael K. Johnson\nCopyright (c) 1998 Miquel van Smoorenburg\nCopyright (c) 1992-2012 Mostly\nCopyright (c) 2017 Werner Fink\nCopyright (c) 1994 X Consortium\nCopyright (c) 2002-2020, by James C. Warner\nCopyright (c) 1992-1998 by Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 1995-1997, 2000-2004 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/procps-ng-3.3.17-14.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/procps-ng@3.3.17-14.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UuqZ2Uq9pJhehNIgNM7ADG59bUsjY82c959-EeyW7j4/procps-ng-~-14.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://sourceforge.net/projects/procps-ng/",
    "licenseConcluded" : "(GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-1.0-or-later AND LGPL-2.0-or-later AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/procps-ng",
    "versionInfo" : "3.3.17-14.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-protobuf-c-1.3.3-13.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2008 Google Inc.\nCopyright (c) 2008 Benjamin Kosnik <bkoz@redhat.com>\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2012 Dan Winship\nCopyright (c) 2008-2013, Dave Benson\nCopyright (c) 2008-2016, Dave Benson and the protobuf-c authors\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2014, 2015 Google Inc.\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2016, 2018 Krzesimir Nowak <qdlacz@gmail.com>\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2015 Moritz Klammler <moritz@klammler.eu>\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2015 Paul Norman <penorman@mac.com>\nCopyright (c) 2012, 2014 Philip Withnall\nCopyright (c) 2013 Roy Stogner <roystgnr@ices.utexas.edu>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2014, The protobuf-c authors\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright (c) 2012 Zack Weinberg <zackw@panix.com>\ncopyright 2008-2014\n\nAuthors: Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Sokolov <sokolov@google.com>; Benjamin Kosnik; Christian Persch; Dan Winship; Dave Benson; Dave Benson and maintained by; Dave Benson and the protobuf-c authors; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim; Krzesimir Nowak; Maarten Bosmans; Moritz Klammler; Paolo Borelli; Paul Norman; Philip Withnall; Roy Stogner; Scott James Remnant; The protobuf-c authors; Tom Tromey <tromey@cygnus.com>; X Consortium; Xan Lopez; Zack Weinberg; doxygen. Using; kenton@google.com (Kenton Varda)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/protobuf-c-1.3.3-13.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/protobuf-c@1.3.3-13.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eNa-MLE2V2QlNQmidvOdp5TCcweHuL_hTWRUmP6cKr4/protobuf-c-~-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/protobuf-c/protobuf-c",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/protobuf-c",
    "versionInfo" : "1.3.3-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-publicsuffix-list-20210518-3.el9-arch-noarch",
    "copyrightText" : "Copyright © 2007–22 Mozilla Foundation.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/publicsuffix-list-20210518-3.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/publicsuffix-list@20210518-3.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gOYrSaRhZMLfSO-wuC0DhJmhRIg_JUEO-agVStRnrqc/publicsuffix-list-20210518-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://publicsuffix.org/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/publicsuffix-list",
    "versionInfo" : "20210518-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-libs-3.9.23-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008 Armin Ronacher\nCopyright 1995-1997, Automatrix, Inc.\nCopyright 1999, Bioreason, Inc.\nCopyright 2009 Brian Quinlan\nCopyright Disney Enterprises, Inc.\nCopyright 2004-2005 Elemental Security, Inc.\nCopyright 2006 Georg Brandl\nCopyright 2006 Google, Inc.\nCopyright 2000, Mojam Media, Inc.\nCopyright 1991-1995, Stichting Mathematisch Centrum\nCopyright 2008 by Armin Ronacher\nCopyright 1994 by Lance Ellinghouse Cathedral City, California Republic, United States of America\nCopyright 1996 by Sam Rushing\nCopyright 2000 by Timothy O'Malley <timo@alum.mit.edu>\nCopyright 2001-2019 by Vinay Sajip\nCopyright 1995-1996 by Virginia Polytechnic Institute & State University, Blacksburg, Virginia, USA, and Fred L. Drake, Jr., Reston, Virginia\nCopyright (c) 2000 Bastian Kleineidam\nCopyright (c) 2000 BeOpen.com\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) 2004-2005 Gerhard Haring <gh@ghaering.de>\nCopyright (c) 2005-2010 Gregory P. Smith (greg@krypto.org)\nCopyright (c) 1999-2001 Gregory P. Ward\nCopyright (c) 2002 Lars Gustaebel <lars@gustaebel.de>\nCopyright (c) 2000 Luke Kenneth Casson Leighton <lkcl@samba.org>\nCopyright (c) 1999-2000, Marc-Andre Lemburg mal@lemburg.com\nCopyright (c) 2005, 2006 Martin von Lowis\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023 Python Software Foundation\nCopyright (c) 2006-2008, R Oudkerk\nCopyright (c) 1991-1995 Stichting Mathematisch Centrum\nCopyright (c) 1991-1995 Stichting Mathematisch Centrum, Amsterdam\nCopyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands\nCopyright (c) 2001-2019 Vinay Sajip\nCopyright (c) 1999-2002 by Fredrik Lundh\nCopyright (c) 2003-2005 by Peter Astrand <astrand@lysator.liu.se>\nCopyright (c) 1997-2001 by Secret Labs AB.\nCopyright (c) 2000-2010, eGenix.com Software GmbH info@egenix.com\nPortions copyright 1991-1995 by Stichting Mathematisch Centrum, Amsterdam, The Netherlands\n(c) Copyright CNRI\n(c) Copyright 2000 Guido van Rossum. Codec\n(c) 2005 Ian Bicking and contributors\n(c) Implicit lookup Bypassing\nportions copyright 2001, Autonomous Zones Industries, Inc.\n\nAuthors: AT&T; Andre Roberge; Andreas Zeidler <az@kreativkombinat.de>; Andrew Dalke; Andrew Svetlov <andrew.svetlov@gmail.com>; Anthony Baxter; Anthony Baxter <anthony@interlink.com.au>; Armin Ronacher; Automatrix, Inc.; Autonomous Zones Industries, Inc.; Barry Warsaw; Barry Warsaw <barry@python.org>; Barry Warsaw, Thomas Wouters, Anthony Baxter; Bastian Kleineidam; Bastian Kleineidam <calvin@cs.uni-sb.de>; Baxter, Wouters and Warsaw; BeOpen.com; Ben Gertzfield; Ben Gertzfield, Barry Warsaw; Benjamin Peterson; Bill Janssen; Bioreason, Inc.; Bob Ippolito <bob@redivi.com>; Brian Quinlan; Brian Quinlan (brian@sweetapp.com); CNRI; Carey Evans <c.evans@clear.net.nz>; Christian Heimes; Collin Winter; Collin Winter, Nick Edds; Corporation for National Research Initiatives; David Ascher <david_ascher@brown.edu>; Davide Di Blasi <davidedb@gmail.com>; Disney Enterprises, Inc.; Donn Cave <donn@u.washington.edu>; Elemental Security, Inc.; Eric Price and Facundo Batista and Raymond Hettinger; Eric S. Raymond <esr@thyrsus.com>; Ezio Melotti; Fred L. Drake, Jr. fdrake@acm.org; Fredrik Lundh; Fredrik Lundh <fredrik@pythonware.com>; Georg Brandl; George Boutsioukis <gboutsioukis@gmail.com>; Gerhard H; Gerhard Haering <gerhard@bigfoot.de>; Gerhard Haring; Gerhard Haring <gh@ghaering.de>; Google Inc.; Google, Inc.; Greg Ward <gward@python.net>; Gregory P. Smith; Gregory P. Ward; Guido van Rossum <guido@python.org>; Guido van Rossum. Codec; Hye-Shik Chang <perky@FreeBSD.org>; Ian Bicking and contributors; Implicit lookup Bypassing; Jack Diederich; Jack Jansen and Fredrik Lundh; Jacques Frechet, Collin Winter; James Roskind; Jeffrey Yasskin; Ka-Ping Yee <ping@lfw.org>; Ka-Ping Yee <ping@zesty.ca>; Keith Dart; Lance Ellinghouse; Lance Ellinghouse Cathedral City, California Republic, United States of America; Lars Gust; Lars Gustaebel; Lars Wirzenius <liw@iki.fi>; Luke Kenneth Casson Leighton; Marc-Andre Lemburg; Marc-Andre Lemburg (mal@lemburg.com); Marc-Andre Lemburg <mal@egenix.com>; Marc-Andre Lemburg, mal@lemburg.com; Mark Hammond (mhammond@skippinet.com.au); Martin v. Lowis; Martin von Loewis; Martin von Lowis; Michael Felt <aixtools@felt.demon.nl>; Mojam Media, Inc.; Nadeem Vawda <nadeem.vawda@gmail.com>; Nick Coghlan; Nick Coghlan , Raymond Hettinger , and Lukasz Langa; Nick Edds; Paul Kippes <kippesp@gmail.com>; Perry Stoll; Peter Astrand; Piers Lauder; Piers Lauder <piers@cs.su.oz.au>; Python Software Foundation; R Oudkerk; Rick Holbert <holbert.13@osu.edu>; Sam Rushing; Sam Rushing <rushing@nightmare.com>; Secret Labs AB; Sjoerd Mullender (sjoerd@acm.org); Skip Montanaro; Steen Lumholt; Steven J. Bethard <steven.bethard@gmail.com>; Stichting Mathematisch Centrum; Stichting Mathematisch Centrum Amsterdam, The Netherlands; Stichting Mathematisch Centrum, Amsterdam; Stichting Mathematisch Centrum, Amsterdam, The Netherlands; The Dragon De Monsyne <dragondm@integral.org>; Tim Peters (tim@python.org); Timothy O'Malley; Timothy O'Malley <timo@alum.mit.edu>; Tino Lange <Tino.Lange@isg.de>; Tomas Lindroos <skitta@abo.fi>; Victor Stinner; Vinay Sajip; Vinay Sajip <vinay_sajip@red-dove.com>; Virginia Polytechnic Institute & State University, Blacksburg, Virginia, USA, and Fred L. Drake, Jr., Reston, Virginia; Zooko O'Whielacronx http://zooko.com zooko@zooko.com; a Parser; different Executors; eGenix.com Software GmbH; s Author-email; the Jython developers; the Jython developers (www.jython.org)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-libs-3.9.23-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-libs@3.9.23-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xeLSkAERJYm7e23antyym14DePur7MILS_Ggp7XZBd4/python~-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.python.org/",
    "licenseConcluded" : "Python-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-libs",
