{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-04-17T07:27:37Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "mqtt-service-v3000.0.3",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-GPL-2.0-with-oracle-classpath-exception",
    "extractedText" : "The GNU General Public License (GPL)\n\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.\n59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nEveryone is permitted to copy and distribute verbatim copies of this license\ndocument, but changing it is not allowed.\n\nPreamble\n\nThe licenses for most software are designed to take away your freedom to share\nand change it.  By contrast, the GNU General Public License is intended to\nguarantee your freedom to share and change free software--to make sure the\nsoftware is free for all its users.  This General Public License applies to\nmost of the Free Software Foundation's software and to any other program whose\nauthors commit to using it.  (Some other Free Software Foundation software is\ncovered by the GNU Library General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not price.  Our\nGeneral Public Licenses are designed to make sure that you have the freedom to\ndistribute copies of free software (and charge for this service if you wish),\nthat you receive source code or can get it if you want it, that you can change\nthe software or use pieces of it in new free programs; and that you know you\ncan do these things.\n\nTo protect your rights, we need to make restrictions that forbid anyone to deny\nyou these rights or to ask you to surrender the rights.  These restrictions\ntranslate to certain responsibilities for you if you distribute copies of the\nsoftware, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether gratis or for\na fee, you must give the recipients all the rights that you have.  You must\nmake sure that they, too, receive or can get the source code.  And you must\nshow them these terms so they know their rights.\n\nWe protect your rights with two steps: (1) copyright the software, and (2)\noffer you this license which gives you legal permission to copy, distribute\nand/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain that\neveryone understands that there is no warranty for this free software.  If the\nsoftware is modified by someone else and passed on, we want its recipients to\nknow that what they have is not the original, so that any problems introduced\nby others will not reflect on the original authors' reputations.\n\nFinally, any free program is threatened constantly by software patents.  We\nwish to avoid the danger that redistributors of a free program will\nindividually obtain patent licenses, in effect making the program proprietary.\nTo prevent this, we have made it clear that any patent must be licensed for\neveryone's free use or not licensed at all.\n\nThe precise terms and conditions for copying, distribution and modification\nfollow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a notice\nplaced by the copyright holder saying it may be distributed under the terms of\nthis General Public License.  The \"Program\", below, refers to any such program\nor work, and a \"work based on the Program\" means either the Program or any\nderivative work under copyright law: that is to say, a work containing the\nProgram or a portion of it, either verbatim or with modifications and/or\ntranslated into another language.  (Hereinafter, translation is included\nwithout limitation in the term \"modification\".) Each licensee is addressed as\n\"you\".\n\nActivities other than copying, distribution and modification are not covered by\nthis License; they are outside its scope.  The act of running the Program is\nnot restricted, and the output from the Program is covered only if its contents\nconstitute a work based on the Program (independent of having been made by\nrunning the Program).  Whether that is true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source code as\nyou receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice and\ndisclaimer of warranty; keep intact all the notices that refer to this License\nand to the absence of any warranty; and give any other recipients of the\nProgram a copy of this License along with the Program.\n\nYou may charge a fee for the physical act of transferring a copy, and you may\nat your option offer warranty protection in exchange for a fee.\n\n2. You may modify your copy or copies of the Program or any portion of it, thus\nforming a work based on the Program, and copy and distribute such modifications\nor work under the terms of Section 1 above, provided that you also meet all of\nthese conditions:\n\n    a) You must cause the modified files to carry prominent notices stating\n    that you changed the files and the date of any change.\n\n    b) You must cause any work that you distribute or publish, that in whole or\n    in part contains or is derived from the Program or any part thereof, to be\n    licensed as a whole at no charge to all third parties under the terms of\n    this License.\n\n    c) If the modified program normally reads commands interactively when run,\n    you must cause it, when started running for such interactive use in the\n    most ordinary way, to print or display an announcement including an\n    appropriate copyright notice and a notice that there is no warranty (or\n    else, saying that you provide a warranty) and that users may redistribute\n    the program under these conditions, and telling the user how to view a copy\n    of this License.  (Exception: if the Program itself is interactive but does\n    not normally print such an announcement, your work based on the Program is\n    not required to print an announcement.)\n\nThese requirements apply to the modified work as a whole.  If identifiable\nsections of that work are not derived from the Program, and can be reasonably\nconsidered independent and separate works in themselves, then this License, and\nits terms, do not apply to those sections when you distribute them as separate\nworks.  But when you distribute the same sections as part of a whole which is a\nwork based on the Program, the distribution of the whole must be on the terms\nof this License, whose permissions for other licensees extend to the entire\nwhole, and thus to each and every part regardless of who wrote it.\n\nThus, it is not the intent of this section to claim rights or contest your\nrights to work written entirely by you; rather, the intent is to exercise the\nright to control the distribution of derivative or collective works based on\nthe Program.\n\nIn addition, mere aggregation of another work not based on the Program with the\nProgram (or with a work based on the Program) on a volume of a storage or\ndistribution medium does not bring the other work under the scope of this\nLicense.\n\n3. You may copy and distribute the Program (or a work based on it, under\nSection 2) in object code or executable form under the terms of Sections 1 and\n2 above provided that you also do one of the following:\n\n    a) Accompany it with the complete corresponding machine-readable source\n    code, which must be distributed under the terms of Sections 1 and 2 above\n    on a medium customarily used for software interchange; or,\n\n    b) Accompany it with a written offer, valid for at least three years, to\n    give any third party, for a charge no more than your cost of physically\n    performing source distribution, a complete machine-readable copy of the\n    corresponding source code, to be distributed under the terms of Sections 1\n    and 2 above on a medium customarily used for software interchange; or,\n\n    c) Accompany it with the information you received as to the offer to\n    distribute corresponding source code.  (This alternative is allowed only\n    for noncommercial distribution and only if you received the program in\n    object code or executable form with such an offer, in accord with\n    Subsection b above.)\n\nThe source code for a work means the preferred form of the work for making\nmodifications to it.  For an executable work, complete source code means all\nthe source code for all modules it contains, plus any associated interface\ndefinition files, plus the scripts used to control compilation and installation\nof the executable.  However, as a special exception, the source code\ndistributed need not include anything that is normally distributed (in either\nsource or binary form) with the major components (compiler, kernel, and so on)\nof the operating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering access to copy\nfrom a designated place, then offering equivalent access to copy the source\ncode from the same place counts as distribution of the source code, even though\nthird parties are not compelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program except as\nexpressly provided under this License.  Any attempt otherwise to copy, modify,\nsublicense or distribute the Program is void, and will automatically terminate\nyour rights under this License.  However, parties who have received copies, or\nrights, from you under this License will not have their licenses terminated so\nlong as such parties remain in full compliance.\n\n5. You are not required to accept this License, since you have not signed it.\nHowever, nothing else grants you permission to modify or distribute the Program\nor its derivative works.  These actions are prohibited by law if you do not\naccept this License.  Therefore, by modifying or distributing the Program (or\nany work based on the Program), you indicate your acceptance of this License to\ndo so, and all its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the Program),\nthe recipient automatically receives a license from the original licensor to\ncopy, distribute or modify the Program subject to these terms and conditions.\nYou may not impose any further restrictions on the recipients' exercise of the\nrights granted herein.  You are not responsible for enforcing compliance by\nthird parties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues), conditions\nare imposed on you (whether by court order, agreement or otherwise) that\ncontradict the conditions of this License, they do not excuse you from the\nconditions of this License.  If you cannot distribute so as to satisfy\nsimultaneously your obligations under this License and any other pertinent\nobligations, then as a consequence you may not distribute the Program at all.\nFor example, if a patent license would not permit royalty-free redistribution\nof the Program by all those who receive copies directly or indirectly through\nyou, then the only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under any\nparticular circumstance, the balance of the section is intended to apply and\nthe section as a whole is intended to apply in other circumstances.\n\nIt is not the purpose of this section to induce you to infringe any patents or\nother property right claims or to contest validity of any such claims; this\nsection has the sole purpose of protecting the integrity of the free software\ndistribution system, which is implemented by public license practices.  Many\npeople have made generous contributions to the wide range of software\ndistributed through that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing to\ndistribute software through any other system and a licensee cannot impose that\nchoice.\n\nThis section is intended to make thoroughly clear what is believed to be a\nconsequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in certain\ncountries either by patents or by copyrighted interfaces, the original\ncopyright holder who places the Program under this License may add an explicit\ngeographical distribution limitation excluding those countries, so that\ndistribution is permitted only in or among countries not thus excluded.  In\nsuch case, this License incorporates the limitation as if written in the body\nof this License.\n\n9. The Free Software Foundation may publish revised and/or new versions of the\nGeneral Public License from time to time.  Such new versions will be similar in\nspirit to the present version, but may differ in detail to address new problems\nor concerns.\n\nEach version is given a distinguishing version number.  If the Program\nspecifies a version number of this License which applies to it and \"any later\nversion\", you have the option of following the terms and conditions either of\nthat version or of any later version published by the Free Software Foundation.\nIf the Program does not specify a version number of this License, you may\nchoose any version ever published by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free programs\nwhose distribution conditions are different, write to the author to ask for\npermission.  For software which is copyrighted by the Free Software Foundation,\nwrite to the Free Software Foundation; we sometimes make exceptions for this.\nOur decision will be guided by the two goals of preserving the free status of\nall derivatives of our free software and of promoting the sharing and reuse of\nsoftware generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR\nTHE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN OTHERWISE\nSTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE\nPROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND\nPERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE,\nYOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL\nANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE\nPROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER\nOR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\nHow to Apply These Terms to Your New Programs\n\nIf you develop a new program, and you want it to be of the greatest possible\nuse to the public, the best way to achieve this is to make it free software\nwhich everyone can redistribute and change under these terms.\n\nTo do so, attach the following notices to the program.  It is safest to attach\nthem to the start of each source file to most effectively convey the exclusion\nof warranty; and each file should have at least the \"copyright\" line and a\npointer to where the full notice is found.\n\n    One line to give the program's name and a brief idea of what it does.\n\n    Copyright (C) <year> <name of author>\n\n    This program is free software; you can redistribute it and/or modify it\n    under the terms of the GNU General Public License as published by the Free\n    Software Foundation; either version 2 of the License, or (at your option)\n    any later version.\n\n    This program is distributed in the hope that it will be useful, but WITHOUT\n    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\n    FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for\n    more details.\n\n    You should have received a copy of the GNU General Public License along\n    with this program; if not, write to the Free Software Foundation, Inc., 59\n    Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nAlso add information on how to contact you by electronic and paper mail.\n\nIf the program is interactive, make it output a short notice like this when it\nstarts in an interactive mode:\n\n    Gnomovision version 69, Copyright (C) year name of author Gnomovision comes\n    with ABSOLUTELY NO WARRANTY; for details type 'show w'.  This is free\n    software, and you are welcome to redistribute it under certain conditions;\n    type 'show c' for details.\n\nThe hypothetical commands 'show w' and 'show c' should show the appropriate\nparts of the General Public License.  Of course, the commands you use may be\ncalled something other than 'show w' and 'show c'; they could even be\nmouse-clicks or menu items--whatever suits your program.\n\nYou should also get your employer (if you work as a programmer) or your school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.  Here\nis a sample; alter the names:\n\n    Yoyodyne, Inc., hereby disclaims all copyright interest in the program\n    'Gnomovision' (which makes passes at compilers) written by James Hacker.\n\n    signature of Ty Coon, 1 April 1989\n\n    Ty Coon, President of Vice\n\nThis General Public License does not permit incorporating your program into\nproprietary programs.  If your program is a subroutine library, you may\nconsider it more useful to permit linking proprietary applications with the\nlibrary.  If this is what you want to do, use the GNU Library General Public\nLicense instead of this License.\n\n\n\"CLASSPATH\" EXCEPTION TO THE GPL\n\nCertain source files distributed by Oracle America and/or its affiliates are\nsubject to the following clarification and special exception to the GPL, but\nonly where Oracle has expressly included in the particular source file's header\nthe words \"Oracle designates this particular file as subject to the \"Classpath\"\nexception as provided by Oracle in the LICENSE file that accompanied this code.\"\n\n    Linking this library statically or dynamically with other modules is making\n    a combined work based on this library.  Thus, the terms and conditions of\n    the GNU General Public License cover the whole combination.\n\n    As a special exception, the copyright holders of this library give you\n    permission to link this library with independent modules to produce an\n    executable, regardless of the license terms of these independent modules,\n    and to copy and distribute the resulting executable under terms of your\n    choice, provided that you also meet, for each linked independent module,\n    the terms and conditions of the license of that module.  An independent\n    module is a module which is not derived from or based on this library.  If\n    you modify this library, you may extend this exception to your version of\n    the library, but you are not obligated to do so.  If you do not wish to do\n    so, delete this exception statement from your version.\n\n\n\n\nADDITIONAL INFORMATION ABOUT LICENSING\n\nCertain files distributed by Oracle America, Inc. and/or its affiliates are\nsubject to the following clarification and special exception to the GPLv2,\nbased on the GNU Project exception for its Classpath libraries, known as the\nGNU Classpath Exception.\n\nNote that Oracle includes multiple, independent programs in this software\npackage.  Some of those programs are provided under licenses deemed\nincompatible with the GPLv2 by the Free Software Foundation and others.\nFor example, the package includes programs licensed under the Apache\nLicense, Version 2.0 and may include FreeType. Such programs are licensed\nto you under their original licenses.\n\nOracle facilitates your further distribution of this package by adding the\nClasspath Exception to the necessary parts of its GPLv2 code, which permits\nyou to use that code in combination with other independent modules not\nlicensed under the GPLv2. However, note that this would not permit you to\ncommingle code under an incompatible license with Oracle's GPLv2 licensed\ncode by, for example, cutting and pasting such code into a file also\ncontaining Oracle's GPLv2 licensed code and then distributing the result.\n\nAdditionally, if you were to remove the Classpath Exception from any of the\nfiles to which it applies and distribute the result, you would likely be\nrequired to license some or all of the other code in that distribution under\nthe GPLv2 as well, and since the GPLv2 is incompatible with the license terms\nof some items included in the distribution by Oracle, removing the Classpath\nException could therefore effectively compromise your ability to further\ndistribute the package.\n\nFailing to distribute notices associated with some files may also create\nunexpected legal consequences.\n\nProceed with caution and we recommend that you obtain the advice of a lawyer\nskilled in open source matters before removing the Classpath Exception or\nmaking modifications to this package which may subsequently be redistributed\nand/or involve the use of third party software.",
    "name" : "GPL 2.0 with oracle classpath exception"
  }, {
    "licenseId" : "LicenseRef-Inner-Net-2.0-GLIBC",
    "extractedText" : "The Inner Net License, Version 2.00\n\nThe author(s) grant permission for redistribution and use in source and\nbinary forms, with or without modification, of the software and documentation\nprovided that the following conditions are met:\n\n0. If you receive a version of the software that is specifically labelled\n   as not being for redistribution (check the version message and/or README),\n   you are not permitted to redistribute that version of the software in any\n   way or form.\n1. All terms of the all other applicable copyrights and licenses must be\n   followed.\n2. Redistributions of source code must retain the authors' copyright\n   notice(s), this list of conditions, and the following disclaimer.\n3. Redistributions in binary form must reproduce the authors' copyright\n   notice(s), this list of conditions, and the following disclaimer in the\n   documentation and/or other materials provided with the distribution.\n4. [The copyright holder has authorized the removal of this clause.]\n5. Neither the name(s) of the author(s) nor the names of its contributors\n   may be used to endorse or promote products derived from this software\n   without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY ITS AUTHORS AND CONTRIBUTORS ``AS IS'' AND ANY\nEXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE FOR ANY\nDIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\nANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n  If these license terms cause you a real problem, contact the author.",