    "versionInfo" : "3.9.23-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-pip-wheel-21.3.1-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2017 Elisey Zanko\nCopyright 2015 Eric Larson\nCopyright 2016 Etienne Bersac\nCopyright 2012 Facebook\nCopyright Jonathan Hartley 2013\nCopyright 2016 Joshua Harlow\nCopyright 2016 Julien Danjou\nCopyright 2020 Kenneth Reitz\nCopyright 2015,2016,2017 Nir Cohen\nCopyright 2013-2014 Ray\nCopyright 2012 by Simon Sapin\nCopyright (c) 2010 ActiveState Software Inc.\nCopyright (c) 2008-2020 Andrey Petrov and contributors\nCopyright (c) 2010-2020 Benjamin Peterson\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) Donald Stufft and individual contributors\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2012 Georgios Verigakis <verigak@gmail.com>\nCopyright (c) 2008-2011 INADA Naoki <songofacandy@gmail.com>\nCopyright (c) 2006-2013 James Graham and other contributors\nCopyright (c) 2016 Jason R Coombs <jaraco@jaraco.com>\nCopyright (c) 2010 Jonathan Hartley\nCopyright (c) 2013-2021, Kim Davies\nCopyright (c) 2002 Lars Gustaebel <lars@gustaebel.de>\nCopyright (c) 2003-2019 Paul T. McGuire\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation\nCopyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands\nCopyright (c) 2021 Taneli Hukkinen\nCopyright (c) 2012 The Python Software Foundation\nCopyright (c) 2008-2021 The pip developers\nCopyright (c) 2008-2020 The pip developers see AUTHORS.txt <https://github.com/pypa/pip/blob/main/AUTHORS.txt>\nCopyright (c) 2017 Thomas Kluyver\nCopyright (c) 2018, Tzu-ping Chung <uranusjr@gmail.com>\nCopyright (c) 2012-2015 Vinay Sajip\nCopyright (c) 2015-2016 Will Bond <will@wbond.net>\nCopyright (c) 2012 by Simon Sapin\nCopyright (c) 1998 the Initial Developer\n(c) 2006 Entrust, Inc.\n(c) 2006 Entrust, Inc. Label Entrust Root Certification\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net Limited\n(c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial\ncopyright (c) 2012 by Kenneth Reitz\ncopyrighted by the Free Software Foundation\n\nAuthors: ActiveState Software Inc.; Andrey Petrov (andrey.petrov@shazow.net); Andrey Petrov and contributors; Author-email Maintainer Maintainer-email; Benjamin Peterson; Benjamin Peterson <benjamin@python.org>; Corporation for National Research Initiatives; Donald Stufft and individual contributors; Elisey Zanko; Entrust, Inc.; Entrust, Inc. - for; Entrust, Inc. Label Entrust Root Certification; Entrust.net Limited; Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial; Eric Larson; Etienne Bersac; Facebook; Free Software Foundation, Inc.; Georg Brandl Author-email georg@python.org; Georgios Verigakis; INADA Naoki; James Graham and other contributors; Jason R Coombs; Jonathan Hartley; Joshua Harlow; Julien Danjou; Kenneth Reitz; Kim Davies; Lars Gust; Lars Gustaebel; Nir Cohen; Paul T. McGuire; Python Software Foundation; Ray; Simon Sapin; Stichting Mathematisch Centrum Amsterdam, The Netherlands; Taneli Hukkinen; The Python Software Foundation; The pip developers; The pip developers see AUTHORS.txt; Thomas Kluyver; Tzu-ping Chung; Vinay Sajip; Will Bond; prepare-release''. Regenerate; responds, the no-response <https://github.com/apps/no-response>; the Free Software Foundation; the Initial Developer; the PackageFinder",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-pip-wheel-21.3.1-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-pip-wheel@21.3.1-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1wmer9lF_adXdE1g_KnvUd8lP1Ma6MAgcKuTs547pv4/python-pip-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pip.pypa.io/",
    "licenseConcluded" : "(LGPL-2.0-only AND BSD-2-Clause AND BSD-3-Clause AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND Python-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-pip-wheel",
    "versionInfo" : "21.3.1-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-pip-21.3.1-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2017 Elisey Zanko\nCopyright 2015 Eric Larson\nCopyright 2016 Etienne Bersac\nCopyright 2012 Facebook\nCopyright Jonathan Hartley 2013\nCopyright 2016 Joshua Harlow\nCopyright 2016 Julien Danjou\nCopyright 2020 Kenneth Reitz\nCopyright 2020 Kenneth Reitzu Z\nCopyright 2015,2016,2017 Nir Cohen\nCopyright 2013-2014 Ray\nCopyright 2012 by Simon Sapin\nCopyright (c) 2010 ActiveState Software Inc.\nCopyright (c) 2008-2020 Andrey Petrov and contributors\nCopyright (c) 2010-2020 Benjamin Peterson\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) Donald Stufft and individual contributors\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2012 Georgios Verigakis <verigak@gmail.com>\nCopyright (c) 2008-2011 INADA Naoki <songofacandy@gmail.com>\nCopyright (c) 2006-2013 James Graham and other contributors\nCopyright (c) 2016 Jason R Coombs <jaraco@jaraco.com>\nCopyright (c) 2010 Jonathan Hartley\nCopyright (c) 2013-2021, Kim Davies\nCopyright (c) 2002 Lars Gustaebel <lars@gustaebel.de>\nCopyright (c) 2003-2019 Paul T. McGuire\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation\nCopyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands\nCopyright (c) 2021 Taneli Hukkinen\nCopyright (c) 2012 The Python Software Foundation\nCopyright (c) 2008-2021 The pip developers\nCopyright (c) 2008-2020 The pip developers see AUTHORS.txt <https://github.com/pypa/pip/blob/main/AUTHORS.txt>\nCopyright (c) 2017 Thomas Kluyver\nCopyright (c) 2018, Tzu-ping Chung <uranusjr@gmail.com>\nCopyright (c) 2012-2015 Vinay Sajip\nCopyright (c) 2015-2016 Will Bond <will@wbond.net>\nCopyright (c) 2012 by Simon Sapin\nCopyright (c) 1998 the Initial Developer\n(c) 2006 Entrust, Inc.\n(c) 2006 Entrust, Inc. Label Entrust Root Certification\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net Limited\n(c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial\ncopyright (c) 2012 by Kenneth Reitz\ncopyrighted by the Free Software Foundation\n\nAuthors: ActiveState Software Inc.; Andrey Petrov (andrey.petrov@shazow.net); Andrey Petrov and contributors; Author-email Maintainer Maintainer-email; Benjamin Peterson; Benjamin Peterson <benjamin@python.org>; Corporation for National Research Initiatives; Donald Stufft and individual contributors; Elisey Zanko; Entrust, Inc.; Entrust, Inc. - for; Entrust, Inc. Label Entrust Root Certification; Entrust.net Limited; Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial; Eric Larson; Etienne Bersac; Facebook; Free Software Foundation, Inc.; Georg Brandl Author-email georg@python.org; Georgios Verigakis; INADA Naoki; James Graham and other contributors; Jason R Coombs; Jonathan Hartley; Joshua Harlow; Julien Danjou; Kenneth Reitz; Kenneth Reitzu Z; Kim Davies; Lars Gust; Lars Gustaebel; Nir Cohen; Paul T. McGuire; Python Software Foundation; Ray; Simon Sapin; Stichting Mathematisch Centrum Amsterdam, The Netherlands; Taneli Hukkinen; The Python Software Foundation; The pip developers; The pip developers see AUTHORS.txt; Thomas Kluyver; Tzu-ping Chung; Vinay Sajip; Will Bond; prepare-release''. Regenerate; responds, the no-response <https://github.com/apps/no-response>; sz Author-email; the Free Software Foundation; the Initial Developer; the PackageFinder",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/python3-pip-21.3.1-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-pip@21.3.1-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1wmer9lF_adXdE1g_KnvUd8lP1Ma6MAgcKuTs547pv4/python-pip-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pip.pypa.io/",
    "licenseConcluded" : "(LGPL-2.0-only AND BSD-2-Clause AND BSD-3-Clause AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND Python-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-pip",
    "versionInfo" : "21.3.1-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-setuptools-wheel-53.0.0-13.el9-6.1-arch-noarch",
    "copyrightText" : "Copyright Jason R. Coombs\nCopyright 1995-2005 Mark Adler\nCopyright (c) 2005-2010 ActiveState Software Inc.\nCopyright (c) 2013 Eddy Petrisor\nCopyright (c) 2005, 2006 Martin von Lowis\nCopyright (c) 2003-2018 Paul T. McGuire\nCopyright 2014-2019 s",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-setuptools-wheel-53.0.0-13.el9_6.1.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-setuptools-wheel@53.0.0-13.el9_6.1?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1KgIpl2p4gDUlK2aRyKOJePFHdySO0zDrWMIYrrNx_Y/python-setuptools-~-13.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.python.org/pypi/setuptools",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-setuptools-wheel",
    "versionInfo" : "53.0.0-13.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-setuptools-53.0.0-15.el9-arch-noarch",
    "copyrightText" : "Copyright Jason R. Coombs\nCopyright 1995-2005 Mark Adler\nCopyright (c) 2005-2010 ActiveState Software Inc.\nCopyright (c) 2013 Eddy Petrisor\nCopyright (c) 2005, 2006 Martin von Lowis\nCopyright (c) 2003-2018 Paul T. McGuire\nCopyright 2014-2019 s\nCopyright 2014-2019 sN",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-setuptools-53.0.0-15.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GMPXIn29mglAYYTDHRUt82V6REGI36rE61XbP8-WL04/python-setuptools-~-15.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-setuptools@53.0.0-15.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.python.org/pypi/setuptools",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-setuptools",
    "versionInfo" : "53.0.0-15.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-3.9.23-2.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2000 BeOpen.com\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) 2001-2023 Python Software Foundation\nCopyright (c) 1991-1995 Stichting Mathematisch Centrum",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-3.9.23-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xeLSkAERJYm7e23antyym14DePur7MILS_Ggp7XZBd4/python~-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3@3.9.23-2.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.python.org/",
    "licenseConcluded" : "Python-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3",
    "versionInfo" : "3.9.23-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-readline-8.1-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015\nCopyright 1988-2020 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2004 Per Bothner <per@bothner.com>\nCopyright 2019 Radical Eye Software\nCopyright 1989-2020 by the Free Software Foundation, Inc.\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) Damian Ivereigh 2000\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 1999-2001 Geoff Wing <gcw@pobox.com>\nCopyright (c) 2000-2007 Hans Lub hlub@knoware.nl\nCopyright (c) 1999 Jeff Solomon\nCopyright (c) 1993-2000 Juergen Weigert (jnweiger@immd4.informatik.uni-erlangen.de) Michael Schroeder (mlschroe@immd4.informatik.uni-erlangen.de)\nCopyright (c) 1987 Oliver Laumann\nCopyright (c) 2004, 1999 Per Bothner\nCopyright (c) 1989-2020 by the Free Software Foundation, Inc.\nCopyright (c) 1989-2020 by the Free Software Foundation, Inc. .SH DESCRIPTION Many\nCopyright (c) (c) 2003-2004 Harold Levy\nCopyright <http://www.ams.org>\n(c) 2000-2007 Hans Lub\n(c) 2001 by Dimitris Vyzovitis vyzo@media.mit.edu\n(c) m(haracters.)275 1983",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/readline-8.1-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_NEj8WUfFK2fiTFN4MhFCPfimZSCuJFca_PbiSqunkM/readline-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/readline@8.1-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tiswww.case.edu/php/chet/readline/rltop.html",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/readline",
    "versionInfo" : "8.1-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-redhat-release-9.6-0.1.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019 Red Hat, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/redhat-release-9.6-0.1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/O_RcFtmJv1Vo9RKlSChZBVXQArMlhedLc4ooco0KDgU/redhat-release-~-~.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/redhat-release@9.6-0.1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(LicenseRef-RedHat-UBI-EULA AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/redhat-release",
    "versionInfo" : "9.6-0.1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rootfiles-8.1-34.el9-arch-noarch",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rootfiles-8.1-34.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nKEBYS-vUCUSs6G1EF4Ra8Hr2CA6yXfJk5eCh_gS2EA/rootfiles-~-34.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rootfiles@8.1-34.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rootfiles",
    "versionInfo" : "8.1-34.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rpm-libs-4.16.1.3-37.el9-arch-x86-64",
    "copyrightText" : "RPM is Copyright (c) 1998 by Red Hat Software, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rpm-libs-4.16.1.3-37.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rpm-libs@4.16.1.3-37.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2Gl3GdvR6ZpoErWN0Ltc24SvVaUN87R3QjTeH-ePly4/rpm-~-37.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.rpm.org/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rpm-libs",
    "versionInfo" : "4.16.1.3-37.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rpm-4.16.1.3-37.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-2002 - Red Hat, Inc.\nCopyright 1998-2002 - Red Hat, Inc. Kunde\nCopyright 1998-2002 Red Hat, Inc. Nie\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991 Free Software Foundation, Inc.\nCopyright (c) 1998 - 2002 Red Hat, Inc.\nCopyright (c) 1998-2002 - Red Hat, Inc. Could\nCopyright (c) 1998-2002 - Red Hat, Inc. Database\nCopyright (c) 1998-2002 - Red Hat, Inc. Database opties Interne\nCopyright (c) 1998-2002 - Red Hat, Inc. Database options Internal\nCopyright (c) 1998-2002 - Red Hat, Inc. Impossibile regolarizzare l'hostname\nCopyright (c) 1998-2002 - Red Hat, Inc. Nemohu\nCopyright (c) 1998-2002 - Red Hat, Inc. Nie\nCopyright (c) 1998-2002 - Red Hat, Inc. Rechnername\nCopyright (c) 2003 System Design and Research Institute Co.,Ltd.\nCopyright (c) 1998-2002 gant Red Hat, Inc. N'hell\n(c) 1998-2002\n(c) 1998-2002 - Red Hat, Inc.\n(c) 1998-2002 - Red Hat, Inc Opsi\n(c) 1998-2002 - exec s seek\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rpm-4.16.1.3-37.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rpm@4.16.1.3-37.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2Gl3GdvR6ZpoErWN0Ltc24SvVaUN87R3QjTeH-ePly4/rpm-~-37.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.rpm.org/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rpm",
    "versionInfo" : "4.16.1.3-37.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rsync-3.2.5-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2020 Free Software Foundation, Inc.\nCopyright 1995-2013 Jean-loup Gailly and Mark Adler\nCopyright 1995-2013 Mark Adler\nCopyright Patrick Powell 1995\nCopyright (c) 1996\nCopyright (c) 1992-1995 Andrew Tridgell\nCopyright (c) 1992-2001 Andrew Tridgell <tridge@samba.org>\nCopyright (c) 2004 Chris Shoemaker\nCopyright (c) 2001-2003 Christophe Devine\nCopyright (c) Cronosys, LLC 2004\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1996-2001 Internet Software Consortium\nCopyright (c) 1995-2005 Jean-loup Gailly\nCopyright (c) 1995-2013 Jean-loup Gailly and Mark Adler\nCopyright (c) Jeremy Allison 2000\nCopyright (c) 2020 Jorrit Jongma\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 2002 Martin Pool\nCopyright (c) 2000-2001 Martin Pool <mbp@samba.org>\nCopyright (c) 1996 Paul Mackerras\nCopyright (c) 2003-2007, PostgreSQL Global Development Group\nCopyright (c) 2004 Red Hat, Inc.\nCopyright (c) 1998 Red Hat Software\nCopyright (c) 2013 Roman Donchenko\nCopyright (c) 2002 Scott Howard\nCopyright (c) 2002-2008 Wayne Davison\nCopyright (c) 1999 Weiss\nCopyright (c) 1996-2022 by Andrew Tridgell, Wayne Davison, and others. Web site https://rsync.samba.org\nCopyright (c) 2002 by Brad Hards <bradh@frogmouth.net>\nCopyright (c) 2001 by Martin Pool\nCopyright (c) 2001, 2002 by Martin Pool <mbp@samba.org>\nPortions Copyright (c) 1996-2005, The PostgreSQL Global Development Group\nPortions Copyright (c) 1994, The Regents of the University of California\n(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 1998-2000 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rsync-3.2.5-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rsync@3.2.5-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7j1mY-afIqynK7jTI6dw5LpTf9n-qzE-QdZumN4gJa8/rsync-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rsync.samba.org/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rsync",
    "versionInfo" : "3.2.5-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-sed-4.8-9.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nAutorska prava (c) Zaduzhbina\nC. @copyright D. (c)\nCopyright 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright 1991, 99 Free Software Foundation, Inc.\nCopyright 87, 1991, 1992 Free Software Foundation, Inc.\nCopyright 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End More\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\nCopyright (c) 1990-2005, 2007-2009 Acme, Inc.\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright (c) 89 Free Software Foundation, Inc.\nCopyright (c) 2004 Free Software Foundation, Inc. Acest\nCopyright (c) 2001 Free Software Foundation, Inc. Eli Zaretskii <eliz@is.elta.co.il> , 2001\nCopyright (c) 2020 Free Software Foundation, Inc. Gael Queri <gael@lautre.net> , 1998. Frederic Marchal <fmarchal@perso.be> , 2020 Gael Queri J'ai\nCopyright (c) 2001, 2019 Free Software Foundation, Inc. Jong-Hoon Ryu <redhat4u@netian.com> , 2001. Seong-ho Cho <darkcircle.0426@gmail.com> , 2019\nCopyright (c) 2001 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2020\nCopyright (c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\nCopyright (c) 2002, 2007, 2008 Free Software Foundation, Inc. Wang Li <charles@linux.net.cn> , 2002\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\n(c) Free Software Foundation, Inc\n(c) Idruma Eleutherou Logismikou, Inc.\n(c) Ozgur Yazilim Vakfi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/sed-4.8-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/sed@4.8-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3JEIl-AKGOuiCSoLfYIPhT67ULnGZjBErGVb9cpRp8/sed-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://sed.sourceforge.net/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/sed",
    "versionInfo" : "4.8-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-setup-2.13.7-10.el9-arch-noarch",
    "copyrightText" : "Ville Skytta <ville.skytta@iki.fi> 2016",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/setup-2.13.7-10.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/setup@2.13.7-10.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DUU5txqUmo4AGTOn3OHYFmRDsBPsMa0ZD-RSjU4W57E/setup-~-10.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pagure.io/setup/",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/setup",
    "versionInfo" : "2.13.7-10.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-shadow-utils-4.9-12.el9-arch-x86-64-epoch-2",
    "copyrightText" : "Copyright 1989 - 1990, Julianne Frances Haugh\nCopyright 1991, Julianne Frances Haugh Hungarian\nCopyright 1991, Julianne Frances Haugh Todos\nCopyright 1991 - 1993, Julianne Frances Haugh and Chip Rosenthal\nCopyright 1992, Phillip Street and Julianne Frances Haugh\nCopyright 1996, Rafal Maszkowski <rzm@pdi.net>\nCopyright (c) 1989 Carnegie Mellon University\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1996 HANATAKA Shinya\nCopyright (c) 1990 - 1994, Julianne Frances Haugh\nCopyright (c) 1997 Kazuyoshi Furutaka\nCopyright (c) 2001 Maki KURODA\nCopyright (c) 1996 - 2000, Marek Michalkiewicz\nCopyright (c) 1996 Michael H. Jackson\nCopyright (c) 2007 - 2011, Nicolas Francois\nCopyright (c) 1983, 1991 The Regents of the University of California\nCopyright (c) 2000 - 2006, Tomasz Kloczko\nCopyright (c) 2001 Yuichi SATO\nCopyright (c) 1993 and The Australian National University\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/shadow-utils-4.9-12.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/shadow-utils@4.9-12.el9?arch=x86_64&epoch=2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_1Vy3RK-xpX81iG0oQ4l4ftxJH_FfZWEbr8cssvUidA/shadow-utils-~-12.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/shadow-maint/shadow",
    "licenseConcluded" : "(BSD-4-Clause-UC AND BSD-3-Clause AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/shadow-utils",
    "versionInfo" : "4.9-12.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-sisu-0.3.5-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 The Codehaus Foundation\nCopyright The Codehaus Foundation\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2006, Javolution (http://javolution.org)\nCopyright (c) 2010, 2013 Sonatype, Inc.\nCopyright (c) 2010, 2015 Sonatype, Inc. and others Bundle-DocURL http://www.eclipse.org/sisu Bundle-License http://www.eclipse.org/legal/epl-v10.html\nCopyright (c) 2008, 2014 Stuart McCulloch\nCopyright (c) 2014 Takari, Inc.\nCopyright (c) 2001-2003, ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL 60661 USA",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/s/sisu-0.3.5-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vdLlQsjrHBGsDynqiiuoV7GFRvOs4o_sArdLyR9011g/sisu-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/sisu@0.3.5-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse.org/sisu/",
    "licenseConcluded" : "(EPL-1.0 AND BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/sisu",