    "name" : "Inner Net 2.0 GLIBC"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  }, {
    "licenseId" : "LicenseRef-RedHat-UBI-EULA",
    "extractedText" : "END USER LICENSE AGREEMENT\nRED HAT UNIVERSAL BASE IMAGE\n\nPLEASE READ THIS END USER LICENSE AGREEMENT CAREFULLY BEFORE USING SOFTWARE FROM RED HAT. BY USING RED HAT \nSOFTWARE, YOU SIGNIFY YOUR ASSENT TO AND ACCEPTANCE OF THIS END USER LICENSE AGREEMENT AND ACKNOWLEDGE YOU \nHAVE READ AND UNDERSTAND THE TERMS. AN INDIVIDUAL ACTING ON BEHALF OF AN ENTITY REPRESENTS THAT HE OR SHE HAS THE \nAUTHORITY TO ENTER INTO THIS END USER LICENSE AGREEMENT ON BEHALF OF THAT ENTITY. IF YOU DO NOT ACCEPT THE TERMS \nOF THIS AGREEMENT, THEN YOU MUST NOT USE THE RED HAT SOFTWARE. THIS END USER LICENSE AGREEMENT DOES NOT PROVIDE \nANY RIGHTS TO RED HAT SERVICES SUCH AS SOFTWARE MAINTENANCE, UPGRADES OR SUPPORT. PLEASE REVIEW YOUR SERVICE \nOR SUBSCRIPTION AGREEMENT(S) THAT YOU MAY HAVE WITH RED HAT OR OTHER AUTHORIZED RED HAT SERVICE PROVIDERS \nREGARDING SERVICES AND ASSOCIATED PAYMENTS. \n\nThis end user license agreement (“EULA”) governs the use of Red Hat Universal Base Image and associated software supporting such container(s) \nand any related updates, source code, including the appearance, structure and organization (the “Programs”), regardless of the delivery mechanism. \nIf a Red Hat Universal Base Image is included in another Red Hat product, the EULA terms of such other Red Hat product will apply and supersede \nthis EULA. If a Red Hat Universal Base Image is included in a third party work, the terms of this EULA will continue to govern the Red Hat Universal \nBase Image. \n\n1. License Grant. Subject to the terms of this EULA, Red Hat, Inc. (“Red Hat”) grants to you a perpetual, worldwide license to the Programs (each \nof which may include multiple software components). With the exception of the Red Hat trademark identified in Section 2 below, each software \ncomponent is governed by a license that permits you to run, copy, modify, and redistribute (subject to certain obligations in some cases) the \nsoftware components. This EULA pertains solely to the Programs and does not limit your rights under, or grant you rights that supersede, the \nlicense terms applicable to any particular component. The license terms applicable to each software component are provided in the source code \nof that component.\n\n2. Intellectual Property Rights. The Programs and each of their components are owned by Red Hat and other licensors and are protected under \ncopyright law and other laws as applicable. Title to the Programs and any component shall remain with Red Hat and other licensors, subject to \nthe applicable license, excluding any independently developed and licensed work. The “Red Hat” trademark is a registered trademark of Red \nHat and its affiliates in the U.S. and other countries. Subject to Red Hat’s trademark usage guidelines (set forth at\nhttp://www.redhat.com/about/corporate/trademark/), this EULA permits you to distribute the Programs that include the Red Hat trademark, \nprovided you do not make any statements on behalf of Red Hat, including but not limited to, stating or in any way suggesting (in any public, \nprivate and/or confidential statement (whether written or verbal)) that Red Hat supports or endorses software built and delivered with a Red Hat \nUniversal Base Image(s) (such derivative works referred to as a “Red Hat Based Container Images”); provided if a Red Hat Based Container \nImage is Red Hat Certified and deployed on a Red Hat supported configuration as set forth at https://access.redhat.com/articles/2726611 then \nyou may state that the Red Hat Universal Base Image is supported by Red Hat. You agree to include this unmodified EULA in all distributions of \ncontainer images sourced, built or otherwise derived from the Programs. If you modify the Red Hat Universal Base Image(s), you must remove \nany Red Hat trademark(s) prior to any subsequent distribution. Any breach of this Section 2 is a material breach of the EULA and you may no \nlonger use and/or distribute the Red Hat trademark(s). Modifications to the software may corrupt the Programs. \n\n3. Limited Warranty. Except as specifically stated in this Section 3, a separate agreement with Red Hat, or a license for a particular component,\nto the maximum extent permitted under applicable law, the Programs and the components are provided and licensed “as is” without \nwarranty of any kind, expressed or implied, including the implied warranties of merchantability, non-infringement or fitness for a \nparticular purpose. Neither Red Hat nor its affiliates warrant that the functions contained in the Programs will meet your requirements or that \nthe operation of the Programs will be entirely error free, appear or perform precisely as described in the accompanying documentation, or comply \nwith regulatory requirements. Red Hat warrants that the media on which the Programs and the components are provided will be free from defects \nin materials and manufacture under normal use for a period of 30 days from the date of delivery to you. This warranty extends only to the party \nthat purchases subscription services for the supported configurations from Red Hat and/or its affiliates or a Red Hat authorized \ndistributor. \n\n4. Limitation of Remedies and Liability. To the maximum extent permitted by applicable law, your exclusive remedy under this EULA is to return \nany defective media within 30 days of delivery along with a copy of your payment receipt and Red Hat, at its option, will replace it or refund the \nmoney you paid for the media. To the maximum extent permitted under applicable law, under no circumstances will Red Hat, its affiliates, \nany Red Hat authorized distributor, or the licensor of any component provided to you under this EULA be liable to you for any incidental \nor consequential damages, including lost profits or lost savings arising out of the use or inability to use the Programs or any \ncomponent, even if Red Hat, its affiliates, an authorized distributor, and/or licensor has been advised of the possibility of such \ndamages. In no event shall Red Hat's or its affiliates’ liability, an authorized distributor’s liability or the liability of the licensor of a \ncomponent provided to you under this EULA exceed the amount that you paid to Red Hat for the media under this EULA.\n\n5. Export Control. As required by the laws of the United States and other countries, you represent and warrant that you: (a) understand that the\nPrograms and their components may be subject to export controls under the U.S. Commerce Department’s Export Administration Regulations \n(“EAR”); (b) are not located in a prohibited destination country under the EAR or U.S. sanctions regulations (currently Cuba, Iran, North Korea, \nSudan, Syria, and the Crimea Region of Ukraine, subject to change as posted by the United States government); (c) will not export, re-export, or \ntransfer the Programs to any prohibited destination, persons or entities on the U.S. Bureau of Industry and Security Denied Parties List or Entity \nList, or the U.S. Office of Foreign Assets Control list of Specially Designated Nationals and Blocked Persons, or any similar lists maintained by \nother countries, without the necessary export license(s) or authorizations(s); (d) will not use or transfer the Programs for use in connection with \nany nuclear, chemical or biological weapons, missile technology, or military end-uses where prohibited by an applicable arms embargo, unless \nauthorized by the relevant government agency by regulation or specific license; (e) understand and agree that if you are in the United States and \nexport or transfer the Programs to eligible end users, you will, to the extent required by EAR Section 740.17(e), submit semi-annual reports to \nthe Commerce Department’s Bureau of Industry and Security, which include the name and address (including country) of each transferee; and \n(f) understand that countries including the United States may restrict the import, use, or export of encryption products (which may include the \nPrograms and the components) and agree that you shall be solely responsible for compliance with any such import, use, or export restrictions.\nRed Hat Universal Base Image\n\n6. Third Party Software. The Program may be provided with third party software programs subject to their own license terms. The license terms \neither accompany the third party software programs or, in some instances, may be viewed at www.registry.redhat.com. If you do not agree to \nabide by the applicable license terms for the third party software programs, then you may not install, distribute or use them. \n\n7. General. If any provision of this EULA is held to be unenforceable, the enforceability of the remaining provisions shall not be affected. Any claim, \ncontroversy or dispute arising under or relating to this EULA shall be governed by the laws of the State of New York and of the United States, \nwithout regard to any conflict of laws provisions. The rights and obligations of the parties to this EULA shall not be governed by the United \nNations Convention on the International Sale of Goods.\n\nCopyright © 2019 Red Hat, Inc. All rights reserved. “Red Hat,” is a registered trademark of Red Hat, Inc. All other trademarks are the property of their respective \nowners. \n\nSee https://www.redhat.com/licenses/EULA_Red_Hat_Universal_Base_Image_English_20190422.pdf",
    "name" : "RedHat UBI EULA"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-mqtt-service-v3000.0.3-66e2a5c5-e75a-4239-9b21-0242212c9c44",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/mqtt-service@3000.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "mqtt-service",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "3000.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-github-hivemq-hivemq-community-edition-2025.1",
    "copyrightText" : "Copyright 2019-present HiveMQ GmbH",
    "downloadLocation" : "https://github.com/hivemq/hivemq-community-edition/archive/refs/tags/2025.1.tar.gz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WV9PCjXKFe3x56fIyZ7SXpbeU-FljZ_tPUimzeTikh0/hivemq-community-edition-git-source.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:github/hivemq/hivemq-community-edition@2025.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/hivemq/hivemq-community-edition",
    "licenseConcluded" : "(EPL-1.0 AND CDDL-1.1 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND W3C-19980720 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "github/hivemq/hivemq-community-edition",
    "versionInfo" : "2025.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-github-hivemq-hivemq-prometheus-extension-4.0.13",
    "copyrightText" : "Copyright 2018-present HiveMQ GmbH",
    "downloadLocation" : "https://github.com/hivemq/hivemq-prometheus-extension/archive/refs/tags/4.0.13.tar.gz",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dFyc5mfhsN9WAmHRulzIFErOZSJp5XPnnw1aXH_eR6k/hivemq-prometheus-extension-git-source.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:github/hivemq/hivemq-prometheus-extension@4.0.13",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/hivemq/hivemq-prometheus-extension",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "github/hivemq/hivemq-prometheus-extension",
    "versionInfo" : "4.0.13"
  }, {
    "SPDXID" : "SPDXRef-pkg-github-hivemq-mqtt-cli-4.38.0",
    "copyrightText" : "Copyright 2018 Andre Levandovski Rosot\nCopyright 2017 Andrew Rucker Jones\nCopyright 2008 Google LLC\nCopyright 2014-2024 The Apache Software Foundation\nCopyright 2015 The Error Prone Authors\nCopyright 2012 The Netty Project\nCopyright 2014 The Netty Project\nCopyright 2016 The Netty Project\nCopyright 2021 The Netty Project\nCopyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2012-2017 Oracle and/or its affiliates\nCopyright (c) 2015. SmartBear Software Inc.\nCopyright (c) 2015. SmartBear Software Inc. Swagger Core\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2009-2017 the original\nCopyright (c) 2009-2023 the original\nCopyright (c) 2002-2020, the original author or authors\nCopyright (c) 2002-2021, the original author or authors\nCopyright (c) 2002-2022, the original author or authors\nCopyright (c) 2023, the original author or authors\nCopyright 2019-present HiveMQ\nCopyright 2019 the original author or authors\n\nAuthors: Andre Levandovski Rosot; Andrew Rucker Jones; Eclipse Foundation; Google LLC; HiveMQ; Oracle and/or its affiliates; SmartBear Software Inc.; SmartBear Software Inc. Swagger Core; The Apache Software Foundation; The Error Prone Authors; The Netty Project; the Eclipse Jakarta Dependency Injection project; the original; the original author or authors",
    "downloadLocation" : "https://github.com/hivemq/mqtt-cli/releases/download/v4.38.0/mqtt-cli-4.38.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5F5kxlMecG88DMxw-M7o_m3SXhxbkUC427TIamtDoB4/v~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:github/hivemq/mqtt-cli@4.38.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CDDL-1.1 AND MIT-0 AND BSD-3-Clause AND MPL-2.0 AND Apache-2.0 AND CDDL-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "github/hivemq/mqtt-cli",
    "versionInfo" : "4.38.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-aopalliance-aopalliance-1.0",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/aopalliance/aopalliance/1.0/aopalliance-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/aopalliance/aopalliance@1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/F6MCK-TnKz73xDCDWZqRyDOPCp8o_nrAiuoyDfg957U/aopalliance-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://aopalliance.sourceforge.net",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/aopalliance/aopalliance",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.16",
    "copyrightText" : "Copyright (c) 1999-2010, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.16/logback-classic-1.5.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GKuJtUoprhKd0vpkdbUr0KASSNPqEyXsp1GwVxvXR0I/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.5.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.16",
    "copyrightText" : "Copyright (c) 1999-2002, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.16/logback-core-1.5.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mHQV2GDdoItyzgYgp01lf92-bi3YfGJamqFZ0vkRskg/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.5.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.bucket4j-bucket4j-jdk17-core-8.15.0",
    "copyrightText" : "Copyright 2015-2019 Vladimir Bukhtoyarov\nCopyright (c) 2015 - 2020 Vladimir Bukhtoyarov",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/bucket4j/bucket4j_jdk17-core/8.15.0/bucket4j_jdk17-core-8.15.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.bucket4j/bucket4j_jdk17-core@8.15.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J_sWXpsixalhWeDWOlOOz-RN_m-GS4FL6BowuibjSbk/bucket4j_jdk17-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/bucket4j/bucket4j/bucket4j_jdk17-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.bucket4j/bucket4j_jdk17-core",
    "versionInfo" : "8.15.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.15.2",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.15.2/jackson-annotations-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gpkwLvtcTVfvWSip2HLit0MV_9MBV7xtdc-CnFiQzb4/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.18.2",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.18.2/jackson-annotations-2.18.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/P5Z4YVJil6Jpb_Dy6PScUqul44GeQuzpZ_vvlqZIkSo/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.18.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.15.2",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. Apache\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.15.2/jackson-core-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4VANI1kypYJ1zmJFfd30dfvX7jyjaUzvbTs801yzBdg/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.18.2",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.18.2/jackson-core-2.18.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t0NZURKVkfEscNHNRM8enWvIOMNCtuQMokbgjatsaTc/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.18.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.15.2",
    "copyrightText" : "Copyright 2010 Google Inc\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.15.2/jackson-databind-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jvWxBYLdejSaP36Q7m42t7E32O-xoUCurGZ6eaGIHnc/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.18.2",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.18.2/jackson-databind-2.18.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4eOWKTS6meZgYor6AmR81yQzHOi6Kf3Gv7D7oPRCl7M/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.18.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.15.2",
    "attributionTexts" : [ "There is absolutely NO WARRANTY for JFlex, its code and its documentation." ],
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.15.2/jackson-dataformat-yaml-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-TtRzg4Tvq4k2UzYWevrhWPbUIZ8kCDNR-cs6alTlkM/jackson-dataformat-yaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-dataformats-text",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.15.2",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: FasterXML; FasterXML.com; Lovro Pandzic; Nick Williams; Nick Williams, Tatu Saloranta; Nick Williams, Zoltan Kiss; Tatu Saloranta; Tatu Saloranta (tatu.saloranta@iki.fi); Zoltan Kiss; a community of developers; bertwin@github.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.15.2/jackson-datatype-jdk8-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UjwsrZhIeF7DdgPmB9gvG-uzM3bpoTLK5T_wDgAAL3c/jackson-datatype-jdk8-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.15.2",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.15.2/jackson-datatype-jsr310-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CA9BPHdayIS4StdlizzSCdtBVmcSYbyEWH-GN0-teaw/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jsonSchema-2.15.2",
    "copyrightText" : "Copyright 2013 FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jsonSchema/2.15.2/jackson-module-jsonSchema-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KKyS0LjcX5WJqM-ABcOG-E9GCbEujeyP6RCqaRVGzIk/jackson-module-jsonSchema-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jsonSchema@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-module-jsonSchema",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jsonSchema",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.15.2",
    "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML\nCopyright 2007-present the original author or authors\n\nAuthors: FasterXML; FasterXML.com; Lovro Pandzic; Nick Williams; Nick Williams, Tatu Saloranta; Nick Williams, Zoltan Kiss; Tatu Saloranta; Tatu Saloranta (tatu.saloranta@iki.fi); Zoltan Kiss; a community of developers; bertwin@github.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.15.2/jackson-module-parameter-names-2.15.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LWnI2l2NMY2b67vD8s9uccv8lPVsX-Poih1VOsIwJ14/jackson-module-parameter-names-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.15.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-java8",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names",
    "versionInfo" : "2.15.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.oshi-oshi-core-6.6.6",
    "copyrightText" : "Copyright 2010 - 2022 Eclipse-SourceBundle\nCopyright 2010 - 2022 Git-Revision a95a3b3c815ade4a072565858d55fbdac2cd9fe6 Os-Arch\nCopyright 2016-2022 The OSHI Project Contributors\nCopyright (c) 2016-2022 The OSHI Project Contributors\n\nAuthors: Eclipse-SourceBundle; Git-Revision a95a3b3c815ade4a072565858d55fbdac2cd9fe6 Os-Arch; Sun Microsystems; The OSHI Project Contributors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/oshi/oshi-core/6.6.6/oshi-core-6.6.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8SFW3WQoljMgU-Qq05W0Sbq6uWrD-ahC8SDGZ6WS73Y/oshi-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.oshi/oshi-core@6.6.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.oshi/oshi-core",
    "versionInfo" : "6.6.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UQuG5-vHXi2MjGeL4DdvxtCv9MA177o15GvTUTfIVeo/jsr305-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://findbugs.sourceforge.net/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.findbugs/jsr305",
    "versionInfo" : "3.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.8.9",
    "copyrightText" : "Copyright (c) 2008 Google Inc\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.8.9/gson-2.8.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.8.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gK7O8dDAucenkSgESCsICkQvBJR6FQQHZ9zeN57r_eU/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.8.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.18.0",
    "copyrightText" : "Copyright 2014 The Error Prone Authors\nCopyright 2015 The Error Prone Authors\nCopyright 2016 The Error Prone Authors\nCopyright 2017 The Error Prone Authors\nCopyright 2021 The Error Prone Authors\n\nAuthors: benyu@google.com; The Error Prone Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.18.0/error_prone_annotations-2.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JaZbYuUFMyS8HEDrLRcIWk51D8xyWH71j5X3wy9_Lew/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.1",
    "copyrightText" : "Copyright (c) 2018 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pPLAIlpoC8UbDm74TS1P2HCgsbVI8IXQqicX5eLB-p4/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.2",
    "copyrightText" : "Copyright (c) 2018 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nhJT3iyKjkSqtyiBU0-XNieAuxHl7_KxRq9Dgb_FCp8/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-32.0.1-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2005 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nick Piepmeier; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/32.0.1-jre/guava-32.0.1-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LSpVzq_aZQ1-IsfIHrtuORejg0ZbQplCOL8cdBmcB4U/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "32.0.1-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.3.1-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2005 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nick Piepmeier; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.3.1-jre/guava-33.3.1-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EmzlFdfbZucs-q_e1_M0_GI-pOH3fpMMOP4Ri1Pxy3A/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.3.1-jre",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.3.1-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.inject-guice-5.1.0",
    "copyrightText" : "Copyright 2006-2022 Google, Inc\nCopyright (c) 2006 Google Inc\nCopyright (c) 2006 Google Inc. Bundle-Description Guice\nCopyright (c) 2020 The Dagger Authors\n\nAuthors: Chris Nokleberg; Google Inc.; Google Inc. Bundle-Description Guice; Google, Inc.; Kevin Bourrillion (kevinb9n@gmail.com); The Dagger Authors; crazybob@google.com; dpb@google.com (David P. Baker); dweis@google.com (Daniel Weis); jessewilson@google.com (Jesse Wilson); kevinb@google.com (Kevin Bourrillion); mcculls@gmail.com; mikeward@google.com (Mike Ward); sameb@google.com; sberlin@gmail.com; timofeyb (Timothy Basanov); vzm@google.com (Vladimir Makaric)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/inject/guice/5.1.0/guice-5.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_5MQxfcuXPrdtVLMv_lAuXjTLPLT--hKVOTSbRG8nwM/guice-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.inject/guice@5.1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.inject/guice",
    "versionInfo" : "5.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-2.8",
    "copyrightText" : "Copyright 2012 Google Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/2.8/j2objc-annotations-2.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jySXW3natu1itENTB_h1l-xVTsShR1Xr0ny9UdfP0Gw/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "2.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-3.19.6",
    "copyrightText" : "Copyright 2008 Google Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/protobuf/protobuf-java/3.19.6/protobuf-java-3.19.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.protobuf/protobuf-java@3.19.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fjsQRwZIyZ3SglI33flXmh_sOCa0GJXGChRlUEbrpa4/protobuf-java-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.protobuf/protobuf-java",
    "versionInfo" : "3.19.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hivemq-hivemq-extension-sdk-4.1.0",
    "copyrightText" : "Copyright 2018 dc-square GmbH",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hivemq/hivemq-extension-sdk/4.1.0/hivemq-extension-sdk-4.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hivemq/hivemq-extension-sdk@4.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pF3NoXjY0SmFSenx-i1CislyhAIIeJvMZw3UBEazFjc/hivemq-extension-sdk-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.hivemq.com/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hivemq/hivemq-extension-sdk",
    "versionInfo" : "4.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hivemq-hivemq-extension-sdk-4.26.0",
    "copyrightText" : "Copyright 2018-present HiveMQ GmbH",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hivemq/hivemq-extension-sdk/4.26.0/hivemq-extension-sdk-4.26.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hivemq/hivemq-extension-sdk@4.26.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UGgqLvg1cK_STXyVTT2jlRhSQNFjx5-LrUBDI-3oliw/hivemq-extension-sdk-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/hivemq/hivemq-extension-sdk",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hivemq/hivemq-extension-sdk",
    "versionInfo" : "4.26.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.hivemq-hivemq-extension-sdk-4.36.0",
    "copyrightText" : "Copyright 2018-present HiveMQ GmbH",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/hivemq/hivemq-extension-sdk/4.36.0/hivemq-extension-sdk-4.36.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.hivemq/hivemq-extension-sdk@4.36.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M8K3vaCEZNJR8eyuqBKbzl12w19ixSgP-JFcv2hz8Ds/hivemq-extension-sdk-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/hivemq/hivemq-extension-sdk",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.hivemq/hivemq-extension-sdk",
    "versionInfo" : "4.36.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.activation-jakarta.activation-1.2.2",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W5e_zMOyUQSnDujDpTBUAIEKUdbP-2oCaLFi-PNCrwc/jakarta.activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.activation/jakarta.activation",
    "versionInfo" : "1.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.activation-javax.activation-1.2.0",
    "copyrightText" : "Copyright (c) 2017 Oracle America, Inc.\nCopyright (c) 1997-2017 Oracle and/or its affiliates\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/activation/javax.activation/1.2.0/javax.activation-1.2.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1E89isqLeM7s3NIcC1xhI4Flg_cjn0I4zepWL81UeFI/javax.activation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.activation/javax.activation@1.2.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.activation/javax.activation",
    "versionInfo" : "1.2.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.sun.xml.bind-jaxb-impl-2.3.9",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2005, 2023 Oracle and/or its affiliates\nCopyright (c) 2013, 2023 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Oracle and/or its affiliates\nCopyright (c) 2019, 2021 Oracle and/or its affiliates\nCopyright (c) 2020, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-impl/2.3.9/jaxb-impl-2.3.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.9",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FtG0r6tfm6MFAUMFlHYF4UGRMtdiEAX9JgqKXQ4XTJY/jaxb-impl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.sun.xml.bind/jaxb-impl",
    "versionInfo" : "2.3.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.typesafe.netty-netty-reactive-streams-2.0.6",
    "copyrightText" : "Copyright (c) 2015 Typesafe",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/typesafe/netty/netty-reactive-streams/2.0.6/netty-reactive-streams-2.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DnlQjHjKc5J8CmtP9Bis6ZEQHhgOM0Ne0XXDgIDAxkE/netty-reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.typesafe.netty/netty-reactive-streams",
    "versionInfo" : "2.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.yahoo.datasketches-memory-0.8.3",
    "copyrightText" : "Copyright 2015, Yahoo! Inc.\nCopyright 2015-16, Yahoo! Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/yahoo/datasketches/memory/0.8.3/memory-0.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9RpyhKAMdm5lIRQDagNGtk-CmJbr38sq3x24H6aUcb8/memory-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.yahoo.datasketches/memory@0.8.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.yahoo.datasketches/memory",
    "versionInfo" : "0.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.yahoo.datasketches-sketches-core-0.8.3",
    "copyrightText" : "Copyright 2015, Yahoo! Inc.\nCopyright 2015-16, Yahoo! Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/yahoo/datasketches/sketches-core/0.8.3/sketches-core-0.8.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FlgD5DxDDB7WFgJYG5DmqCyck00QdkZaS--0Dhx55Ic/sketches-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.yahoo.datasketches/sketches-core@0.8.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.yahoo.datasketches/sketches-core",
    "versionInfo" : "0.8.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15",
    "copyrightText" : "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright 2002-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.15",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ixaigc-CIpOk1obS2CfOggbfsdbSMtK8RxZPzy_A9Gc/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-configuration-commons-configuration-1.10",
    "copyrightText" : "Copyright 2001-2013 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-configuration/commons-configuration/1.10/commons-configuration-1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-configuration/commons-configuration@1.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jS0ba70VwlvDaCZRMb373UciP2IstAVC3MdPhOozQO4/commons-configuration-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/configuration/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-configuration/commons-configuration",
    "versionInfo" : "1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.14.0",
    "copyrightText" : "Copyright 2002-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.14.0/commons-io-2.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.14.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WBpaklENEyT31seU9b3ePNgkucsA2I3zasp7mYn6snc/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.16.1",
    "copyrightText" : "Copyright 2002-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.16.1/commons-io-2.16.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0RmF_1_9C94U1n8y_YtvAbE59U_eidLp2TXeAsjo9oY/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.16.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.16.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6",
    "copyrightText" : "Copyright 2001-2011 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-lang/commons-lang@2.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xcmxx2ur1Z8EXrIzeYGnDv6NHJiK8KdtV-k6BBn2-9w/commons-lang-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-lang/commons-lang",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.1.1",
    "copyrightText" : "Copyright 2001-2007 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.1.1/commons-logging-1.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ln1h1WQDtAgMAfXltSPVfD0yEoaI2Ty6zbKNJydq2uo/commons-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/logging",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-logging/commons-logging",
    "versionInfo" : "1.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.airlift-aircompressor-0.20",
    "copyrightText" : "Copyright 2011 Dain Sundstrom <dain@iq80.com>\nCopyright 2011, Google Inc.\nCopyright 2011, Google Inc. <opensource@google.com>",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/airlift/aircompressor/0.20/aircompressor-0.20.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Bl6vdD1qeb3o7caB1rCWs2AczkEwoKzCf-q9Npf71MU/aircompressor-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.airlift/aircompressor@0.20",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/airlift/aircompressor",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.airlift/aircompressor",
    "versionInfo" : "0.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.0.2",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-core/4.0.2/metrics-core-4.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rj7Zw41nSbQKmWb9-R63f_fWVqdn0MoC1Ifn6RQoass/metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-core",
    "versionInfo" : "4.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.2.25",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-core/4.2.25/metrics-core-4.2.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zcT71dlONbEPGM9pSXpEqxcm41uqGcKa8oPdTFNiYtE/metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-core",
    "versionInfo" : "4.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.2.30",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-core/4.2.30/metrics-core-4.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BL-EGc6A3JXc4dyAjDT8LYXFaM56yOADxby5ZYZentY/metrics-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-core",
    "versionInfo" : "4.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jmx-4.2.30",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-jmx/4.2.30/metrics-jmx-4.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rvN2F-NfQpOsR16XLVZBncYMNCZCmnNlwxM9DawcGq8/metrics-jmx-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-jmx",
    "versionInfo" : "4.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jvm-4.2.25",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-jvm/4.2.25/metrics-jvm-4.2.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Vy-Q3lBCYUVmMkQk7ny6aBPs9ikcXekWzn1_OMIER_Q/metrics-jvm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-jvm",
    "versionInfo" : "4.2.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-logback-4.2.30",
    "copyrightText" : "Copyright (c) 2010-2013 Coda Hale, Yammer.com, 2014-2021 Dropwizard Team",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-logback/4.2.30/metrics-logback-4.2.30.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.30",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/07LN3g-wfhkIQ-6-ZupUPWN3emvpWNWBYw03A4Bb07k/metrics-logback-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.dropwizard.metrics/metrics-logback",
    "versionInfo" : "4.2.30"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.github.microutils-kotlin-logging-1.4.1",
    "copyrightText" : "Copyright (c) 2016-2018 Ohad Shai",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/github/microutils/kotlin-logging/1.4.1/kotlin-logging-1.4.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.github.microutils/kotlin-logging@1.4.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0568tt0rJ1-zug2-R43Z_IaMTZtpj7tZxSbk1Mmx4Vo/kotlin-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/MicroUtils/kotlin-logging",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.github.microutils/kotlin-logging",
    "versionInfo" : "1.4.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.14.7",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.14.7/micrometer-commons-1.14.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eRPMNVv7O8daOloklIHKKe-TwqDrHxmioXi2LsyNItk/micrometer-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.14.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-commons",
    "versionInfo" : "1.14.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.14.7",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.14.7/micrometer-observation-1.14.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AEQIN-TGTz4TVdlQbOmBihnEdF-cTefXvqtJqxSUVZE/micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.14.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-observation",
    "versionInfo" : "1.14.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-classes-io-uring-0.0.21.Final",
    "copyrightText" : "Copyright 2020 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/incubator/netty-incubator-transport-classes-io_uring/0.0.21.Final/netty-incubator-transport-classes-io_uring-0.0.21.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BWDt7Bw5wF0P2mS5UryAodzzljIGf9mQutGRLX0otRU/netty-incubator-transport-classes-io_uring-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty.incubator/netty-incubator-transport-classes-io_uring@0.0.21.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty.incubator/netty-incubator-transport-classes-io_uring",
    "versionInfo" : "0.0.21.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-native-io-uring-0.0.21.Final-classifier-linux-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project\nCopyright (c) 2019 Christoph Hellwig\nCopyright (c) 2019 Jens Axboe",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/incubator/netty-incubator-transport-native-io_uring/0.0.21.Final/netty-incubator-transport-native-io_uring-0.0.21.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WVXmumOavH2-GKCLR-O8PNW-zm3EObE9G7nr5OOnnhs/netty-incubator-transport-native-io_uring-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty.incubator/netty-incubator-transport-native-io_uring@0.0.21.Final?classifier=linux-aarch_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty.incubator/netty-incubator-transport-native-io_uring",
    "versionInfo" : "0.0.21.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-native-io-uring-0.0.21.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project\nCopyright (c) 2019 Christoph Hellwig\nCopyright (c) 2019 Jens Axboe",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/incubator/netty-incubator-transport-native-io_uring/0.0.21.Final/netty-incubator-transport-native-io_uring-0.0.21.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WVXmumOavH2-GKCLR-O8PNW-zm3EObE9G7nr5OOnnhs/netty-incubator-transport-native-io_uring-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty.incubator/netty-incubator-transport-native-io_uring@0.0.21.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty.incubator/netty-incubator-transport-native-io_uring",
    "versionInfo" : "0.0.21.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.107.Final/netty-buffer-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/asCju2EKs801E7t4WBx1z4eKIAer8Ue35VCJS_MO2gA/netty-buffer-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-buffer/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-buffer",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.117.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.117.Final/netty-buffer-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.117.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ctc0RM2h4SPw26KbiCu-__f7IPrgKqGaCbkl1E8OPj8/netty-buffer-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-buffer/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-buffer",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.107.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.107.Final/netty-codec-dns-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.107.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M33mT8Q8KNU6HPTEpkRLc0erCTr1iEcjjp1VnUXU3Z0/netty-codec-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-dns",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-haproxy-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-haproxy/4.1.107.Final/netty-codec-haproxy-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-haproxy@4.1.107.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yANfTrLR11Pl_tEkwn8JVsrP8NAhhLScii_r_UgKx68/netty-codec-haproxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-haproxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-haproxy",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.107.Final/netty-codec-http-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.107.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yfnlpqholvp4wc3eR6bOKMP9-JUHqRtFzbx5drrr_SU/netty-codec-http-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.117.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.117.Final/netty-codec-http-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gxZR_YHsuaGr40f8NgIodXK3ViWcPB337GS4djBoA4U/netty-codec-http-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.117.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-http/",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-http",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-socks/4.1.107.Final/netty-codec-socks-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1gmmyAeE3RHjo6KKPuJ9GcYPKPUbdi40vA_YNPIm6ko/netty-codec-socks-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec-socks@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec-socks/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec-socks",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.107.Final/netty-codec-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DZjfHmALjLe8oyHuNFFQo8seMRuCptGo3sZ4UhANJbM/netty-codec-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.117.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.117.Final/netty-codec-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/tj7sGyFJhaU30ZsYCBAhFJZMRGIhs6Fkp2Ne-sPBkHg/netty-codec-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.117.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-codec/",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-codec",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.107.Final/netty-common-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XZXt04Ae1O6A9KIWWVAywCv7qujL0ZYq5b8nHsNyUm0/netty-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-common",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.117.Final",