    "versionInfo" : "0.3.5-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 1999-2005 The Apache Software Foundation\nCopyright (c) 2000-2009, JPackage Project\nCopyright (c) 2004-2007 QOS.ch\nCopyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2013 QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2004-2017 http://www.qos.ch/> QOS.ch",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/s/slf4j-1.7.32-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_uIIY3rMEEU5n6EVxvtp8r2LGrT0tp2jkkscsQTw-80/slf4j-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/slf4j@1.7.32-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/slf4j",
    "versionInfo" : "1.7.32-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-sqlite-libs-3.34.1-7.el9-3-arch-x86-64",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/sqlite-libs-3.34.1-7.el9_3.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/m80GFQhL2KtGcTNl_AHGNPJnTxez_yhAHWd3E8-fCRQ/sqlite-~-7.el9_3.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/sqlite-libs@3.34.1-7.el9_3?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.sqlite.org/",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/sqlite-libs",
    "versionInfo" : "3.34.1-7.el9_3"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-systemd-libs-252-51.el9-6.1-arch-x86-64",
    "copyrightText" : "Copyright 2008 Colin McCabe <colin@cozybit.com>\nCopyright 2008 Ian Kent <raven@themaw.net>\nCopyright 2015-2017 Intel Deutschland GmbH\nCopyright 2001 Jeff Garzik <jgarzik@pobox.com>\nCopyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>\nCopyright 2008 Jouni Malinen <jouni.malinen@atheros.com>\nCopyright 2008 Luis Carlos Cobo <luisca@cozybit.com>\nCopyright 2008, 2009 Luis R. Rodriguez <lrodriguez@atheros.com>\nCopyright 2008 Michael Buesch <m@bues.ch>\nCopyright 2008 Michael Wu <flamingice@sourmilk.net>\nCopyright 2018 Neal Gompa\nCopyright 2008 Red Hat, Inc.\nCopyright 2014 The Chromium OS Authors\nCopyright (c) 2000-2002 Alan Cox <alan@redhat.com>\nCopyright (c) 2008 Alan Jenkins <alan.christopher.jenkins@googlemail.com>\nCopyright (c) 2009 Alan Jenkins <alan-jenkins@tuffmail.co.uk>\nCopyright (c) 2016, 2022 Alexander Shopov <ash@kambanaria.org>\nCopyright (c) 2016, 2022 Alexander Shopov <ash@kambanaria.org> Alexander Shopov <ash@kambanaria.org> , 2016, 2022\nCopyright (c) 2014 Axis Communications AB.\nCopyright (c) 2016 BISDN GmbH.\nCopyright (c) 2012 B. Poettering Contact fsprg@point-at-infinity.org\nCopyright (c) 2020 Bastien Nocera <hadess@hadess.net>\nCopyright (c) 2015 Boyuan Yang\nCopyright (c) 2010 Brandon Philips\nCopyright (c) 2010-2017 Canonical\nCopyright (c) 2009 Canonical Ltd.\nCopyright (c) 2014 Carlos Garnacho <carlosg@gnome.org>\nCopyright (c) 2004 Chris Friesen <chris_friesen@sympatico.ca>\nCopyright (c) 2015 Chris Morgan\nCopyright (c) 2013-2019 Daniele Medri\nCopyright (c) 1998 David S. Miller (davem@redhat.com)\nCopyright (c) 2009-2010 David Zeuthen <zeuthen@gmail.com>\nCopyright (c) 2018 Dell Inc.\nCopyright (c) 2014 Didier Roche\nCopyright (c) 2016 Djalal Harouni\nCopyright (c) 2017 Felipe Sateler\nCopyright (c) 2009 Filippo Argiolas <filippo.argiolas@gmail.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2016 Gabor Kelemen\nCopyright (c) 2003 Greg Kroah-Hartman <greg@kroah.com>\nCopyright (c) 2012 Holger Hans Peter Freyther\nCopyright (c) IBM Corp. 2003\nCopyright (c) 2013 Intel Corporation\nCopyright (c) 2012 <James.Bottomley@HansenPartnership.com> https://github.com/mjg59/efitools\nCopyright (c) 2015-2017 Jason A. Donenfeld <Jason@zx2c4.com>\nCopyright (c) 2014 Jason St. John\nCopyright (c) 2002-2020 Jean Delvare <jdelvare@suse.de>\nCopyright (c) 2015 Jeff Huang\nCopyright (c) 2014 Josh Triplett\nCopyright (c) 2012 Josh Triplett <josh@joshtriplett.org>\nCopyright (c) 2016 Julian Orth\nCopyright (c) 2011 Karel Zak <kzak@redhat.com>\nCopyright (c) 2010 Maarten Lankhorst\nCopyright (c) 2017 Max Resch <resch.max@gmail.com>\nCopyright (c) 1999-2000 Maxim Krasnyansky <max_mk@yahoo.com>\nCopyright (c) 2010 - Maxim Levitsky\nCopyright (c) 2016 Michael Karcher\nCopyright (c) 2016 Michal Soltys <soltys@ziu.info>\nCopyright (c) 1995-2004 Miquel van Smoorenburg\nCopyright (c) 2018 Neal Gompa\nCopyright (c) 2007 Oracle\nCopyright (c) 2019 Oracle and/or its affiliates\nCopyright (c) 2011-2014 PLUMgrid, http://plumgrid.com\nCopyright (c) 2010 ProFUSION embedded systems\nCopyright (c) 2015 Rafael Ferreira\nCopyright (c) 2010 Ran Benita\nCopyright (c) 2000 Red Hat, Inc.\nCopyright (c) 2012 Roberto Sassu - Politecnico di Torino, Italy TORSEC group - http://security.polito.it\nCopyright (c) SUSE\nCopyright (c) 2005 SUSE Linux Products GmbH\nCopyright (c) 2015 Sabrina Dubroca <sd@queasysnail.net>\nCopyright (c) 2009 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2013-2017 Sergey Ptashnick\nCopyright (c) 2013 Simon Peeters\nCopyright (c) 2001 - 2003 Sistina Software (UK) Limited\nCopyright (c) 2013-2016 Sylvain Plantefeve\nCopyright (c) 1999 Tom Tromey\nCopyright (c) 2019 VMware, Inc.\nCopyright (c) 2014 Vinay Kulkarni\nCopyright (c) 2014 Vinay Kulkarni <kulkarniv@vmware.com>\nCopyright (c) 2015 Werner Fink\nCopyright (c) 2009 Wolfgang Grandegger <wg@grandegger.com>\nCopyright (c) 2016 Zeal Jagannatha\nCopyright (c) 2002-2022, and GNU\nPortions Copyright 2002 Intel eli.kupermann@intel.com, christopher.leech@intel.com\nPortions Copyright 2001 Sun Microsystems (thockin@sun.com)\nPortions Copyright (c) 2004 David Zeuthen, <david@fubar.dk>\nPortions Copyright (c) Sun Microsystems 2008\n(c) @@ -2015,22\n(c) B.A.T.M.A.N. contributors\n(c) Copyright 1995 Simon Guru Aleph-Null Janes NCM Network and Communications Management, Inc.\n(c) Copyright 1999, Thomas Davis, tadavis@lbl.gov\ncopyrighted by the Free Software Foundation\n(c) systemd, 2022 https://github.com/systemd/systemd/tree/main/docs\n\nAuthors: <James.Bottomley@HansenPartnership.com> https://github.com/mjg59/efitools; Alan Cox; Alan Jenkins; Albert Pool, Martin Mares, and other volunteers from the PCI ID Project at https://pci-ids.ucw.cz; Alexander Shopov; Alexander Shopov Alexander Shopov; Auke Kok <auke-jan.h.kok@intel.com>; Austin Appleby; Axis Communications AB.; B. Poettering Contact; B.A.T.M.A.N. contributors; BISDN GmbH.; Bastien Nocera; Boyuan Yang; Brandon Philips; Canonical; Canonical Ltd.; Carlos Garnacho; Chris Friesen; Chris Morgan; Colin McCabe; Daniele Medri; Dave Young <hidave.darkstar@gmail.com>; David S. Miller; David Zeuthen; Dell Inc.; Didier Roche; Djalal Harouni; Felipe Sateler; Filippo Argiolas; Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Donald Becker, <becker@super.org> Alan Cox, <alan@lxorguk.ukuu.org.uk>; Free Software Foundation, Inc.; GNU; Gabor Kelemen; Greg Kroah-Hartman; Hannes Reinecke <hare@suse.de>; Holger Hans Peter Freyther; IBM Corp.; Ian Kent; Intel; Intel Corporation; Intel Deutschland GmbH; James Chapman <jchapman@katalix.com>; Jason A. Donenfeld; Jason St. John; Jean Delvare; Jeff Garzik; Jeff Huang; Johannes Berg; Joonas Lahtinen <joonas.lahtinen@linux.intel.com>; Josh Triplett; Jouni Malinen; Julian Orth; Karel Zak; Lennart Poettering; Lennert Buytenhek <buytenh@gnu.org>; Luis Carlos Cobo; Luis R. Rodriguez; Maarten Lankhorst; Max Resch; Maxim Krasnyansky; Maxim Levitsky; Michael Buesch; Michael Karcher; Michael Wu; Michal Soltys; Miloslav Trmac <mitr@redhat.com>; Miquel van Smoorenburg; Nathaniel Chen <nathaniel.chen@intel.com>; Neal Gompa; Oracle; Oracle and/or its affiliates; Original taken from the GNU Project; PLUMgrid; Patrick Mansfield <patmans@us.ibm.com>; Pedro Roque <roque@di.fc.ul.pt>; ProFUSION embedded systems; Rafael Ferreira; Ran Benita; Red Hat, Inc.; Roberto Sassu - Politecnico di Torino, Italy TORSEC group; Ross Biro Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Corey Minyard; SUSE; SUSE Linux Products GmbH; Sabrina Dubroca; Scott James Remnant; Sergey Ptashnick; Simon Guru Aleph-Null Janes NCM Network and Communications Management, Inc.; Simon Peeters; Sistina Software (UK) Limited; Stephen J. Gowdy <linux.usb.ids@gmail.com>; Sun Microsystems; Sylvain Plantefeve; The Chromium OS Authors; Thomas Davis; Tom Tromey; VMware, Inc.; Vinay Kulkarni; Werner Fink; Wolfgang Grandegger; Zeal Jagannatha; bpf_attr.test.cpu; systemd; systemd-update-done. Its; the ChromiumOS project; the Free Software Foundation; the project; the systemd project; update-man-rules.py; with an appropriate primary group",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/systemd-libs-252-51.el9_6.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/systemd-libs@252-51.el9_6.1?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OTWy74pf2HH21wwAb8LmfxMtJDQA88ScfkGMw-sDdvs/systemd-252-51.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://systemd.io",
    "licenseConcluded" : "(MIT AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/systemd-libs",
    "versionInfo" : "252-51.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-tar-1.34-7.el9-arch-x86-64-epoch-2",
    "copyrightText" : "Copyright 2004-2006, 2013, 2019 Free Software Foundation\nCopyright 1990-2021 Free Software Foundation, Inc.\nCopyright 2000-2021 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2005, 2006, 2009\nCopyright (c) 1992, 1994-1997, 1999-2001, 2003-2017, 2021 Free Software Foundation, Inc.\nCopyright (c) 2018 Free Software Foundation, Inc. Antonio Jose Coutinho <ajc@di.uminho.pt> Pedro Albuquerque <palbuquerque73@gmail.com> , 2018, 2019\nCopyright (c) 2002 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2002\nCopyright (c) 2002 Free Software Foundation, Inc. Jacobo Tarrio Barreiro <jtarrio@iname.com> , 2002\nCopyright (c) 1997 Free Software Foundation, Inc. Martin Lacko <lacko@host.sk> , 2001\nCopyright (c) 2006 Free Software Foundation, Inc. Mikel Olasagasti <hey_neken@mundurat.net> , 2006. Piarres Beobide <pi@beobide.net> , 2006\nCopyright (c) 2003, 2004 Free Software Foundation, Inc. Mpalaskas Euaggelos (Balaskas Euaggelos) <ebalaskas@cs.teiath.gr> , 2004. Simos Xenitellis <simos74@gmx.net> , 2004\nCopyright (c) 2001 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2019\nCopyright (c) 2001 Free Software Foundation, Inc. Ulrich Drepper <drepper@gnu.ai.mit.edu> , 1995? Karl Eichwalder <ke@ke.central.de> , 1996 Christian Kirsch <ck@held.mind.de> , 1996, 2001 Michael Piefel <piefel@informatik.hu-berlin.de> , 2003, 2006, 2007, 2008, 2009, 2010, 2011, 2013, 2014, 2016, 2018\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2009-2018 Sergey Poznyakoff\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright d Free Software Foundation, Inc.\n(c) 1988, 92, 93, 94, 95, 96, 97 Free Software ~ Foundation, Inc.\n(c) ISALPHA (c) ISDIGIT (c)\n(c) Internal macro Tests\ncopyrights for 2013",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/t/tar-1.34-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/tar@1.34-7.el9?arch=x86_64&epoch=2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3ZLlENTVz3LbPrV76pcI7Ev8NsI3_O1hYhOiaIpdvDo/tar-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/tar/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/tar",