    "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.117.Final/netty-common-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W60C_1-9814K0AF1q04kFpDxHgLtLv4Q7BMm3EjFkuo/netty-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.117.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-common",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.107.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler-proxy/4.1.107.Final/netty-handler-proxy-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pniNCb1TwEbLetzmUH3mKqQlrecjBfNRmkzo7y2bJWQ/netty-handler-proxy-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler-proxy@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler-proxy/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler-proxy",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.107.Final",
    "copyrightText" : "Copyright 2011 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.107.Final/netty-handler-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.107.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-oA6PzBb4fs2PEDDDMpcrywOfwh2oVyhcgtKA6Dt6og/netty-handler-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.117.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.117.Final/netty-handler-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.117.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FvqLYk0fgPNC2CAF2VXtAEWvzY0e5bwA_ZkMHbYkJhI/netty-handler-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-handler/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-handler",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.107.Final",
    "copyrightText" : "Copyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-classes-macos/4.1.107.Final/netty-resolver-dns-classes-macos-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.107.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hA42gJOmtw6CN66kV1u6bVPLUeN1tldxxa37uV7Nvok/netty-resolver-dns-classes-macos-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-classes-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-classes-macos",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.107.Final-classifier-osx-aarch-64",
    "copyrightText" : "Copyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-native-macos/4.1.107.Final/netty-resolver-dns-native-macos-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.107.Final?classifier=osx-aarch_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PCVTbungrCLgF1pq23uGJf2kUsPuo-vNlbPljytshY8/netty-resolver-dns-native-macos-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-native-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-native-macos",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.107.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2019 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns-native-macos/4.1.107.Final/netty-resolver-dns-native-macos-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PCVTbungrCLgF1pq23uGJf2kUsPuo-vNlbPljytshY8/netty-resolver-dns-native-macos-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.107.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns-native-macos/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns-native-macos",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.107.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.107.Final/netty-resolver-dns-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4qz_bd8xbw6aM0t5xLkDllmdYHXzjM0oz2be8hKoZ_U/netty-resolver-dns-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver-dns/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver-dns",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.107.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.107.Final/netty-resolver-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eRZttygOX_qmK9E-iUA-VpDNrLvcAgLGSZXC-Lzqv7k/netty-resolver-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.117.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.117.Final/netty-resolver-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TPPd0v7tkHZbj1Nkt8HqIWsMCvLxHB7KNbRzHMWLZlM/netty-resolver-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.117.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-resolver",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=linux-aarch_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-aarch-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=osx-aarch_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=osx-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-windows-x86-64",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.61.Final/netty-tcnative-boringssl-static-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.61.Final?classifier=windows-x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jKi8DGmtZBfh8FHcz1KTd1a3zaNgv6gGrpWadL1gGoU/netty-tcnative-boringssl-static-~.Final.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-boringssl-static",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.61.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-tcnative-classes/2.0.61.Final/netty-tcnative-classes-2.0.61.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_nj9gG2-_tNpkH4rsDtDrVH8WbYs9KCloswbGcGtHlU/netty-tcnative-classes-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.61.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-tcnative-classes",
    "versionInfo" : "2.0.61.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.107.Final/netty-transport-classes-epoll-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6l41mmeUpoNMVXOYwLcIBXqQ69Ko3e8goCoyZUW_AOU/netty-transport-classes-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-classes-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-classes-epoll",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.107.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2013 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.107.Final/netty-transport-native-epoll-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0NrCC-NWCd-nfdsMaP-tY8qFJEOTbTX5W_FwI13H6UI/netty-transport-native-epoll-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.107.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-epoll/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-epoll",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.107.Final",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.107.Final/netty-transport-native-unix-common-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kWJftYkLGBfyCYwm_K5GggKOhZcReXUxU45kW_VsJy8/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.107.Final-classifier-linux-x86-64",
    "copyrightText" : "Copyright 2014 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.107.Final/netty-transport-native-unix-common-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kWJftYkLGBfyCYwm_K5GggKOhZcReXUxU45kW_VsJy8/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.107.Final?classifier=linux-x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.117.Final",
    "copyrightText" : "Copyright 2016 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.117.Final/netty-transport-native-unix-common-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uFZpOaVqwisHNDgO1a9P9Zdn9wSls1YZRkRAvsMgrcs/netty-transport-native-unix-common-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.117.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport-native-unix-common/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport-native-unix-common",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.107.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.107.Final/netty-transport-4.1.107.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ooOZ_y3rKgwRVkFLN0-QHml4scLDmSYqcdY4JpgJ9BM/netty-transport-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.107.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport",
    "versionInfo" : "4.1.107.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.117.Final",
    "copyrightText" : "Copyright 2012 The Netty Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.117.Final/netty-transport-4.1.117.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GGzc2N3ZYnI1KUBM3h8lFtiFFDa1oW7Rg12fcYzQkQQ/netty-transport-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.117.Final",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://netty.io/netty-transport/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.netty/netty-transport",
    "versionInfo" : "4.1.117.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient/0.16.0/simpleclient-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dCuTYdORtIVAFkdeShVaF-JpgZ0VrNSnsAZivIjWMJ0/simpleclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://mvnrepository.com/artifact/io.prometheus/simpleclient/0.16.0",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_common/0.16.0/simpleclient_common-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_common@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_common",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-dropwizard-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_dropwizard/0.16.0/simpleclient_dropwizard-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_dropwizard@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qHvJVInYr1qasjzosY22SSJST3CfdWBzaqezMTJ73wA/simpleclient_dropwizard-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_dropwizard",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_servlet/0.16.0/simpleclient_servlet-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_servlet@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_servlet",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-common-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_servlet_common/0.16.0/simpleclient_servlet_common-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_servlet_common@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4oOBNKGQhgEqkqqy5nW_Qzp32rAm7DArVTmXB7pgasA/simpleclient_servlet_common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_servlet_common",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_common/0.16.0/simpleclient_tracer_common-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_common",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel/0.16.0/simpleclient_tracer_otel-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.16.0",
    "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\nCopyright 2007-present the original author or authors\n\nAuthors: Andrew Stuart; Andrew Stuart <andrew.stuart2@gmail.com>; Andrew Wang; Christian Kaltepoth; Doug Lea; Eliezio Oliveira; Marco Aust; The Prometheus Authors; the OpenTelemetry",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/simpleclient_tracer_otel_agent/0.16.0/simpleclient_tracer_otel_agent-0.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7fMc_Yx6j23husKDWHoq2naMI-_3UmZPDU9DSNNktrE/parent-~.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/prometheus/client_java",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.prometheus/simpleclient_tracer_otel_agent",
    "versionInfo" : "0.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-1.2.2",
    "copyrightText" : "Copyright (c) 1997, 2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q49I0pRC3pz_Y_WI6pJsy5uWkxpFvdRI2idbVv9yIog/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "1.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1CMH1-0fwpXMh12KbPGj4IeTF6BCjS2_qs-uVluiHQE/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jakartaee/jaf-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "2.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1",
    "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1",
    "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.inject/jakarta.inject-api",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2",
    "copyrightText" : "Copyright (c) 2019,2020 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA-vINKxODilOfJFhMZt7frREieCkTHGattM2ePqCWw/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "3.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0",
    "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-2.3.3",
    "copyrightText" : "Copyright (c) 2019, 2020 Eclipse Foundation\nCopyright (c) 2005, 2019 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2019 Oracle and/or its affiliates\nCopyright (c) 2018, 2020 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HFR-DCqoP85_EdCEMEFSbdsjTzZ414h0LDQ-jW4pN9g/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "2.3.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 1999-2017, http://www.oracle.com Oracle and/or its affiliates\nCopyright (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2009-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EsDiBfvenrC3SxvU0AYOhakhWVqJRn8aEg4kQMZwUTw/javax.annotation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcp.org/en/jsr/detail?id=250",
    "licenseConcluded" : "CDDL-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.annotation/javax.annotation-api",
    "versionInfo" : "1.3.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.inject-javax.inject-1",
    "copyrightText" : "Copyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/inject/javax.inject/1/javax.inject-1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.inject/javax.inject@1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bC-qNBAeq5cGb0-tWmzqkYHBn-mOw5DPFATKTjZVABQ/javax.inject-1-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/atinject/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.inject/javax.inject",
    "versionInfo" : "1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.validation-validation-api-1.1.0.Final",
    "copyrightText" : "Copyright 2009, Red Hat, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/validation/validation-api/1.1.0.Final/validation-api-1.1.0.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.validation/validation-api@1.1.0.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bpg4WpBXHwPNIkagyDtN-elaI8BXIyMi80I9rBKsiMs/validation-api-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.validation/validation-api",
    "versionInfo" : "1.1.0.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.ws.rs-javax.ws.rs-api-2.1",
    "copyrightText" : "Copyright (c) 2006 Google Inc.\nCopyright (c) 2011-2017 Oracle and/or its affiliates\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 1996-2017, http://www.oracle.com Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/ws/rs/javax.ws.rs-api/2.1/javax.ws.rs-api-2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pqmbXiSv8SXDXQfLgsb8iq5O22YZG7jZc0bAlVzkR7I/javax.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jax-rs-spec.java.net",
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.ws.rs/javax.ws.rs-api",
    "versionInfo" : "2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.10.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.16.0",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2017 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2015 Goldstein Lyor, 2021 Daniel Widdis\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2010 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2020 Torbjorn Svensson\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.16.0/jna-platform-5.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.16.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OzHXXjWr0rv6AjwkKWsjReTdinnQYr6rAIilBIxQMEc/jna-platform-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.16.0",
    "copyrightText" : "Copyright © 2008-2018 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 2022 Carlos Ballesteros\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.16.0/jna-5.16.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UuZB2ND1liIjybfRuN8uad3WTBD5u6bST36qmNKoPX8/jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.16.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna",
    "versionInfo" : "5.16.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jcip-jcip-annotations-1.0",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz and Tim Peierls",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jcip/jcip-annotations/1.0/jcip-annotations-1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TDG8oCDwQtc3vPSBwp0bycUDcAFaquft_xesydctTdw/jcip-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jcip/jcip-annotations@1.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jcip.net/",
    "licenseConcluded" : "CC-BY-2.5",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jcip/jcip-annotations",
    "versionInfo" : "1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.openhft-zero-allocation-hashing-0.16",
    "copyrightText" : "Copyright 2014 Higher Frequency Trading http://www.higherfrequencytrading.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/openhft/zero-allocation-hashing/0.16/zero-allocation-hashing-0.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EerJjuMPSVM-7wcQhEO9N6Hcx5rGpv_orIUHkbFe-qs/zero-allocation-hashing-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.openhft/zero-allocation-hashing@0.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/OpenHFT/Zero-Allocation-Hashing",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.openhft/zero-allocation-hashing",
    "versionInfo" : "0.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.aeonbits.owner-owner-1.0.12",
    "copyrightText" : "Copyright (c) 2012-2015, Luigi R. Viggiano",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/aeonbits/owner/owner/1.0.12/owner-1.0.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.aeonbits.owner/owner@1.0.12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qBY_PmmfbPV7l8Mz9uFmzNCCk6uSjqdBOzbYvt6Gb-I/owner-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.aeonbits.owner/owner",
    "versionInfo" : "1.0.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-protobuf-1.11.5",
    "copyrightText" : "Copyright 2009-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro-protobuf/1.11.5/avro-protobuf-1.11.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro-protobuf@1.11.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nv7o3vXFTxgpzReDnD-phSye3-D2M5VPWPurqKTqtIo/avro-protobuf-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro-protobuf",
    "versionInfo" : "1.11.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.11.5",
    "copyrightText" : "Copyright 2009-2025 The Apache Software Foundation\nCopyright 2002-2020 the original author or authors\n\nAuthors: Chris Beams; Colin Sampaleanu; Juergen Hoeller; Keith Donald; Rob Harrop; Rod Johnson; Sam Brannen; The Apache Software Foundation; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/avro/avro/1.11.5/avro-1.11.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.avro/avro@1.11.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/dPARobxvFB0aSA8rcOFqwT0OVYA8l9WYRTyDWYxWThc/avro-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://avro.apache.org",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.avro/avro",
    "versionInfo" : "1.11.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-allocator-4.16.3",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/bookkeeper-common-allocator/4.16.3/bookkeeper-common-allocator-4.16.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/bookkeeper-common-allocator@4.16.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FZnNXUEJxMUZqQn9SoSfhyzGbKl_eLkwt92o-W9GthY/bookkeeper-common-allocator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/bookkeeper-common-allocator",
    "versionInfo" : "4.16.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-circe-checksum-4.16.3",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation\nCopyright 2014 Trevor Robinson",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/circe-checksum/4.16.3/circe-checksum-4.16.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/circe-checksum@4.16.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Uzb5aT0jmD-Gc0Ho4ZIHlY6jStBpakl_3wNmKTzFYcQ/circe-checksum-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/circe-checksum",