    "versionInfo" : "1.34-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ttmkfdir-3.0.9-65.el9-arch-x86-64",
    "copyrightText" : "(c) Joerg Pommnitz, 2000",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/t/ttmkfdir-3.0.9-65.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ttmkfdir@3.0.9-65.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jhGaVvXXIjWYw4KL123pDv1R3aHCUZzYQeS35Z9sDU0/ttmkfdir-~-65.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ttmkfdir",
    "versionInfo" : "3.0.9-65.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-tzdata-java-2025b-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2000-2004 Sun Microsystems, Inc.\nCopyright 1985, 1987, 1988 The Regents of the University of California\nCopyright (c) 2000, 2004, Oracle and/or its affiliates\nCopyright (c) 2024 Red Hat, Inc.\nCopyright (c) 2007-2012, Stephen Colebourne & Michael Nascimento Santos",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/t/tzdata-java-2025b-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/tzdata-java@2025b-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rLTtiGQDF7gj8ygNOBScyxdyDwXBBDDhAbUV8_YRkek/tzdata-2025b-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/tzdata-java",
    "versionInfo" : "2025b-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-tzdata-2025b-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2000-2004 Sun Microsystems, Inc.\nCopyright 1985, 1987, 1988 The Regents of the University of California\nCopyright (c) 2000, 2004, Oracle and/or its affiliates\nCopyright (c) 2024 Red Hat, Inc.\nCopyright (c) 2007-2012, Stephen Colebourne & Michael Nascimento Santos",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/t/tzdata-2025b-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/tzdata@2025b-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rLTtiGQDF7gj8ygNOBScyxdyDwXBBDDhAbUV8_YRkek/tzdata-2025b-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/tzdata",
    "versionInfo" : "2025b-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-xml-common-0.6.3-58.el9-arch-noarch",
    "copyrightText" : "Copyright 2001 The Internet Society and W3C (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/x/xml-common-0.6.3-58.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/xml-common@0.6.3-58.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AVRNSpaPb2vLOoggpgaCB5uGyzMilk8gw463GNboDuY/sgml-common-~-58.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.w3.org/2003/entities/",
    "licenseConcluded" : "(W3C-19980720 AND GPL-3.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/xml-common",
    "versionInfo" : "0.6.3-58.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-xorg-x11-fonts-Type1-7.5-33.el9-arch-noarch",
    "copyrightText" : "Copyright 1987-1990 as an unpublished work by Bitstream Inc.\nCopyright 1990 as an unpublished work by Bitstream Inc.\nCopyright 1987-1990 as an unpublished work by Bitstream Inc., Cambridge, MA. Comment\nCopyright (c) 1989, 1991 Adobe Systems Incorporated\n(Copyright (c) 2000 XFree86, Inc.)\nFont Program Copyright 1990 as an unpublished work by Bitstream Inc., Cambridge, MA.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/x/xorg-x11-fonts-Type1-7.5-33.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/xorg-x11-fonts-Type1@7.5-33.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7504Hi8rTKmj84fEPEIRpNoWAxVewfMVzy4m349mwok/xorg-x11-fonts-~-33.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.x.org",
    "licenseConcluded" : "(Lucida-Bitmap-Fonts AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/xorg-x11-fonts-Type1",
    "versionInfo" : "7.5-33.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-xz-libs-5.2.5-8.el9-0-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2004-2018 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1998, 2001, 2002, 2006, 2007 Free Software Foundation\nCopyright (c) 1987,88,89,90,91,92,93,94,95,96,98,99,2000,2001,2002,2003,2004,2006 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2014 Google Inc.\nCopyright (c) 1998, 1999, 2001 Henry Spencer\nCopyright (c) 1992, 1993 Jean-loup Gailly\nCopyright (c) 2015 Lasse Collin <lasse.collin@tukaani.org>\nCopyright (c) 2019 Marc Stevens <marc.stevens@cwi.nl>\nCopyright (c) Michael D. Brennan\nCopyright (c) 2005 Philipp Benner\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2006 Timo Lindfors\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1997-2007 by Dimitri van Heesch\n\nAuthors: Adrien Nader <adrien@notk.org>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Tourbin <alexey.tourbin@gmail.com>; Andre Noll <maan@tuebingen.mpg.de>; Andrew Dudman Lasse Collin; Antoine Coeur <antoine.coeur@ef.com>; Ben Boeckel <mathstuf@gmail.com>; Benno Schulenberg <bensberg@justemail.net>; Bootstrap Authors; Bruno Haible <bruno@clisp.org>; Charles Levert <charles@comm.polymtl.ca>; Daniel Richard G.; Dimitri van Heesch; Fran,cois Pinard; Free Software Foundation; Free Software Foundation, Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hauke Henningsen <sqrt@entless.org>; Henry Spencer; Igor Pavlov; Igor Pavlov Lasse Collin; Jean-loup Gailly; Jean-loup Gailly, Charles Levert, and Paul Eggert. Andrew Dudman; Jeff Bastian <jbastian@redhat.com>; Jonathan Nieder; Jonathan Nieder <jrnieder@gmail.com>; Jouk Jansen; Julien Marrec <julien.marrec@gmail.com>; Kevin Springle Wei Dai Igor Pavlov; Kevin Springle and Wei Dai; LZMA Utils; Lasse Collin; Lasse Collin <lasse.collin@tukaani.org>; Lasse Collin Joachim Henke; Marc Stevens; Martin Vath <vaeth@mathematik.uni-wuerzburg.de>; Michael D. Brennan; Paul Eggert; Pavel Raiskup <praiskup@redhat.com>; Per Bothner; Philipp Benner; Scott James Remnant; Steven G. Johnson; Timo Lindfors; Tom Tromey <tromey@cygnus.com>; Tran Ngoc Quan <vnwildman@gmail.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; X Consortium; XZ Utils; XZ Utils THANKS Incomplete; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/x/xz-libs-5.2.5-8.el9_0.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/xz-libs@5.2.5-8.el9_0?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/odi2nz6KCnZlrv4uE6nvSvARQvCih9mRShPghCInOug/xz-~-8.el9_0.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tukaani.org/xz/",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/xz-libs",
    "versionInfo" : "5.2.5-8.el9_0"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-zlib-1.2.11-40.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll\nCopyright Jean-loup Gailly Osma Ahvenlampi <Osma.Ahvenlampi@hut.fi>\nCopyright 1995-2017 Jean-loup Gailly and Mark Adler\nCopyright 1995-2017 Mark Adler\nCopyright (c) 1997,99 Borland Corp.\nCopyright (c) 1997,99 Borland Corporation\nCopyright (c) 1998 Brian Raiter <breadbox@muppetlabs.com>\nCopyright (c) 2003 Chris Anderson <christop@charm.net>\nCopyright (c) 1997 Christian Michelsen Research AS Advanced Computing\nCopyright (c) 2003 Cosmin Truta\nCopyright (c) 2002-2003 Dmitriy Anisimkov\nCopyright (c) 2007-2008 Even Rouault\nCopyright (c) 1998-2005 Gilles Vollant\nCopyright (c) 1998 - 2010 Gilles Vollant, Even Rouault, Mathias Svensson\nCopyright (c) 1998-2010 Gilles Vollant (minizip) http://www.winimage.com/zLibDll/minizip.html\nCopyright (c) Henrik Ravn 2004\nCopyright (c) 1990-2000 Info-ZIP.\nCopyright (c) 1995-1998 Jean-loup Gailly\nCopyright (c) 1995-1996 Jean-loup Gailly, Brian Raiter and Gilles Vollant\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-2003 Jean-loup Gailly and Mark Adler\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 1996 L. Peter Deutsch and Jean-Loup Gailly\nCopyright (c) 1995-2003 Mark Adler\nCopyright (c) 2019 Matheus Castanho <msc@linux.ibm.com> , IBM\nCopyright (c) 2009-2010 Mathias Svensson http://result42.com\nCopyright (c) 1995-2006, 2010, 2011, 2016, 2019 Rogerio Alves\nCopyright (c) 2017 Rogerio Alves <rogealve@br.ibm.com> , IBM\nCopyright (c) 1998 by Andreas R. Kleinert\nCopyright (c) 1998 by Bob Dellaca\nCopyright (c) 2003 by Cosmin Truta\nCopyright (c) 1998-2010 - by Gilles Vollant\nCopyright (c) 2004 by Henrik Ravn\nCopyright (c) 1998,1999,2000 by Jacques Nomssi Nzali\nCopyright (c) 1995-2003 by Jean-loup Gailly\nCopyright (c) 2004, 2005 by Mark Adler\n(c) Copyright Henrik Ravn 2004\n(c) 1995-2017 Jean-loup Gailly & Mark Adler\n(c) 1995-2017 Jean-loup Gailly and Mark Adler",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/z/zlib-1.2.11-40.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p-c-979NyTUf5IArcqy8HNhFNGs5RGhbutZUZ5iWUo4/zlib-~-40.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/zlib@1.2.11-40.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.zlib.net/",
    "licenseConcluded" : "(BSL-1.0 AND Zlib)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/zlib",
    "versionInfo" : "1.2.11-40.el9"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-messaging-service-3001.2.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-filesystem-storage-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-curl-minimal-7.76.1-31.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opencensus-opencensus-api-0.28.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-proxy-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-bookkeeper-storage-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-crypto-policies-20250128-1.git5269e22.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-microdnf-3.9.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-package-core-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-cups-libs-2.3.3op2-33.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-mkfontscale-1.2.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.65.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-io-core-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-coreutils-single-8.32-39.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-wagon-3.5.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-metadata-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-crypto-policies-scripts-20250128-1.git5269e22.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-utils-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-cdi-api-2.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-resolver-1.7.3-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.65.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-worker-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-copy-jdk-configs-4.0-3.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-shared-utils-3.3.4-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-runtime-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bzip2-libs-1.0.8-10.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-lib-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-secrets-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ca-certificates-2025.2.80-v9.0.305-91.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-openjdk17-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lua-5.4.4-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bind-utils-9.16.23-34.el9-7.1-arch-x86-64-epoch-32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lz4-libs-1.9.3-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opencensus-opencensus-contrib-http-util-0.28.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-jetty-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.zookeeper-zookeeper-3.9.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-log4j2-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-hotspot-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.zookeeper-zookeeper-jute-3.9.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-fontconfig-2.14.0-2.el9-1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-sysinit-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-httpserver-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.zookeeper-zookeeper-prometheus-metrics-3.9.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-fonts-filesystem-2.0.5-7.el9.1-arch-noarch-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-caffeine-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.thrift-libthrift-0.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-filesystem-3.16-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-softokn-freebl-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.yetus-audience-annotations-0.12.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-findutils-4.8.0-7.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-softokn-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus.jmx-collector-0.16.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-websocket-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-expat-2.5.0-5.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-npth-1.6-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-testmocks-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-file-libs-5.39-16.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nspr-4.35.0-17.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.opencensus-opencensus-proto-0.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-transaction-common-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-dejavu-sans-fonts-2.37-18.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nettle-3.10.1-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.perfmark-perfmark-api-0.26.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-transaction-coordinator-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-dnf-data-4.14.0-25.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nmap-ncat-7.92-3.el9-arch-x86-64-epoch-3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-cyrus-sasl-lib-2.1.27-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ncurses-base-6.2-10.20210508.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-testclient-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-dbus-libs-1.12.20-8.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ncurses-libs-6.2-10.20210508.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-mpfr-4.1.0-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-alsa-lib-1.2.13-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libuv-1.42.0-2.el9-4-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-auth-sasl-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-alternatives-1.24-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libverto-0.3.2-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-six-1.17.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libusbx-1.0.26-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-original-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-typing-extensions-4.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libuuid-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-pyyaml-6.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libtool-ltdl-2.4.6-46.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-cli-utils-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-ratelimit-2.2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libunistring-0.9.10-15.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-auth-sasl-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-pymmh3-0.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libstdcPLUSPLUS-11.5.0-5.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-common-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-pytz-2025.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libtasn1-4.16.0-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsmartcols-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-pulsar-client-3.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsolv-0.7.24-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-messagecrypto-bc-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-cli-1.5.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-original-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-instance-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bind-libs-9.16.23-34.el9-7.1-arch-x86-64-epoch-32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lua-posix-35.0-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-local-runner-original-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bind-license-9.16.23-34.el9-7.1-arch-noarch-epoch-32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-api-examples-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-basesystem-11-13.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lmdb-libs-0.9.29-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-api-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bash-5.1.8-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lua-libs-5.4.4-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-config-validation-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-audit-libs-3.1.5-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libzstd-1.5.5-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-docs-tools-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-avahi-libs-0.8-22.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lksctp-tools-1.0.19-3.el9-4-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-tools-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-lang3-3.12.0-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxml2-2.9.13-10.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-common-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-atinject-1.0.5-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libyaml-0.2.5-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-codec-1.15-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxcrypt-compat-4.4.18-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-tools-api-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-io-2.11.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxcrypt-4.4.18-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxcb-1.13.1-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-functions-proto-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.bytebuddy-byte-buddy-1.14.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlets-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-json-c-0.14-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-jpms-5.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-server-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-javapackages-filesystem-6.4.0-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jline-jline-2.14.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlet-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jcl-over-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.websocket-javax.websocket-client-api-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-proxy-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-java-17-openjdk-headless-17.0.16.0.8-2.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.ws.rs-javax.ws.rs-api-2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-security-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-java-17-openjdk-17.0.16.0.8-2.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.servlet-javax.servlet-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jansi-2.4.0-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-x86-64-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.validation-validation-api-1.1.0.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-java-17-openjdk-devel-17.0.16.0.8-2.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-client-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-iputils-20210202-15.el9-7-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-continuation-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jakarta-annotations-1.3.5-15.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-httpcomponents-core-4.4.13-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper.stats-bookkeeper-stats-api-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper.stats-codahale-metrics-provider-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper.http-http-server-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.containers-jersey-container-servlet-core-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libX11-1.7.0-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper.http-vertx-http-server-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.containers-jersey-container-servlet-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXau-1.0.9-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-protobuf-1.11.