    "versionInfo" : "4.16.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.bookkeeper-cpu-affinity-4.16.3",
    "copyrightText" : "Copyright 2011-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/bookkeeper/cpu-affinity/4.16.3/cpu-affinity-4.16.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.bookkeeper/cpu-affinity@4.16.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-Sc0hM2qqfGsX0M2Kai66jDWtw6LlGggqBJRq9GWAEc/cpu-affinity-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.bookkeeper/cpu-affinity",
    "versionInfo" : "4.16.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.0",
    "copyrightText" : "Copyright 2002-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.26.0/commons-compress-1.26.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.26.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iFZcbnX8nJnrIcqcwCkwbrfoxBZnJkHan3lvXxi3Cik/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.26.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.2",
    "copyrightText" : "Copyright 2002-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/leWdRmzBTMC4xTWXtVobQCtiRCm3cW3R73OegywbjCw/commons-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-compress@1.26.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-compress/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-compress",
    "versionInfo" : "1.26.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.14.0",
    "copyrightText" : "Copyright 2001-2023 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.14.0/commons-lang3-3.14.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pCUc3X2_5yURXxrsrgB4C7MRK79f3Ied3YQn-QvvDc8/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.14.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.18.0",
    "copyrightText" : "Copyright 2001-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.18.0/commons-lang3-3.18.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/M7x1qCVbeV89cDlnHVokFFrdkyTQY4-bWwCzFTDzrWA/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.18.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16",
    "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-3.1.1-classifier-pkg",
    "copyrightText" : "Copyright 2017-2023 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/bouncy-castle-bc/3.1.1/bouncy-castle-bc-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/bouncy-castle-bc@3.1.1?classifier=pkg",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7xY_n6ZD8YuI_-b5oqgRGaERWO99EjOU-kqxNlm5Uyw/bouncy-castle-bc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/bouncy-castle-bc",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-3.1.1",
    "copyrightText" : "Copyright 2017-2023 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-admin-api/3.1.1/pulsar-client-admin-api-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-admin-api@3.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KlMVt1AecWLCl__zlPtGS_cXm4DOzaClvgOU6YTuYmg/pulsar-client-admin-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-admin-api",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-3.1.1",
    "copyrightText" : "Copyright 2017-2023 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-api/3.1.1/pulsar-client-api-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-api@3.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QLRlA9uRQ9HXtBYNk5vSyEYWitoukePnx3GOUR427FQ/pulsar-client-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-api",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-original-3.1.1",
    "copyrightText" : "Copyright 2017-2023 Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-client-original/3.1.1/pulsar-client-original-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-client-original@3.1.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Tww2ceFLf6EgSm_hpR6nhOsAzt76niLu-Va0i4DaOoA/pulsar-client-original-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-client-original",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-common-3.1.1",
    "copyrightText" : "Copyright 2017-2023 Apache Software Foundation\nCopyright 2020 Splunk Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/pulsar/pulsar-common/3.1.1/pulsar-common-3.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uWni0hMsVD1v7iO3wZn7nuB3qphXoLKr07n0rUXXakU/pulsar-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.pulsar/pulsar-common@3.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.pulsar/pulsar-common",
    "versionInfo" : "3.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.41",
    "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2025 The Apache Software Foundation\nCopyright (c) 1999-2025, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2025, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.41/tomcat-embed-core-10.1.41.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8cQbriwzZbTDdG5zl1jexsLIeSTlSW-27Ww0rEqH0rs/tomcat-embed-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.41",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core",
    "versionInfo" : "10.1.41"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.41",
    "copyrightText" : "Copyright 1999-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.41/tomcat-embed-el-10.1.41.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iMGJelh9o3b8JDDecANqbEI8aYbg8qbgKjo_VgqrYfU/tomcat-embed-el-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.41",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el",
    "versionInfo" : "10.1.41"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.41",
    "copyrightText" : "Copyright 1999-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.41/tomcat-embed-websocket-10.1.41.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s2bDaxhrJDNZlufumSHuTZPSM8_DZ6w6lIm5sjPu_wo/tomcat-embed-websocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.41",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tomcat.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket",
    "versionInfo" : "10.1.41"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-netty-utils-2.12.1",
    "copyrightText" : "Copyright (c) 2015 AsyncHttpClient Project",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/asynchttpclient/async-http-client-netty-utils/2.12.1/async-http-client-netty-utils-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/itD9b3v__XXR0jGNMNR7atzyE5Z10flKHJhbeqbMpq0/async-http-client-netty-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.asynchttpclient/async-http-client-netty-utils",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-2.12.1",
    "copyrightText" : "Copyright 2010 Ning, Inc.\nCopyright (c) 2014 AsyncHttpClient Project\nCopyright (c) 2007 Google Inc.\nCopyright (c) 2010-2012 Sonatype, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/asynchttpclient/async-http-client/2.12.1/async-http-client-2.12.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.asynchttpclient/async-http-client@2.12.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FauhlPUC5nFGRWzewdeNX8kQEQ8F1koUiwIW_aEFTKg/async-http-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.asynchttpclient/async-http-client",
    "versionInfo" : "2.12.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.78.1/bcpkix-jdk18on-1.78.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.78.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.83/bcpkix-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.83",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/b2cWV45eM6_2mMsYRqjw77Mlu_ur6sL214SFPwnGty4/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/java.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.78.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.83/bcprov-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zE8V1-GtU4SiFszz3rR-PeuXrmkONULdAL_Juj_q9EQ/bcprov-jdk18on-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.83",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2007-2023 Ping Identity Corporation\nCopyright 2008-2023 Ping Identity Corporation Bundle-Name\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2008-2023 Ping Identity Corporation\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.78.1/bcutil-jdk18on-1.78.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZFuX-7NNIYeLSzKwVKdrH_fljS85riyeyvjie0hAUw8/r1rv78v1.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.78.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.83/bcutil-jdk18on-1.83.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.83",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk18on",
    "versionInfo" : "1.83"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.checkerframework-checker-qual-3.33.0",
    "copyrightText" : "Copyright 2004-present by the Checker Framework developers",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/checkerframework/checker-qual/3.33.0/checker-qual-3.33.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GQQiLXWlvCCWMYLfpy5_RGJpv_Qn3H5jHBA3ETUDTdY/checker-qual-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://checkerframework.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.checkerframework/checker-qual",
    "versionInfo" : "3.33.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.collections-eclipse-collections-api-11.1.0",
    "copyrightText" : "Copyright (c) 2022 Bhavana Hindupur and others\nCopyright (c) 2007, Eclipse Foundation, Inc\nCopyright (c) 2021 Goldman Sachs\nCopyright (c) 2021 Goldman Sachs and others\n(c) 2008 VeriSign, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/collections/eclipse-collections-api/11.1.0/eclipse-collections-api-11.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.collections/eclipse-collections-api@11.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EMMV1qIb88cQgzZ5-XsH2ZUtSnoGoPpo3TC2xqTLDd0/eclipse-collections-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.collections/eclipse-collections-api",
    "versionInfo" : "11.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.collections-eclipse-collections-11.1.0",
    "copyrightText" : "Copyright (c) 2021 Bhavana Hindupur\nCopyright (c) 2021 Bhavana Hindupur and others\nCopyright (c) 2007, Eclipse Foundation, Inc\nCopyright (c) 2021 Goldman Sachs\nCopyright (c) 2021 Goldman Sachs and others\nCopyright (c) 2021 Shotaro Sano\nCopyright (c) 2022 Shotaro Sano and others\nCopyright (c) 2022 The Bank of New York Mellon\nCopyright (c) 2021 The Bank of New York Mellon and others\nCopyright (c) 2021 Two Sigma\nCopyright (c) 2022 Two Sigma and others\nCopyright (c) 2022 Xebialabs and others\n(c) 2008 VeriSign, Inc",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/collections/eclipse-collections/11.1.0/eclipse-collections-11.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.collections/eclipse-collections@11.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e4MuXYjbKht21_HbL6XgX820D0nIAeEKOtNP8tqN4WU/eclipse-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.collections/eclipse-collections",
    "versionInfo" : "11.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty.toolchain-jetty-servlet-api-4.0.6",
    "copyrightText" : "Copyright 1996 Aki Yoshida\nCopyright 1995-2018 Mort Bay Consulting Pty Ltd.\nCopyright Mort Bay Consulting Pty Ltd\nCopyright 1999 Sun Microsystems, Inc.\nCopyright 2004 The Apache Software Foundation\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012 Mort Bay Consulting Pty. Ltd.\nCopyright (c) 1997-2018 Oracle and/or its affiliates\nCopyright (c) 1997, 2018 Oracle and/or its affiliates and others\n(c) Copyright International Business Machines Corporation 2002\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/toolchain/jetty-servlet-api/4.0.6/jetty-servlet-api-4.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8zM3pFZUUqSOiSzKiIr8MQoIs8C3eJRjEqFjZ-jsD_g/jetty-servlet-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND CDDL-1.1 AND Apache-2.0 AND CDDL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty.toolchain/jetty-servlet-api",
    "versionInfo" : "4.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-10.0.24",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-http/10.0.24/jetty-http-10.0.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.24",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DO31I2Byy7F0q0TV5x5LZYUHTvM8kN2oAxAIFW5ldzs/jetty-http-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-http",
    "versionInfo" : "10.0.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-10.0.24",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-io/10.0.24/jetty-io-10.0.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0Xk7kI-XLQlTG2jFOZk-hD6bqiEtY9idQl7DwI63UTE/jetty-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.24",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-io",
    "versionInfo" : "10.0.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-security-10.0.24",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-security/10.0.24/jetty-security-10.0.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rqjfnO9NrV_kG3uYAkKQQM3j3m3mdE6-0oPCAoNP6qw/jetty-security-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.24",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-security",
    "versionInfo" : "10.0.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-server-10.0.24",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-server/10.0.24/jetty-server-10.0.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yApW8-pCbLDG0y4sCToKKG6gf2C4woxkagDWvPR0pB0/jetty-server-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.24",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-server",
    "versionInfo" : "10.0.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlet-10.0.24",
    "copyrightText" : "Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-servlet/10.0.24/jetty-servlet-10.0.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Fs757m1pmbDQ4Fd4dX9gl2pHqRICNvka_ijgu_-ctmM/jetty-servlet-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-servlet",
    "versionInfo" : "10.0.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.2.18.v20160721",
    "copyrightText" : "Copyright (c) 1995-2016 Mort Bay Consulting Pty. Ltd.\nCopyright (c) 2008-2016 Mort Bay Consulting Pty. Ltd. Bundle-Vendor Eclipse Jetty Project Bundle-Version",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/9.2.18.v20160721/jetty-util-ajax-9.2.18.v20160721.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Sy1o-uOyiFkLNjpRszakso-x1XHPRBKVBkNlREIBaKg/jetty-util-ajax-~.v20160721-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.2.18.v20160721",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.eclipse.org/jetty",
    "licenseConcluded" : "(EPL-1.0 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "9.2.18.v20160721"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-10.0.24",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd\nCopyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/10.0.24/jetty-util-10.0.24.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HM1BDX-hLAtkYWY54fiWY2yTAbwGGEGkCuZKcVKTJ-o/jetty-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.24",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND BSD-3-Clause AND Apache-2.0 AND MIT AND CDDL-1.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "10.0.24"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.2.18.v20160721",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright 1996 Aki Yoshida\nCopyright (c) 1996 Aki Yoshida\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright (c) 1995-2016 Mort Bay Consulting Pty. Ltd.\nCopyright (c) 2008-2016 Mort Bay Consulting Pty. Ltd. Bundle-Vendor Eclipse Jetty Project Bundle-Version",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/9.2.18.v20160721/jetty-util-9.2.18.v20160721.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@9.2.18.v20160721",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cX7VqodoQak90i0DTo2rzllNxy4qovi4Ct1958hbHdI/jetty-util-~.v20160721-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.eclipse.org/jetty",
    "licenseConcluded" : "(EPL-1.0 AND UnixCrypt AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "9.2.18.v20160721"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6",
    "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.10/jersey-apache-connector-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OURi0ZaWU_ZGMXhcmSfDKIGaNTDsQ12RlqIrf_swN4I/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.10/jersey-client-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YnNMnFRc0jv1RZQ7jOvehT9XPFz_RSXPg9QEbVlv4kw/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.10/jersey-common-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WYdXn9T8Ie4QLUpxtpp2O8DhnjOgSIUKFxvIKqd4Lqs/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.10/jersey-hk2-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-Aleg4gQJAEBjIASWrgjg39kTqjHWXVIZS34BzUC74w/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND GPL-2.0-only WITH Classpath-exception-2.0 AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.10",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.10/jersey-media-multipart-3.1.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bU7ZVbXI_oYMvo1GmHDVkr2V8ilufY3Zmqks7MSBH2M/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "3.1.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0",
    "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TooTallNate/Java-WebSocket",
    "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.java-websocket/Java-WebSocket",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.30.2-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jctools-jctools-core-4.0.5",
    "copyrightText" : "Copyright 2012 ACM\nCopyright 2012 Real Logic Ltd.\nCopyright (c) 1977, Association for Computing Machinery, Inc. General",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jctools/jctools-core/4.0.5/jctools-core-4.0.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jctools/jctools-core@4.0.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NtCEfcLMdY_9bYHDXI4vY7Uv7WtQkxez-HFtZgZgxnY/jctools-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JCTools",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jctools/jctools-core",
    "versionInfo" : "4.0.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.9.25",
    "copyrightText" : "Copyright Eric Ford & Hubert Holin 2001\nCopyright 2007 Google Inc.\nCopyright 2010-2015 JetBrains s.r.o.\nCopyright 2010-2018 JetBrains s.r.o. and Kotlin Programming Language contributors\nCopyright 2011 The Guava Authors\ncopyright Char (c)\n\nAuthors: Char; Eric Ford & Hubert Holin; Google Inc.; JetBrains s.r.o.; JetBrains s.r.o. and Kotlin Programming Language contributors; The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib/1.9.25/kotlin-stdlib-1.9.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H_ou_y42fV1QEajK_73U8MF7fM-BB4eu1UN_HHKoDss/kotlin-stdlib-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://kotlinlang.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.kotlin/kotlin-stdlib",
    "versionInfo" : "1.9.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-compress-1.2.3",
    "copyrightText" : "Copyright 2010 - 2018 JetBrains s.r.o.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/xodus/xodus-compress/1.2.3/xodus-compress-1.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jYlQZt1FPNowilzPU3j3gths0C50i_PjRVYfUkltElw/xodus-compress-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.xodus/xodus-compress@1.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JetBrains/xodus",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.xodus/xodus-compress",
    "versionInfo" : "1.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-environment-1.2.3",
    "copyrightText" : "Copyright 2010 - 2018 JetBrains s.r.o.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/xodus/xodus-environment/1.2.3/xodus-environment-1.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MXsKs6sG4x5c1b10gPhMMBkbINFN6SwwxCvrRNbdihk/xodus-environment-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.xodus/xodus-environment@1.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JetBrains/xodus",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.xodus/xodus-environment",
    "versionInfo" : "1.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-openAPI-1.2.3",
    "copyrightText" : "Copyright 2010 - 2018 JetBrains s.r.o.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/xodus/xodus-openAPI/1.2.3/xodus-openAPI-1.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XTp6pZmXTgEWvoj2l5HVMco6szV8RJ5kVCPHuiWKPVQ/xodus-openAPI-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.xodus/xodus-openAPI@1.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JetBrains/xodus",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.xodus/xodus-openAPI",
    "versionInfo" : "1.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-utils-1.2.3",
    "copyrightText" : "Copyright 2010 - 2018 JetBrains s.r.o.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/xodus/xodus-utils/1.2.3/xodus-utils-1.2.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YT3FtmDUMQAt07OGRnxbgNvFrXohKmGaJNEF9oSyrpY/xodus-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains.xodus/xodus-utils@1.2.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JetBrains/xodus",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains.xodus/xodus-utils",
    "versionInfo" : "1.2.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jetbrains-annotations-26.0.2",
    "copyrightText" : "Copyright 2000-2021 JetBrains s.r.o.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jetbrains/annotations/26.0.2/annotations-26.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nPyf41OnGookgdeZLs3LKbHCmRfhtOgm66MbOyjavf4/annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jetbrains/annotations@26.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/JetBrains/java-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jetbrains/annotations",
    "versionInfo" : "26.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4",
    "copyrightText" : "Copyright 2014 Reactive Streams",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzlZKD1w0srcX7HUjm-dlT3mVAU0KPihSho4sZTZnm4/reactive-streams-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.reactive-streams.org/",
    "licenseConcluded" : "MIT-0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.reactivestreams/reactive-streams",
    "versionInfo" : "1.0.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.rocksdb-rocksdbjni-8.3.3",
    "copyrightText" : "Copyright 1995-2022 Jean-loup Gailly and Mark Adler\nCopyright 1995-2017 Jean-loup Gailly and Mark Adler Qkkbal\nCopyright 1995-2022 Mark Adler\nCopyright (c) 2015, Facebook, Inc.\nCopyright (c) Facebook, Inc. and its affiliates\nCopyright (c) Meta Platforms, Inc. and affiliates\nCopyright (c) 2006, 2015, Percona and/or its affiliates\nCopyright (c) 2014, Vlad Balan (vlad.gm@gmail.com)\nCopyright (c) 2011-present, Facebook, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/rocksdb/rocksdbjni/8.3.3/rocksdbjni-8.3.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.rocksdb/rocksdbjni@8.3.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0f52aKVluXRfeo-AHzMDmtXRGDX2Y87tMBeFwqms-L8/rocksdbjni-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rocksdb.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.rocksdb/rocksdbjni",
    "versionInfo" : "8.3.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.16",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.16/jul-to-slf4j-2.0.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ecvFV6MALNNGTGLaDzikCUpm5_25jRc-S-M0dPYghtI/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "2.0.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.12",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.12/slf4j-api-2.0.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.12",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0GAO3b1L48xvyfZ57oeCxIvzVb18bXePGekLez014gc/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.16",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A-Ct3bWXmLVcIM1b-eOXS0xDmY0zlCVnD_DsKZJoS2Y/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.16",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.16"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.9",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.9/slf4j-api-2.0.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gQVqZ5SmZg1rb75O1S6FxdqvxhB2bwFc9EH8P7mUDE8/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-2019 the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Fernando Cappi; Filip Hrisafov; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.4.6/spring-boot-autoconfigure-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzYQ1WQDgBam8-qXuAGvLfzRx96aCtpZlNZts-nrlpg/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.4.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-json/3.4.6/spring-boot-starter-json-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ELqvcMdHuKj1vXZa3Hw-SDTIgm_iywEU-FnKweg5yC0/spring-boot-starter-json-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.4.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-json",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.4.6/spring-boot-starter-logging-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WIg5c01gnLlwe7a3jvmaaTq1aj-ku5hY7ncQ-B0Kf50/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.4.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/3.4.6/spring-boot-starter-tomcat-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/htHbyEL_UWmZSWNeuK3MkLtnvLM5Vac7DVKKXXFSLiY/spring-boot-starter-tomcat-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.4.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-tomcat",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-web/3.4.6/spring-boot-starter-web-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C_qmDeEvTeU0jnnVyJDSk6S0pwrzVqWROqpE0xB4-nw/spring-boot-starter-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.4.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-web",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.4.6/spring-boot-starter-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.4.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HBGJmBhqm6Ta5t79DhY7faY8YJQUALu3U1t2WCx3wvA/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.4.6",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.4.6/spring-boot-3.4.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.4.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jU6-w1GvpJNonl8vqR4cu3B1udeCsutdzoeifc6I6P8/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "3.4.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2006 the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.7/spring-aop-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cS5FPaieMksdhWk6jFUb0Jp0jNspY3duSaDH99SRAOY/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2007 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBean. Class; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.7/spring-beans-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8D-qEMetPHjutHzW7EBjYsZyg0XMlxcRP9ypz1GtFJ8/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2005 the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.7/spring-context-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TY0V1nvoZUmIyNOFTapkZt8_D57o8eLOCPShs7XYe_M/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.7/spring-core-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sVReDS8txhQK0NYQwpMYnHq-DbNN-8LipFSjIIgOv78/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2012 the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.7/spring-expression-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/urA-qSXvbuDkagR15SwaleBDefIYMyyos3nvMBi1WkE/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2017 the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.7/spring-jcl-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ceWu_wbGzsvd9hXZmHo6KRcV4U2-0W7T1rHXSRrhpL0/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.7/spring-web-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.7",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/amxHpvDijzSHdxrmAm1akKDcwJmBP9gEF7OO8Z8Fh0g/spring-web-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-web",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.7",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-2010 the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Thomas Risberg; Vedran Pavic; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.7/spring-webmvc-6.2.7.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0NC0ggavOvODreLiFtOyC4A8g5POxLbW9rIPQfLcAbA/spring-webmvc-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.7",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-webmvc",
    "versionInfo" : "6.2.7"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.1",
    "copyrightText" : "Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland www.source-code.biz\nCopyright (c) 2008 Google Inc\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.1/snakeyaml-2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8Sy8vVbOVsYLjk-aT1Sau9IhidtcY9KZtB4sh-uo_58/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-alsa-lib-1.2.13-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1992 by Stichting Mathematisch Centrum, Amsterdam\nCopyright (c) 2019, Advanced Linux Sound Architecture (ALSA) project\nCopyright (c) 2006-2008 Diego Petteno <flameeyes@gmail.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2014-2015 Intel Corporation\nCopyright (c) 2021 Jaroslav Kysela\nCopyright (c) 2022 Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2010 Red Hat Inc.\nCopyright (c) 2000-2002 Richard W.E. Furse, Paul Barton-Davis, Stefan Westerfeld\nCopyright (c) 2008-2010 SlimLogic Ltd\nCopyright (c) 2005 Takashi Iwai <tiwai@suse.de>\nCopyright (c) 1998,99,2000 Takashi Iwai <tiwai@suse.de> , Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2010 Texas Instruments Inc.\nCopyright (c) 2003 Thomas Charbonnel (thomas@undata.org)\nCopyright (c) 2003 Winfried Ritsch (IEM)\nCopyright (c) 2010 Wolfson Microelectronics PLC\nCopyright (c) 1994 X Consortium\nCopyright (c) by Abramo Bagnara <abramo@alsa-project.org>\nCopyright (c) 2000 by Abramo Bagnara <abramo@alsa-project.org> , Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2000 by Abramo Bagnara <abramo@alsa-project.org> 2004 by Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 2000 by Abramo Bagnara <abramo@alsa-project.org> 2004 by Jaroslav Kysela <perex@perex.cz> 2006 by Takashi Iwai <tiwai@suse.de>\nCopyright (c) 1998-1999 by Frank van de Pol <fvdpol@coil.demon.nl>\nCopyright (c) 1998 by Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 1994-2003 by Jaroslav Kysela <perex@perex.cz> , Abramo Bagnara <abramo@alsa-project.org>\nCopyright (c) by Jaroslav Kysela <perex@perex.cz> , Creative Labs, Inc. Definitions\nCopyright (c) 1994-98 by Jaroslav Kysela <perex@perex.cz> , 4Front Technologies\nCopyright (c) 2003 by Jaroslav Kysela <perex@perex.cz> Takashi Iwai <tiwai@suse.de>\nCopyright (c) 1999 by Takashi Iwai <tiwai@suse.de>\nCopyright (c) 2016 by Thomas Klausner <wiz@NetBSD.org>\nCopyright (c) 1999 by Uros Bizjak <uros@kss-loka.si> Jaroslav Kysela <perex@perex.cz>\nCopyright (c) 1999 by Uros Bizjak <uros@kss-loka.si> Takashi Iwai <tiwai@suse.de>\nCopyright (c) 2006-2008 xine project\n(c) 2003 - Rear\n(c) 2003 - Rear Left\n(c) 1998-1999 by Jaroslav Kysela <perex@perex.cz>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/alsa-lib-1.2.13-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/alsa-lib@1.2.13-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rgXj7kP9NBWbdSIi8brQKOZ7WI_B7kIOu8LC2LVTOjo/alsa-lib-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.alsa-project.org/",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/alsa-lib",
    "versionInfo" : "1.2.13-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-alternatives-1.24-2.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2001 Red Hat, Inc.\n(c) 2001 Hong Mao Gong Si\n(c) 1997-2000 Red Hat\n(c) 1997-2000 Red Hat, Inc\n(c) 1997-2000 lii Red Hat Inc.\ncopyright 1997 Charles Briscoe-Smith, 2002 Red Hat, Inc.\ncopyright 1997/98 Charles Briscoe-Smith and 2002 Red Hat, Inc.\ncopyright 2002 Red Hat, Inc\ncopyrighted by the Free Software Foundation\n(c) rd hd Inc.\n(c) 1997-2000 rd ht, Inc.\n(c) 2001 rd ht, shrkht",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/a/alternatives-1.24-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/alternatives@1.24-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jcBtyDcebmL4dwV8LNMsRsbCsURDcRZhMd2Xe50LeoM/chkconfig-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fedora-sysv/chkconfig",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/alternatives",
    "versionInfo" : "1.24-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-cli-1.5.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-cli-1.5.0-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-cli@1.5.0-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/it6HrG2vsCQDdbVp9hy4-CGv2Yqyysmjt2V-wH2MsoE/apache-commons-cli-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/cli/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-cli",
    "versionInfo" : "1.5.0-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-codec-1.15-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2002-2020 The Apache Software Foundation\nCopyright 2007 by Kevin Atkinson\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2002 Kevin Atkinson (kevina@gnu.org)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-codec-1.15-8.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-codec@1.15-8.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SpSC9M1GEgAVwEMG8g6uVeT-6IvUr_SQ7vFHfSqrf2M/apache-commons-codec-~-8.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-codec",
    "versionInfo" : "1.15-8.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-io-2.11.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2002-2021 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-io-2.11.0-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-io@2.11.0-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yPrnMjhJIuPNfDEm5YClEXHKPW4T74iL832ocTL-K1I/apache-commons-io-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-io",
    "versionInfo" : "2.11.0-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-apache-commons-lang3-3.12.0-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2021 The Apache Software Foundation\nCopyright (c) 2001-2011 http://www.apache.org/ The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/apache-commons-lang3-3.12.0-8.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/apache-commons-lang3@3.12.0-8.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uMHU1b4-kWfBOr6SH1GpKHelIqn0QS9PAZl9sQwhaKg/apache-commons-lang3-~-8.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/lang",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/apache-commons-lang3",
    "versionInfo" : "3.12.0-8.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-atinject-1.0.5-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc. https://www.eclipse.org/legal/efsl.php\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/a/atinject-1.0.5-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/atinject@1.0.5-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AUHuHrzreqIZ_K5W5YVJxRf5VvqJ98IjEaX5z4c6vF0/atinject-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/atinject",
    "versionInfo" : "1.0.5-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-audit-libs-3.1.5-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008 FUJITSU Inc.\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 2005-08, 2010,11,2013,2020 Red Hat\nCopyright 2012-17,2020 Red Hat\nCopyright 2004-07,2012-13,2018 Red Hat Inc.\nCopyright 2004-2008,2012-13,2016,2023 Red Hat Inc.\nCopyright 2004-2009,2012,2014,2016-17,2020 Red Hat Inc.\nCopyright 2005-21 Red Hat Inc.\nCopyright 2007,2011-13 Red Hat Inc.\nCopyright 2007,2012-14 Red Hat Inc.\nCopyright 2011-14,2018 Red Hat Inc.\nCopyright 2014,16,2021-2 Red Hat Inc.\nCopyright 2016-19 Red Hat Inc.\nCopyright 2018-24 Red Hat Inc.\nCopyright 2004-08,2015-16 Red Hat Inc., Durham, North Carolina\nCopyright 2004-2006, 2008,2011-16,2018 Red Hat Inc., Durham, North Carolina\nCopyright 2005-06, 2008,2014 Red Hat Inc., Durham, North Carolina\nCopyright 2005-07 Red Hat Inc., Durham, North Carolina\nCopyright 2005-08,2010-11,2014,2016-17 Red Hat Inc., Durham, North Carolina\nCopyright 2006-07,2009,2016 Red Hat Inc., Durham, North Carolina\nCopyright 2008,2011-12 Red Hat Inc., Durham, North Carolina\nCopyright 2018,19 Red Hat Inc., Durham, North Carolina\nCopyright 202-23 Steve Grubb\nCopyright 2021 Steve Grubb\nCopyright 2005-24 Steve Grubb <sgrubb@redhat.com>\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2004 Free Software Foundation, Inc. GNU Lesser General\nCopyright (c) 2006 HP\nCopyright (c) 2004 IBM\nCopyright (c) 2011 IBM Corp.\nCopyright (c) 2007 International Business Machines Corp.\nCopyright (c) 2007,2008,2009,2010,2011 Marc Alexander Lehmann <libev@schmorp.de>\nCopyright (c) 2008 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 2005-08,2011,2013-14,2018-21 Red Hat\nCopyright (c) 2005-09,2011-13,2016-17,2021-23 Red Hat\nCopyright (c) 2011, 2015 Red Hat., Durham, North Carolina\nCopyright (c) 2005 Red Hat Inc.\nCopyright (c) 2005-06,2014,2017,2022 Red Hat Inc.\nCopyright (c) 2005-08, 2011 Red Hat Inc.\nCopyright (c) 2005-2008, 2013-14,2016 Red Hat Inc.\nCopyright (c) 2006-07,2016,2021 Red Hat Inc.\nCopyright (c) 2006-08 Red Hat Inc.\nCopyright (c) 2007-09,2011-16,2018-21,2023 Red Hat Inc.\nCopyright (c) 2016-17 Red Hat Inc.\nCopyright (c) 2016-24 Red Hat Inc.\nCopyright (c) 2005-06,2008,2014,2017 Red Hat Inc., Durham, North Carolina\nCopyright (c) 2021 Red Hat Inc., Durham, North Carolina\nCopyright (c) 2019 Steve Grubb\nCopyright (c) 2009 Steve Grubb sgrubb@redhat.com\nCopyright (c) 1994 X Consortium\n(c) Costa Tsaousis\n(c) 2011 Emanuele Giaquinta\n(c) 2009-2015,2018-2020 Marc Alexander Lehmann <libecb@schmorp.de>\n(c) Steve Grubb\ncopyrighted by the Free Software Foundation\n\nAuthors: 2004-2017,20-23 Red Hat Inc.; 2005-07,2009-18,21-23 Red Hat Inc.; 2007,2016-17,21 Red Hat Inc.; 2012-14,16,18,20-23 Red Hat Inc.; 2016-17,20 Red Hat Inc.; 2016-18,21 Red Hat Inc.; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Costa Tsaousis; DJ Delorie <dj@redhat.com>; DJ Delorie <dj@redhat.com> Steve Grubb <sgrubb@redhat.com>; Dan Walsh; Debora Velarde <dvelarde@us.ibm.com> Steve Grubb <sgrubb@redhat.com>; Emanuele Giaquinta; FUJITSU Inc.; Fran,cois Pinard; Free Software Foundation, Inc.; Free Software Foundation, Inc. GNU Lesser General; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; HP; IBM; IBM Corp.; International Business Machines Corp.; Jens Axboe; John Dennis <jdennis@redhat.com>; Klaus Heinrich Kiwi <klausk@br.ibm.com>; Marc Alexander Lehmann; Marcelo Henrique Cerri <mhcerri@br.ibm.com>; Miloslav Trmac <mitr@redhat.com>; Miloslav Trmac <mitr@redhat.com> Steve Grubb <sgrubb@redhat.com>; Paolo Bonzini; Red Hat; Red Hat Inc; Red Hat Inc., Durham, North Carolina; Red Hat, Inc.; Red Hat., Durham, North Carolina; Richard Guy Briggs <rgb@redhat.com>; Scott James Remnant; Steve Grubb; Steve Grubb <sgrubb@redhat.com>; Steve Grubb <sgrubb@redhat.com> Junji Kanemaru <junji.kanemaru@linuon.com>; Steve Grubb <sgrubb@redhat.com> Marcelo Henrique Cerri <mhcerri@br.ibm.com>; Steve Grubb <sgrubb@redhat.com> Miloslav Trmac <mitr@redhat.com>; Steve Grubb <sgrubb@redhat.com> Richard Guy Briggs <rgb@redhat.com>; Steve Grubb <sgrubb@redhat.com> Rickard E.; Tom Tromey <tromey@cygnus.com>; X Consortium; Zhang Xiliang <zhangxiliang@cn.fujitsu.com> Steve Grubb <sgrubb@redhat.com>; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/a/audit-libs-3.1.5-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/audit-libs@3.1.5-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CMYsaxpAcY6tBVZMZbA_xoBcEzTR6as-YDBvkvB7EWY/audit-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://people.redhat.com/sgrubb/audit/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/audit-libs",
    "versionInfo" : "3.1.5-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-avahi-libs-0.8-22.el9-6.1-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1999-2016 Gentoo Foundation Distributed\nCopyright 2009 Johan Dahlin\nCopyright 2010 Lennart Poettering\nCopyright 2003, 2004 Porchdog Software\nCopyright 2003, 2004 Porchdog Software, Inc.\nCopyright 2018 Simon McVittie\nCopyright 2004-2015 by the Avahi developers\nCopyright (c) 2003-2004, Apple Computer, Inc.\nCopyright (c) 2009 Avahi's\nCopyright (c) 2006 Collabora Ltd.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005 James Willcox <snorp@snorp.net>\nCopyright (c) 2004 Oren Ben-Kiki\nCopyright (c) 2000 Red Hat, Inc.\nCopyright (c) 2018 THE PACKAGE'S\nCopyright (c) 1999 Tom Tromey\nCopyright (c) 1994 X Consortium\nCopyright (c) YEAR The Avahi developers\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2007-2019 the avahi\n(c) 2005-02-02 David A. Wheeler\n(c) 2005 James Willcox snorp@snorp.net\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/a/avahi-libs-0.8-22.el9_6.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/avahi-libs@0.8-22.el9_6.1?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jtqVBurl_XUbceL8Le2xNB6jjN5UeWEeKvOCBqP-3jE/avahi-~-22.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://avahi.org",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/avahi-libs",
    "versionInfo" : "0.8-22.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-basesystem-11-13.el9-arch-noarch",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/basesystem-11-13.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J7bijLBb0NZaMVNRnfh1aT470AqLOIIuJJgmgtygNHE/basesystem-11-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/basesystem@11-13.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/basesystem",