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-langpacks-en-3.0-16.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.11.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libX11-common-1.7.0-11.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jodah-typetools-0.5.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-langpacks-core-en-3.0-16.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-one.gfw-jaxb-api-2.3.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-langpacks-core-font-en-3.0-16.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jcip-jcip-annotations-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-keyutils-libs-1.6.3-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jodah-failsafe-2.4.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-jakarta.inject-2.6.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-krb5-libs-1.21.1-8.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-json-glib-1.6.6-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jsr-305-3.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vertx-vertx-auth-common-4.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger-swagger-core-1.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gnupg2-2.3.3-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger-swagger-models-1.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.79"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.reactivex.rxjava3-rxjava-3.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glibc-2.34-168.el9-6.20-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-pcre2-syntax-10.40-6.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.swagger-swagger-annotations-1.6.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.79"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gmp-6.2.0-13.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-pcre2-10.40-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.79"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glibc-common-2.34-168.el9-6.20-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-p11-kit-trust-0.25.3-3.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-ext-jdk18on-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glibc-minimal-langpack-2.34-168.el9-6.20-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-p11-kit-0.25.3-3.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-common-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bitbucket.b-c-jose4j-0.9.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gdbm-libs-1.23-1.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-3.0.7-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glib2-2.68.4-16.el9-6.2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openssl-libs-3.5.1-4.el9-7-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-netty-utils-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-fstrm-0.6.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openldap-2.6.8-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gawk-5.1.0-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-so-3.0.7-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-util-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-freetype-2.10.4-10.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-2.1.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-alpn-server-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-2.3.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-1.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-hostname-3.23-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-protobuf-c-1.3.3-13.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-2.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-alpn-conscrypt-server-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-httpcomponents-client-4.5.13-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vertx-vertx-web-4.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-common-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-guava-31.0.1-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-popt-1.18-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-1.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-server-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-harfbuzz-2.7.4-10.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-procps-ng-3.3.17-14.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vertx-vertx-grpc-4.3.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-api-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-graphite2-1.3.14-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-sec-dispatcher-2.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vertx-vertx-web-common-4.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-websocket-client-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-grep-3.6-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-utils-3.3.0-11.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vertx-vertx-bridge-common-4.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.conscrypt-conscrypt-openjdk-uber-2.5.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-google-guice-4.2.3-10.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-containers-component-annotations-2.1.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vertx-vertx-core-4.3.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.websocket-javax-websocket-client-impl-9.4.57.v20241219"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gpgme-1.15.1-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-interpolation-1.26-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gnutls-3.8.3-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-cipher-2.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.checkerframework-checker-qual-3.33.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gobject-introspection-1.68.0-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-classworlds-2.6.0-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-pcre-8.44-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.distributedlog-distributedlog-core-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.curator-curator-recipes-5.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.distributedlog-distributedlog-common-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.curator-curator-client-5.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.curator-curator-framework-5.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jsonSchema-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-collections4-4.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.oshi-oshi-core-java11-6.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.distributedlog-distributedlog-protocol-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.ben-manes.caffeine-caffeine-2.9.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.api.grpc-proto-google-common-protos-2.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-managed-ledger-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.auth-google-auth-library-credentials-1.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-broker-auth-oidc-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.seancfoley-ipaddress-5.3.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-web-2.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.zafarkhaja-java-semver-0.9.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-3.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-core-2.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-slf4j-impl-2.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.auth-google-auth-library-oauth2-http-1.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.auto.value-auto-value-annotations-1.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.5.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-cpu-affinity-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-32.1.2-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-tools-framework-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jctools-jctools-core-2.1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-circe-checksum-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jctools-jctools-core-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.http-client-google-http-client-gson-1.41.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-slogger-api-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.1.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.http-client-google-http-client-1.41.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-slogger-slf4j-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.25.0-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-proto-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-json-jackson-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-server-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-3.19.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-allocator-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.ext-jersey-entity-filtering-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.re2j-re2j-1.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-util-3.19.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper.stats-prometheus-metrics-provider-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-server-2.34"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-common-1.8.20"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-logging-interceptor-4.9.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okhttp3-okhttp-4.9.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okio-okio-jvm-3.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-server-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-style-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-service-api-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.typesafe.netty-netty-reactive-streams-2.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-java-kv-client-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-remote-ssh-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.yahoo.datasketches-memory-0.