    "versionInfo" : "11-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bash-5.1.8-9.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015\nCopyright 1991 Chester Ramey\nCopyright 2003 Eelco Lempsink <eelcolempsink@gmx.net> 2011 Raphael Droz <raphael.droz+floss@gmail.com>\nCopyright 1988-2020 Free Software Foundation, Inc\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2020 Radical Eye Software\nCopyright 2011 The Pragmatic Programmers, LLC\nCopyright 2006 Yann Rouillard <yann@opencsw.org>\nCopyright 1995-2014 by Chester Ramey\nCopyright 1989-2020 by the Free Software Foundation, Inc\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) 2001 Chester Ramey\nCopyright (c) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004 Free Software Foundation, Inc\nCopyright (c) 1991,92,94,95,96,97,98,99,2000,2001 Free Software Foundation, Inc\nCopyright (c) 2004 Free Software Foundation, Inc. Petri Jooste <rkwjpj@puk.ac.za> , 2004\nCopyright (c) 2001 Free Software Foundation, Inc. Toomas Soome <Toomas.Soome@microlink.ee> , 2006\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Ban Quan Suo\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Hak Cipta\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Telif Hakki\nCopyright (c) 2020 Free Software Foundation, Inc msgstr Zhu Zuo Quan Suo\nCopyright (c) Ian Macdonald <ian@caliban.org>\nCopyright (c) 1999 Jeff Solomon\nCopyright (c) 2002 Josip Rodin\nCopyright (c) 2003 Julian Gilbey\nCopyright (c) 1998 Richard Braakman\nCopyright (c) 2002, Richard S. Smith\nCopyright (c) 2002-2008 Rocky Bernstein for Free Software Foundation, Inc\nCopyright (c) 2004 Servilio Afre Puentes <servilio@gmail.com>\nCopyright (c) 1992 Simon Marshall\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2001 Vladimir Volovich <vvv@vsu.ru>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2003 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1989-2020 by the Free Software Foundation, Inc\nCopyright (c) 2018 ce Free Software Foundation\nCopyright <http://www.ams.org>\nEric Sanchis (eric.sanchis@iut-rodez.fr), 2012\nPortions Copyright (c) 1993 by Digital Equipment Corporation\n(c) 2025\n(c) 2009-2016, Bash Completion\n(c) 2006 Free Software Foundation, Inc\n(c) ISLETTER (c) DIGIT (c)\n(c) 2012 Ozgur Yazilim Vakfi\n(c) 2012 Zaduzhbina\n(c) 2009 Zi\n(c) m(harac-)630 1979\n(c) nam 2009\ncopyright 2002 by Josip Rodin\ncopyright 2003 by Julian Gilbey <jdg @debian.org>\ncopyright 1998 by Richard Braakman",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/bash-5.1.8-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Fpr99DGPXS3ioIoNdx-f2Dd1W_zCfhzFvhuIQ-IsANk/bash-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bash@5.1.8-9.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/bash",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bash",
    "versionInfo" : "5.1.8-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-bzip2-libs-1.0.8-10.el9-5-arch-x86-64",
    "copyrightText" : "Copyright (c) 1996-2019 Julian Seward <jseward@acm.org>\nCopyright (c) 1996-2019 by Julian Seward\ncopyright (c) 1996-2019 Julian R Seward\ncopyright (c) Julian Seward",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/bzip2-libs-1.0.8-10.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/bzip2-libs@1.0.8-10.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A8MbGyjsaQzc-ZxUqA3w8rElvVB-e_qz_YDBdtseLfk/bzip2-~-10.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.bzip.org/",
    "licenseConcluded" : "(BSD-3-Clause AND bzip2-1.0.6)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/bzip2-libs",
    "versionInfo" : "1.0.8-10.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ca-certificates-2024.2.69-v8.0.303-91.4.el9-4-arch-noarch",
    "copyrightText" : "Autorit C3 (c) Racine\nCopyright (c) 2013 Kai Engert <kaie@redhat.com>\nCopyright (c) 1997 Microsoft\nCopyright (c) 1997 Microsoft Corp.\nCopyright (c) 1997 Microsoft Corp. Not Valid\nCopyright (c) 1997 Microsoft Corp. Serial\nCopyright (c) 2005, OU OISTE Foundation\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 2009 Philipp Kern <pkern@debian.org>\nCopyright (c) 2013 Red Hat, Inc.\n(c) 2006 Entrust, Inc\n(c) 2006 Entrust, Inc, CN Entrust Root Certification\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) 1999 Entrust.net Limited, CN Entrust.net Certification\n(c) 2007 GeoTrust Inc.\n(c) Racine Validity Not\n(c) 1999 VeriSign, Inc.\n(c) 2006 thawte, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/ca-certificates-2024.2.69_v8.0.303-91.4.el9_4.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ca-certificates@2024.2.69_v8.0.303-91.4.el9_4?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AO8EAW3-1_d3DBZsWXtT2Wg8uCqH1O2jYx_ikHnL4-0/ca-certificates-~_v~-~.el9_4.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://fedoraproject.org/wiki/CA-Certificates",
    "licenseConcluded" : "(MIT AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ca-certificates",
    "versionInfo" : "2024.2.69_v8.0.303-91.4.el9_4"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-cdi-api-2.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright 2019 Eclipse Foundation\nCopyright 2017-2019 Red Hat, Inc.\nCopyright 2018, Red Hat, Inc., and individual contributors ~ by the @authors\nCopyright 2008, Red Hat Middleware LLC, and individual contributors by the @authors\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) \"Eclipse Foundation, Inc.\nCopyright (c) Eclipse Foundation, Inc.\n\nAuthors: Antoine Sabot-Durand; Clint Popetz; Dan Allen; David Allen; Eclipse Foundation; Eclipse Foundation, Inc.; Gavin King; John Ament; John D. Ament; Jozef Hartinger; Lincoln Baxter, III; Mark Paluch; Marko Luksa; Martin Kouba; Nicklas Karlsson; Pete Muir; Red Hat Middleware LLC, and individual contributors by the @authors; Red Hat, Inc.; Red Hat, Inc., and individual contributors by the @authors; Red Hat, Inc., and individual contributors ~ by the @authors; Shane Bryzak; Stuart Douglas; THE ECLIPSE FOUNDATION",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/c/cdi-api-2.0.2-7.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/cdi-api@2.0.2-7.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OdFVVgxJiYmW_PsKQWvygxfWLeM0QntEoJSGlEQTIaw/cdi-api-~-7.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/cdi",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/cdi-api",
    "versionInfo" : "2.0.2-7.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-copy-jdk-configs-4.0-3.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2015 Red Hat inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/c/copy-jdk-configs-4.0-3.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/copy-jdk-configs@4.0-3.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uEN3n1yWNPuqOz8fpesX7jd63ijW2B9t3ka5RuSLsYA/copy-jdk-configs-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pagure.io/copy_jdk_configs",
    "licenseConcluded" : "(BSD-3-Clause AND BSD-4.3TAHOE)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/copy-jdk-configs",
    "versionInfo" : "4.0-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-coreutils-single-8.32-39.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright 1991, 99 Free Software Foundation, Inc.\nCopyright 87, 1991, 1992 Free Software Foundation, Inc.\nCopyright 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End More\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\nCopyright (c) 1990-2005, 2007-2009 Acme, Inc.\nCopyright (c) 2001 Anthony Towns <aj@azure.humbug.org.au>\nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright (c) 89 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2020 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1996, 2001, 2002 Free Software Foundation, Inc. Bang Jun-Young <bangjy@nownuri.nowcom.co.kr> , 1996-1997. Changwoo Ryu <cwryu@debian.org> , 2001-2002\nCopyright (c) 1990-1993, 2009-2020 Free Software Foundation, Inc. Francois Pinard <pinard@iro.umontreal.ca> , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2018\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson <iwj10@cus.cam.ac.uk>\nCopyright (c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\nRafal Maszkowski <rzm@icm.edu.pl> 1996-2001, 2003-2020\n(c) 1999 Free Software Foundation, Inc\n(c) TRANSLATORS Translate (c)\nportions copyright (c) 2007 Cluster",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/coreutils-single-8.32-39.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/coreutils-single@8.32-39.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pix44rZJzA873-cuIYwGu91VxP_pf3nicUxKmy4nwgk/coreutils-~-39.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/coreutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/coreutils-single",
    "versionInfo" : "8.32-39.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-crypto-policies-scripts-20250128-1.git5269e22.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2019 Red Hat, Inc.\nCopyright (c) 2019 Tomas Mraz <tmraz@fedoraproject.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/crypto-policies-scripts-20250128-1.git5269e22.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/crypto-policies-scripts@20250128-1.git5269e22.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PUWjXHSea9UJvNe8bo2IWSOmlpo14FP8WLvCihR7rwg/crypto-policies-20250128-1.git5269e22.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/redhat-crypto/fedora-crypto-policies",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/crypto-policies-scripts",
    "versionInfo" : "20250128-1.git5269e22.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-crypto-policies-20250128-1.git5269e22.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2014-2021 Red Hat, Inc.\nCopyright (c) 2019 Tomas Mraz <tmraz@fedoraproject.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/crypto-policies-20250128-1.git5269e22.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/crypto-policies@20250128-1.git5269e22.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PUWjXHSea9UJvNe8bo2IWSOmlpo14FP8WLvCihR7rwg/crypto-policies-20250128-1.git5269e22.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gitlab.com/redhat-crypto/fedora-crypto-policies",
    "licenseConcluded" : "LGPL-2.1-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/crypto-policies",
    "versionInfo" : "20250128-1.git5269e22.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-cups-libs-2.3.3op2-33.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1999 Aladdin Enterprises\nCopyright (c) 2007-2019 by Apple Inc.\nCopyright (c) 1997-2007 by Easy Software\nCopyright (c) 2020-2021 by Michael R Sweet\ncopyright 2006 by Jelmer Vernooij",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/cups-libs-2.3.3op2-33.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/cups-libs@2.3.3op2-33.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zrbI5FH9xsQJx-AzYep_iUprZX0nR_hsWD5j6SHDXd8/cups-~op2-33.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.cups.org/",
    "licenseConcluded" : "(Zlib AND LGPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/cups-libs",
    "versionInfo" : "2.3.3op2-33.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-curl-minimal-7.76.1-31.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2009 - 2020, John Malmberg\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2014, Bill Nagel <wnagel@tycoint.com> , Exacq Technologies\nCopyright (c) 2019, Bjorn Stenberg, <bjorn@haxx.se>\nCopyright (c) 2001-2004 Damien Miller <djm@openbsd.org>\nCopyright (c) 1998-2016 Daniel Stenberg\nCopyright (c) 1998 - 2021, Daniel Stenberg, <daniel@haxx.se>\nCopyright (c) 1996 - 2021, Daniel Stenberg, <daniel@haxx.se> , and many contributors\nCopyright (c) 2000 - 2020 David Odin\nCopyright (c) 2006 - 2020, David Shaw <dshaw@jabberwocky.com>\nCopyright (c) 2001 - 2020, Eric Lavigne\nCopyright (c) 2017, Florin Petriuc, <petriuc.florin@gmail.com>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2003 - 2021, Gisle Vanem <gvanem@yahoo.no>\nCopyright (c) 2004 - 2014, Guenter Knauf\nCopyright (c) 2010, Hoi-Ho Chan, <hoiho.chan@gmail.com>\nCopyright (c) 2010, Howard Chu, <hyc@highlandsun.com>\nCopyright (c) 2010, Howard Chu, <hyc@openldap.org>\nCopyright (c) 1996-2019 Internet Software Consortium\nCopyright (c) 2020 - 2021, Jacob Hoffman-Andrews, <github@hoffman-andrews.com>\nCopyright (c) 2015, Jay Satiro, <raysatiro@yahoo.com>\nCopyright (c) 2018 - 2020 Jeroen Ooms <jeroenooms@gmail.com>\nCopyright (c) 2011 - 2020, Jim Hollinger\nCopyright (c) 2008 Kaveh Ghazi <ghazi@caip.rutgers.edu>\nCopyright (c) 1998, 1999 Kungliga Tekniska Hogskolan\nCopyright (c) 1995, 1996, 1997, 1998, 1999 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2012 - 2014, Linus Nielsen Feltzing, <linus@haxx.se>\nCopyright (c) 2012, Marc Hoersken, <info@marc-hoersken.de>\nCopyright (c) 2012, Mark Salisbury, <mark.salisbury@hp.com>\nCopyright (c) 2009, Markus Moeller, <markus_moeller@compuserve.com>\nCopyright (c) 2019 - 2020, Michael Forney, <mforney@mforney.org>\nCopyright (c) 2012 - 2014, Nick Zitzmann, <nickzman@gmail.com>\nCopyright (c) 2017 - 2021 Red Hat, Inc.\nCopyright (c) 2017 Reini Urban <rurban@cpan.org>\nCopyright (c) 2020 - 2021, Simon Josefsson, <simon@josefsson.org>\nCopyright (c) 2003 - 2019 Simtec Electronics\nCopyright (c) 2012 - 2020, Steve Holme, <steve_holme@hotmail.com>\nCopyright (c) 2003 - 2020 The OpenEvidence Project\nCopyright (c) 1994 X Consortium\nCopyright (c) 2017 - 2018, Yiming Jing, <jingyiming@baidu.com>\nCopyright (c) 1996 - 2020 by Internet Software Consortium\nCopyright (c) 2006-2015 wolfSSL Inc.\ncopyright by the original\n\nAuthors: $year, Daniel Stenberg; Alexander Peslyak; Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Almroth; Andrew Lambert; Andrey Cherezov; Bill Nagel , Exacq Technologies; Bjorn Stenberg; Bruno de Carvalho; Casey O'Donnell; Chris Double; Christophe Espern; Clifford Wolf; Cris Bailiff and Balint Szilakszi; Damien Miller; Dan Wood; Daniel Stenberg; Daniel Stenberg, , and many contributors; Danil Osipchuk; David Odin; David Shaw; David Strauss; David Szafranski; Eiffel Software; Eric Lavigne; Eric Young (eay@cryptsoft.com); Florin Petriuc; Fran,cois Pinard; Free Software Foundation, Inc.; Galois, Inc; Gary V. Vaughan; Gisle Vanem; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guenter Knauf; Hoi-Ho Chan; Howard Chu; Internet Software Consortium; Ishan SinghLevett; Jacob Hoffman-Andrews; Jan Schaumann; Jay Satiro; Jean-Philippe Barrette-LaPierre; Jeff Pohlmeyer; Jeffrey Phillips; Jeffrey Pohlmeyer; Jeremy Brown; Jeroen Ooms; Jim Hollinger; John Malmberg; Jud Bishop; Kaveh Ghazi; Kenneth Bogert; Kungliga Tekniska Hogskolan; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lars Nilsson; Liam Healy; Linus Nielsen Feltzing; Marc Hoersken; Mark Salisbury; Markus Moeller; Michael Forney; Michael L. Gran; Mikhail Merkuryev; Nick Zitzmann; Nikos Mavrogiannopoulos, Tomas Mraz, Stanislav Zidek, Robert Kolcun, Andreas Schneider; Paul Howe; Paul Querna; Paul Vixie; Peter Sylvester, Jean-Paul Merlin; Peter Verhas; Ray Smith; Red Hat, Inc.; Reini Urban; Richard Atterer; Rob Crittenden (rcritten@redhat.com); Roland Krikava; Ross Bamford; Scott James Remnant; Simon Josefsson; Simtec Electronics; Stephen Nestinger and Jonathan Rogado; Sterling Hughes; Steve Holme; The OpenEvidence Project; Tim Hudson (tjh@cryptsoft.com); Tom Tromey <tromey@cygnus.com>; Viktor Szakats; Vincent Sanders <vince@kyllikki.org>; X Consortium; Yiming Jing; a community; the OpenSSL Project; the original; wolfSSL Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/curl-minimal-7.76.1-31.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/j7ldn8lpWdBaJSt41m_cf-hSIMGbwBl-EpN1PaBuivY/curl-~-31.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/curl-minimal@7.76.1-31.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://curl.se/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/curl-minimal",
    "versionInfo" : "7.76.1-31.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-cyrus-sasl-lib-2.1.27-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT Pluggable Authentication\nCOPYRIGHT SYNOPSIS Authenticate\nCOPYRIGHT SYNOPSIS Proxy\nCOPYRIGHT 1993-2016, The Cyrus Team\nCopyright CMU Group\nCopyright 1998, 1999 Carnegie Mellon University\nCopyright 1992-2015 Free Software Foundation, Inc.\nCopyright 1997-2001 Messaging Direct Ltd.\nCopyright 1988, Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright 2016 The OpenSSL Project Authors\nCopyright 1998 by Carnegie Mellon University\nCopyright 1995 by Cygnus\nCopyright 2015 by Nic Bernstein <nic@onlight.com>\nCopyright 1993 by OpenVision Technologies, Inc.\nCopyright 1985, 1986, 1987, 1988 by the Massachusetts Institute of Technology\nCopyright 2007-2013 by the Sphinx team\nCopyright 1987 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1998-2003 Carnegie Mellon University\nCopyright (c) 2009 Dean Povey <povey@wedgetail.com>\nCopyright (c) 1997, Eric Young\nCopyright (c) 1995-1997 Eric Young (eay@mincom.oz.au)\nCopyright (c) 2000 Fabian Knittel\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2002-2007 Howard Chu\nCopyright (c) 2002-2002 Igor Brezac\nCopyright (c) 2010, JANET(UK)\nCopyright (c) 2003 Jeremy Rumpf\nCopyright (c) 1995, 1996, 1997 Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1997, 1998 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1995 Mark Murray\nCopyright (c) 1997 Messaging Direct Ltd.\nCopyright (c) Microsoft Corporation\nCopyright (c) 2011, PADL Software Pty Ltd.\nCopyright (c) 2008 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 2005 Pyx Engineering AG\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 1996 - 1998 Royal Institute of Technology\nCopyright (c) 2013 Sebastian Pipping <sebastian@pipping.org>\nCopyright (c) Simo Sorce <simo@redhat.com>\nCopyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996 by Internet Software Consortium\nCopyright (c) 1986 by Sun Microsystems, Inc.\nCopyright (c) 1998 by the FundsXpress, INC.\nCopyright (c) 1989 by the Massachusetts Institute of Technology\nPortions Copyright (c) 2003 Jeremy Rumpf jrumpf@heavyload.net\n(c) Copyright 1993-2016, The Cyrus Team\n(c) Copyright 1992,95 by Cornell University\n(c) Copyright 1994,1995 by Cornell University\n(c) Copyright 1994,95 by Project Mandarin Inc.\ncopyright Copywrite 2015\ncopyright MIT, Cygnus Support, OpenVision, Oracle\ncopyright u'1993-2016, The Cyrus Team\nholder is Tim Hudson (tjh@mincom.oz.au)\n\nAuthors: Aaron Wohl <n3liw+@andrew.cmu.edu>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Melnikov <Alexey.Melnikov@isode.com>; Andreas Hasenack <andreas@conectiva.com.br>; Bjorn Gronvall <bg@sics.se>; CMU Group; Carnegie Mellon University; Chris Newman <chris.newman@sun.com>; Chris Newman Removal; Computing Services; Computing Services at Carnegie Mellon University (http://www.cmu.edu/computing/); Copywrite; Cornell University; Cygnus; Dana How <how@isl.stanford.edu>; Dann Frazier <dannf@debian.org>; Dave Cridland <dave.cridland@isode.com>; Dave Eckhardt <davide+receptionist@cs.cmu.edu>; Dean Povey; Eric Young; Eric Young (eay@mincom.oz.au); Fabian Knittel; Fabian Knittel <fknittel@gmx.de>; Fran,cois Pinard; Free Software Foundation, Inc.; G. R. Blair; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hajimu UMEMOTO <ume@mahoroba.org>; Howard Chu; Igor Brezac; Igor Brezac <igor@ipass.net>; Internet Software Consortium; JANET(UK); Jeremy Rumpf; Jeremy Rumpf <jrumpf@heavyload.net>; Jeremy Rumpf jrumpf@heavyload.net; Joe Ammann <joe@pyx.ch>; Joseph D. Touch <touch@isi.edu>; Jrgen Karlsson; KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>; Ken Hornstein <kenh@cmf.nrl.navy.mil>; Kungliga Tekniska Hgskolan (Royal Institute of Technology, Stockholm, Sweden); Kungliga Tekniska Hgskolan and its contributors; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Kungliga Tekniska Hogskolan and its contributors; Larry Rosenbaum <lmr@ornl.gov>; Leena Heino <Leena.Heino@uta.fi>; Leif Johansson <leifj@matematik.su.se>; Lyndon Nerenberg of Messaging Direct Inc.; MIT, Cygnus Support, OpenVision, Oracle; Mark Murray; Mark Murray <mark@grondar.za>; Mei-Hui Su <mei@ISI.EDU>; Messaging Direct Ltd.; Michael-John Turner <mj@debian.org>; Microsoft Corporation; Microsoft. It's; Mike_Spreitzer.PARC@xerox.com; Nathan Kinder <nkinder@redhat.com>; Nic Bernstein; Nic Bernstein <nic@onlight.com>; Olaf Kirch <okir@monad.swb.de>; OpenVision Technologies, Inc.; PADL Software Pty Ltd.; Paolo Bonzini; Per Bothner; Pluggable Authentication; Project Mandarin Inc.; Pyx Engineering AG; RSA Data Security, Inc.; Rainer Schoepf <schoepf@uni-mainz.de>; Roberto C. Sanchez <roberto@connexer.com> , +for the Debian project; Royal Institute of Technology; SYNOPSIS Authenticate; SYNOPSIS Proxy; Sam Hocevar <sam@zoy.org>; Scott James Remnant; Sebastian Pipping; Sergey Ilinykh; Simo Sorce; Simon Wilkinson <simon@sxw.org.uk>; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems, Inc.; The Cyrus Team; The OpenSSL Project Authors; The Regents of the University of California; Tim Hudson; Tim Hudson (tjh@mincom.oz.au); Tim Martin; Tim Martin <tmartin@andrew.cmu.edu>; Tom Tromey <tromey@cygnus.com>; X Consortium; baggins@pld-linux.org; brennan@coco.cchs.su.oz.AU; dannf@debian.org; info. Then; jsmith@example.org; mbanck@debian.org; n3liw+@cmu.edu; the FundsXpress, INC.; the Internet Engineering Task Force (IETF); the Kungliga Tekniska Hgskolan and its contributors; the Massachusetts Institute of Technology; the Sphinx team; the Student Information Processing Board of the Massachusetts Institute of Technology; the University of California, Berkeley and its contributors; u'1993-2016, The Cyrus Team; witr@rwwa.COM",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/cyrus-sasl-lib-2.1.27-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FpOrRtuZvYbGd0kya8pYw3Iz6lbiHK2c7ejTJkp-7T4/cyrus-sasl-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cyrusimap.org/sasl/",