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-proto-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-remote-telnet-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.squareup.okio-okio-3.4.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-java-client-base-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-builtins-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.activation-javax.activation-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-java-client-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-reader-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-api-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.8.20"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-configuration-commons-configuration-1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-common-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains-annotations-13.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.yahoo.datasketches-sketches-core-0.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-native-io-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk7-1.8.20"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-cli-commons-cli-1.5.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-statelib-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.8.20"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-stream-storage-service-impl-4.16.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.carrotsearch-hppc-0.9.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.14.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-github-apache-pulsar-helm-chart-pulsar-2.7.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.auth0-java-jwt-4.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.auth0-jwks-rsa-0.22.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.8.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.beust-jcommander-1.82"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-graphite-4.1.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jmx-4.1.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.airlift-aircompressor-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.1.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.etcd-jetcd-common-0.7.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jvm-4.1.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.etcd-jetcd-api-0.7.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-all-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-alts-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.etcd-jetcd-core-0.7.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.etcd-jetcd-grpc-0.7.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-context-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-core-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-api-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-auth-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-grpclb-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-netty-shaded-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-netty-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-rls-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-services-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-protobuf-lite-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-protobuf-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-stub-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-xds-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-servlet-jakarta-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.grpc-grpc-servlet-1.55.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.gsonfire-gson-fire-1.8.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-api-0.11.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-impl-0.11.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.kubernetes-client-java-proto-18.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.kubernetes-client-java-18.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.jsonwebtoken-jjwt-jackson-0.11.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.kubernetes-client-java-api-18.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-classes-io-uring-0.0.24.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-native-io-uring-0.0.24.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-haproxy-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.108.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-c8ycustom-pulsar-helm-chart-3001.2.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-pip-21.3.1-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-setuptools-wheel-53.0.0-13.el9-6.1-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-libs-3.9.23-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-pip-wheel-21.3.1-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-publicsuffix-list-20210518-3.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rootfiles-8.1-34.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-readline-8.1-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-redhat-release-9.6-0.1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-setuptools-53.0.0-15.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-3.9.23-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-setup-2.13.7-10.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-shadow-utils-4.9-12.el9-arch-x86-64-epoch-2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rsync-3.2.5-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-sed-4.8-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rpm-libs-4.16.1.3-37.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rpm-4.16.1.3-37.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-sqlite-libs-3.34.1-7.el9-3-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-systemd-libs-252-51.el9-6.1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-sisu-0.3.5-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libmodulemd-2.13.0-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.roaringbitmap-RoaringBitmap-0.9.44"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libmount-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libksba-1.5.1-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libmaxminddb-1.5.2-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-terminal-jna-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libibverbs-57.0-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-terminal-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libidn2-2.3.0-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libgcrypt-1.10.0-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jline-jline-terminal-jansi-3.21.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libgpg-error-1.42-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-1.7.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.rocksdb-rocksdbjni-7.9.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libnghttp2-1.43.0-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-1.7.32"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libnl3-3.11.0-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-grpcio-1.76.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsemanage-3.6-5.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-kazoo-2.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsepol-3.6-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-certifi-2025.11.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-librhsm-0.0.3-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-fastavro-1.7.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libselinux-3.6-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.zeroturnaround-zt-zip-1.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-librepo-1.14.5-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-apache-bookkeeper-client-4.17.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libreport-filesystem-2.15.2-6.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.xerial.snappy-snappy-java-1.1.10.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libpeas-1.30.0-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libpng-1.6.37-12.el9-arch-x86-64-epoch-2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libpcap-1.10.0-4.el9-arch-x86-64-epoch-14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-prometheus-client-0.23.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsigsegv-2.13-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-pypi-protobuf-3.20.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXtst-1.2.3-16.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-xorg-x11-fonts-Type1-7.5-33.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libacl-2.3.1-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-xz-libs-5.2.5-8.el9-0-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXi-1.7.10-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-tzdata-2025b-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXrender-0.9.10-16.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-xml-common-0.6.3-58.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXcomposite-0.4.5-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ttmkfdir-3.0.9-65.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXext-1.3.4-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-tzdata-java-2025b-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-tar-1.34-7.el9-arch-x86-64-epoch-2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libattr-2.5.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libblkid-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libarchive-3.5.3-5.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-zlib-1.2.11-40.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libassuan-2.5.5-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libdnf-0.69.0-13.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libevent-2.1.12-8.el9-4-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcom-err-1.46.5-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcurl-minimal-7.76.1-31.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcap-ng-0.8.2-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcap-2.48-9.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libbrotli-1.0.9-7.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libgcc-11.5.0-5.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libffi-3.4.2-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-messaging-service-3001.2.15",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libfontenc-1.1.3-17.el9-arch-x86-64"
  } ]
}