    "licenseConcluded" : "BSD-Attribution-HPND-disclaimer",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/cyrus-sasl-lib",
    "versionInfo" : "2.1.27-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-dbus-libs-1.12.20-8.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2003-2004 Lawrence E. Rosen\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/d/dbus-libs-1.12.20-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jeqMAECNUJB6FuE-X1EZT5XsF-r1XOXmV8PSerVdxKI/dbus-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/dbus-libs@1.12.20-8.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.freedesktop.org/Software/dbus/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/dbus-libs",
    "versionInfo" : "1.12.20-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-dejavu-sans-fonts-2.37-18.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2003 by Bitstream, Inc.\nCopyright (c) 2006 by Tavmjong Bah\n(c) American Mathematical Society\n(c) 2004-2016 DejaVu fonts team\n(c) 2006-2008 Nicolas Mailhot at laposte.net\n(c) 2004 Stepan Roh\n(c) Tavmjong Bah\n(c) Tavmjung Bah\n(c) 2003 by Bitstream, Inc.\n(c) 2006 by Tavmjong Bah",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/d/dejavu-sans-fonts-2.37-18.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/dejavu-sans-fonts@2.37-18.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uUH4a05XZpLV3vzMwitlhMXqikKQTvaga-lxHekfOj0/dejavu-fonts-~-18.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://dejavu-fonts.github.io/",
    "licenseConcluded" : "(Bitstream-Vera AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/dejavu-sans-fonts",
    "versionInfo" : "2.37-18.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-dnf-data-4.14.0-25.el9-arch-noarch",
    "copyrightText" : "COPR group\nCOPYRIGHT 2012-2025, Red Hat\nCopyright 2003 Duke University\nCopyright 2013 (c) Elad Alfassa <elad@fedoraproject.org>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright 2014-2015 (c) Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 2009, 2012-2018 Red Hat, Inc.\nCopyright (c) 1999-2002 Red Hat, Inc. Distributed\nCopyright (c) 2013-2014 Red Hat, Inc. Terminal\nParts Copyright 2007 Red Hat, Inc\ncopr https://dnf-plugins-core.readthedocs.io/en/latest/copr.html\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/d/dnf-data-4.14.0-25.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/dnf-data@4.14.0-25.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sZ1m9uLNa2yyrUlJ22yj5Ntl8syfzqgme1bW5CRtObc/dnf-~-25.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/dnf",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/dnf-data",
    "versionInfo" : "4.14.0-25.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-expat-2.5.0-5.el9-6-arch-x86-64",
    "copyrightText" : "Copyright 2001 Scott Bronson\nCopyright (c) 2001-2022 Expat maintainers\nCopyright (c) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/e/expat-2.5.0-5.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/f8BeTUs3LNM5rrEpw87cLcWY2900DjF5uccEoX16I4A/expat-~-5.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://libexpat.github.io/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/expat",
    "versionInfo" : "2.5.0-5.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-file-libs-5.39-16.el9-arch-x86-64",
    "copyrightText" : "Copr. Self-extracting PKZIP\nCopr not Corp\nCopyright 1992-2019 Free Software Foundation, Inc\nCopyright Genus Microprogramming\nCopyright 1989-1990 PKWARE Inc. Self-extracting PKZIP\nCopyright 1995-2018 by GARMIN Corporation. or http://www.openstreetmap.org\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 1984,1998\nCopyright (c) 2018 Alois Schloegl <alois.schloegl@gmail.com>\nCopyright (c) 1984,1998 Caldera Inc. , DR-DOS\nCopyright (c) Christos Zoulas 2003\nCopyright (c) 2002-2005 David TAILLANDIER\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc\nCopyright (c) Ian F. Darwin 1986, 1987, 1989, 1990, 1991, 1992, 1994, 1995\nCopyright (c) Ian F. Darwin, Toronto, Canada, 1986-1999\nCopyright (c) 1996 Ignatios Souvatzis\nCopyright (c) 2000 The NetBSD Foundation, Inc\nCopyright (c) 1990, 1993 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 2003 by Andrew Tridgell\nCopyright (c) 2001 by Martin Pool\n(c) 1993-2004 Gilles Vollant\n(c) STEPANYUK ARS-Sfx",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/file-libs-5.39-16.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/file-libs@5.39-16.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_aSdJ0gq3DSqKqtSm_LSeg0KPDaUk3rJbRJNJjifBLM/file-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.darwinsys.com/file/",
    "licenseConcluded" : "(BSD-4-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-2-Clause-Darwin)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/file-libs",
    "versionInfo" : "5.39-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-filesystem-3.16-5.el9-arch-x86-64",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/filesystem-3.16-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/filesystem@3.16-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J8lSYqHdEDNmyY9DireIzFMhQWTzGUpEIrFqHw7hGFM/filesystem-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pagure.io/filesystem",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/filesystem",
    "versionInfo" : "3.16-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-findutils-4.8.0-7.el9-arch-x86-64-epoch-1",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright 1991, 99 Free Software Foundation, Inc.\nCopyright 87, 1991, 1992 Free Software Foundation, Inc.\nCopyright 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End More\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\nCopyright (c) 1990-2005, 2007-2009 Acme, Inc.\nCopyright (c) 1996-2021 Free Software Foundation, Inc.\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright (c) 89 Free Software Foundation, Inc.\nCopyright (c) 2005 Free Software Foundation, Inc. Acest\nCopyright (c) 2003 Free Software Foundation, Inc. Ales Nyakhaychyk <nab@mail.by> , 2003\nCopyright (c) 1996 Free Software Foundation, Inc. Bang Jun-Young <bangjy@nownuri.nowcom.co.kr> , 1996\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Jordi Mallach <jordi@gnu.org> , 2002, 2003, 2004, 2005\nCopyright (c) 2004 Free Software Foundation, Inc. K.Birabwa <kompyuta@kizito.freeuk.com> , 2004\nCopyright (c) 2003 Free Software Foundation, Inc. Kevin Patrick Scannell <scannell@SLU.EDU> , 2003, 2004, 2005, 2006, 2007, 2008\nCopyright (c) 2004 Free Software Foundation, Inc. Lefteris Dimitroulakis <edimitro@tee.gr> , 2004, 2005. Lefteris Dimitroulakis <ledimitro@gmail.com> , 2013, 2014, 2016\nCopyright (c) 2003 Free Software Foundation, Inc. Nik Ramadhan Nik Idris <toknik@yahoo.com> , 2003\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2015\nCopyright (c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\n(c) 2006 Free Software Foundation, Inc.\n(c) Internal macro Tests",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/findutils-4.8.0-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/findutils@4.8.0-7.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sEdUH_tV8fRrDpBCv34ZPSDS-7OX9UZ2zyHsOnA6BCg/findutils-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/findutils/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/findutils",
    "versionInfo" : "4.8.0-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-fontconfig-2.14.0-2.el9-1-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright Xi 2010 Behdad Esfahbod\nCopyright Xi 2006 Keith Packard\nCopyright (c) 2014 Abel Cheung\nCopyright (c) 2011 Akira TAGOH\nCopyright (c) 2008 Behdad Esfahbod\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 2008 Danilo Segan\nCopyright (c) 2006 Danis Jacquerye\nCopyright (c) 2007 Dwayne Bailey\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2011,2012,2013 Google, Inc.\nCopyright (c) 2000,2001,2002,2003,2004,2006,2007 Keith Packard\nCopyright (c) 2008 Neskie Manuel\nCopyright (c) 2012 Parag Nemade\nCopyright (c) 2012 Parag Nemade, Pravin Satpute <psatpute@redhat.com>\nCopyright (c) 2005 Patrick Lam\nCopyright (c) 2012 Pravin Satpute <psatpute@redhat.com>\nCopyright (c) 2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020 Red Hat, Inc.\nCopyright (c) 2008 Red Hat, Inc. Red Hat\nCopyright (c) 2009 Resat SABIQ\nCopyright (c) 2010 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 1999 Richard Henderson <rth@redhat.com>\nCopyright (c) 2009 Roozbeh Pournader\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2005 Sharif FarsiWeb, Inc. <license@farsiweb.info>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2019 Tim-Philipp Muller\nCopyright (c) 2000 Tuomas J. Lukka\nCopyright (c) 2010 UKIJ - Uyghur Computer Science Association (http://www.ukij.org/) Ubuntu Uyghur Translation Team (https://launchpad.net/~ubuntu-l10n-ug)\nCopyright (c) 1994 X Consortium\nCopyright (c) YEAR Fontconfig Author(s)\nCopyright (c) 2002-2003 by Juliusz Chroboczek\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\n(c) 2019 Unicode(r), Inc.\n\nAuthors: Abel Cheung; Akira TAGOH; Akira TAGOH <akira@tagoh.org>; Akira TAGOH <tagoh@redhat.com>; Alan Coopersmith <alan.coopersmith@oracle.com>; Alan Hourihane <alanh@fairlite.demon.co.uk>; Alban Browaeys <alban.browaeys@gmail.com>; Alexander Kanavin <alex.kanavin@gmail.com>; Alexander Larsson; Alexander Larsson <alexl@redhat.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Khoroshilov <khoroshilov@linuxtesting.org>; Bastien Nocera <hadess@hadess.net>; Behdad Esfahbod; Behdad Esfahbod <behdad@behdad.org>; Behdad Esfahbod <freedesktop@behdad.org>; Behdad Esfahbod Google; Ben Wagner <bungeman@chromium.org>; Benjamin Close <Benjamin.Close@clearchain.com>; Brad Hards <bradh@frogmouth.net>; Carl Worth <cworth@cworth.org>; Carlo Bramini <carlo.bramix@libero.it>; Changwoo Ryu <cwryu@debian.org>; Chris Lamb <chris@chris-lamb.co.uk>; Chris McDonald <cjmcdonald@chromium.org>; Chris Wilson; Chris Wilson <chris@chris-wilson.co.uk>; Christoph J. Thompson <cjsthompson@gmail.com>; Colin Plumb; Colin Walters <walters@verbum.org>; Dan Nicholson <dbn.lists@gmail.com>; Daniel Richard G.; Danilo Segan; Danis Jacquerye; David Dawes <dawes@xfree86.org>; David Kaspar; David Turner <david@freetype.org>; Dennis Schridde <lindevel@gmx.net>; Dwayne Bailey; Dwayne Bailey <dwayne@translate.org.za>; Egbert Eich <eich@suse.de>; Emil Soleyman-Zomalan <emil@nishra.com>; Eric Anholt <eric@anholt.net>; Erik de Castro Lopo <erikd@mega-nerd.com>; Evgeniy Stepanov <eugeni.stepanov@gmail.com>; Florent Rougon <f.rougon@free.fr>; Florian Mullner <fmuellner@gnome.org>; Fontconfig Author(s); Fran,cois Pinard; Frederic Crozat <fcrozat@mandriva.com>; Frederic Crozat <fcrozat@suse.com>; Free Software Foundation, Inc.; Gary V. Vaughan; Glen Low <glen.low@pixelglow.com>; Google, Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim <guidod@gmx.de>; Han-Wen Nienhuys <hanwen@xs4all.nl>; Harald Fernengel <harry@kdevelop.org>; Harshula Jayasuriya <harshula@gmail.com>; Helmut Grohne <helmut@subdivi.de>; Hideki Yamane <henrich@iijmio-mail.jp>; Hongbo Zhao <hongbo.zhao@gmail.com>; James Cloos <cloos@lugabout.jhcloos.org>; James Su <suzhe@turbolinux.com.cn>; Jan Alexander Steffens; Jehan <jehan@girinstud.io>; Jeremy Huddleston <jeremyhu@apple.com>; Jeremy Huddleston Sequoia <jeremyhu@apple.com>; Jessica Perry Hekman <jphekman@arborius.net>; Jinkyu Yi <jincreator@naver.com>; Jon TURNEY <jon.turney@dronecode.org.uk>; Josselin Mouette <joss@debian.org>; Juliusz Chroboczek; Juliusz Chroboczek <Juliusz.Chroboczek@pps.jussieu.fr>; Karl Tomlinson <bugs.freedesktop@karlt.net>; Karl Tomlinson <karlt@karlt.net>; Kean Johnston <kean@armory.com>; Keith Packard; Keith Packard <keithp@keithp.com>; Keith Packard <keithp@keithp.com> and Josselin Mouette <joss@debian.org>; Keith Packard <keithp@koto.keithp.com>; Keith Packard <keithp@neko.keithp.com>; Keith Packard keithp@keithp.com; Khem Raj <raj.khem@gmail.com>; MINAMI Hirokazu <minami@mistfall.net>; Manish Singh <yosh@gimp.org>; Marc Aurele La France <tsi@ualberta.edu>; Marius Tolzmann <tolzmann@molgen.mpg.de>; Mark Brand <mabrand@mabrand.nl>; Markus Kuhn <Markus.Kuhn@cl.cam.ac.uk>; Masamichi Hosoda <trueroad@trueroad.jp>; Matthieu Herrb <matthieu.herrb@laas.fr>; Matthieu Herrb <matthieu@herrb.eu>; Michael Haubenwallner <michael.haubenwallner@ssi-schaefer.com>; Mike A. Harris <mharris@redhat.com>; Mike FABIAN <mfabian@suse.de>; Mike Frysinger <vapier@gentoo.org>; Mikhail Gusarov <dottedmag@dottedmag.net>; Neskie Manuel; Neskie Manuel <neskiem@gmail.com>; Nick Alcock <nick.alcock@oracle.com>; Noah Levitt <nlevitt@gmail.com>; Olivier Crete <olivier.crete@collabora.com>; Owen Taylor <otaylor@redhat.com>; Parag Nemade; Parag Nemade <pnemade@redhat.com>; Parag Nemade, Pravin Satpute; Patrick Haller <patrick.haller@haller-consult.de>; Patrick Lam; Patrick Lam <plam@csail.mit.edu>; Patrick Lam <plam@mit.edu>; Peter <pva@gentoo.org>; Peter Breitenlohner <peb@mppmu.mpg.de>; Petr Filipsky <philodej@gmail.com>; Pravin Satpute; Pravin Satpute <pravin.d.s@gmail.com>; Pravin Satpute <psatpute@redhat.com>; Quentin Glidic <sardemff7+git@sardemff7.net>; Rahul Bhalerao <b.rahul.pm@gmail.com>; Red Hat, Inc.; Red Hat, Inc. Red Hat; Resat SABIQ; Reuben Thomas; Richard Henderson; Robert Yang <liezhi.yang@windriver.com>; Roozbeh Pournader; Roozbeh Pournader <roozbeh@farsiweb.info>; Roozbeh Pournader <roozbeh@gmail.com>; Ross Burton <ross.burton@intel.com>; Ross Burton <ross@burtonini.com>; Ruslan Izhbulatov <lrn1986@gmail.com>; Ryan Schmidt <freedesktop-2008@ryandesign.com>; Sayamindu Dasgupta <sayamindu@gmail.com>; Scott James Remnant; Sebastian Freundt <hroptatyr@fresse.org>; Serge van den Boom <svdb+freedesktop.org@stack.nl>; Sharif FarsiWeb, Inc.; Stephan Kulow <coolo@novell.com>; Steven G. Johnson; Sylvain Pasche <sylvain.pasche@gmail.com>; Tilman Sauerbeck <tilman@code-monkey.de>; Tim-Philipp Muller; Tobias Stoeckmann <tobias@stoeckmann.org>; Tom Anderson <thomasanderson@chromium.org>; Tom Tromey <tromey@cygnus.com>; Tor Lillqvist <tml@iki.fi>; Torrey Lyons <torrey@mrcla.com>; Tuomas J. Lukka; UKIJ - Uyghur Computer Science Association Ubuntu Uyghur Translation Team; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Unicode(r), Inc.; W. Trevor King <wking@tremily.us>; X Consortium; Xi Behdad Esfahbod; Xi Keith Packard; pborelli@katamail.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/f/fontconfig-2.14.0-2.el9_1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/fontconfig@2.14.0-2.el9_1?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/edyLGj_6_Hp5G6ooxFatSDpLhdwUArfoHfVOMR_bV54/fontconfig-~-2.el9_1.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://fontconfig.org",
    "licenseConcluded" : "(MIT-Modern-Variant AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/fontconfig",
    "versionInfo" : "2.14.0-2.el9_1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-fonts-filesystem-2.0.5-7.el9.1-arch-noarch-epoch-1",
    "copyrightText" : "Copyright (c) 2019 Nicolas Mailhot <nim@fedoraproject.org>\n(c) 2007-2009 Nicolas Mailhot",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/fonts-filesystem-2.0.5-7.el9.1.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KbnjXYH7FwkEMdEzTz309wgVQ3LSNYYurhyx2jGShig/fonts-rpm-macros-~-7.el~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/fonts-filesystem@2.0.5-7.el9.1?arch=noarch&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://docs.fedoraproject.org/en-US/packaging-guidelines/FontsPolicy/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/fonts-filesystem",
    "versionInfo" : "2.0.5-7.el9.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-freetype-2.10.4-10.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2006-2013 Adobe Systems Incorporated\nCopyright 2000 Computing Research Labs, New Mexico State University\nCopyright Dave Gandy 2016\nCopyright 2007 Dmitry Timoshkov\nCopyright 2001-2002, 2011 Francesco Zappa Nardelli\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2003 Huw D M Davies for Codeweavers\nCopyright 1995-2002 Mark Adler\nCopyright 1990, 1994, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2000-2001, 2002 by Francesco Zappa Nardelli\nCopyright 2013 by Google, Inc. Google Author(s) Behdad Esfahbod\nCopyright 2010-2019 by Joel Klinghed\nCopyright 2003 by Masatake YAMATO and Redhat K.K.\nCopyright 2 2016-2020 by Werner Lemberg <wl@gnu.org>\nCopyright 2000 by foobar\nCopyright 2005-2019 by write David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1999-2020\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2009 Francesco Salvestrini <salvestrini@users.sourceforge.net>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 1995-2002 Jean-loup Gailly\nCopyright (c) 1995-2002 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2002 Mark Adler\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2016-2018 Static Jobs LLC\nCopyright (c) 2008 Tim Toolan <toolan@ele.uri.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2004-2020 by Albert\nCopyright (c) 1999-2020 by Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2018-2020 by Armin Hasitzka, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1996-2020 by D. Turner, R.Wilhelm, and W. Lemberg\nCopyright (c) 2007-2020 by David Turner\nCopyright (c) 1996-2020 by David Turner, Robert Wilhelm, Werner Lemberg, and Detlef Wuerkner\nCopyright (c) 1996-2020 by David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner\nCopyright (c) 2004-2020 by David Turner, Robert Wilhelm, Werner Lemberg and George Williams\nCopyright (c) 2008-2020 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2006-2020 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2007-2020 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2020 by Derek Clegg and Michael Toftdal\nCopyright (c) 2000 by Francesco Zappa Nardelli\nCopyright (c) 2005, 2007, 2008, 2013 by George Williams\nCopyright (c) 2013-2020 by Google, Inc.\nCopyright (c) 2010-2020 by Joel Klinghed\nCopyright (c) 1999-2020 by Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1996-2020 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2020 by Masatake YAMATO, Redhat K.K., David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2004-2020 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2001-2020 by Michael Pfeiffer\nCopyright (c) 2018-2020 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2020 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2020 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2002-2020 by Roberto Alameda\nCopyright (c) 1991-2020 by Stichting Mathematisch Centrum, Amsterdam, The Netherlands\nCopyright (c) 1999-2020 by The FreeType Development Team - www.freetype.org\nCopyright (c) 2015-2020 by Werner Lemberg\nCopyright (c) 2005-2020 by Werner Lemberg and Detlef Wurkner\nCopyright (c) 1996-2020 by suzuki toshiya, D. Turner, R.Wilhelm, and W. Lemberg\nCopyright (c) 2006-2020 by suzuki toshiya, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2004-2020 by suzuki toshiya, Masatake YAMATO, Red\nCopyright (c) 2004-2020 by suzuki toshiya, Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2000-2015 foobar\nCopyright 2020 https://www.freetype.org/license.html' The FreeType Project\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyrighted by the Free Software Foundation\n\nAuthors: $! David Turner, Robert Wilhelm, and Werner Lemberg; <luoy.li@gmail.com>; <muktha.narayan@wipro.com>; <octoploid@yandex.com>; <ychen1392001@yahoo.com.cn>; Adam Twardoch <adam@fontlab.com>; Adobe Systems Incorporated; Akaki Razmadze <razmadzekoko@gmail.com>; Akiem Helmling <akiem@underware.nl>; Akira Kakuto <kakuto@fuk.kindai.ac.jp>; Alan Coopersmith <alan.coopersmith@oracle.com>; Albert; Albert Astals Cid <aacid@kde.org>; Alexander Hedges <ahedges@student.ethz.ch>; Alexander Peslyak; Alexei Podtelezhnikov <apodtele@gmail.com>; Alexey Kryukov <anagnost@yandex.ru>; Andrey Panov <panov@canopus.iacp.dvo.ru>; Anthony Fok <foka@debian.org>; Antoine Leca; Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg; Armin Hasitzka, David Turner, Robert Wilhelm, and Werner Lemberg; Ben Wagner <bungeman@google.com>; Bob Taylor <Bob.Taylor@monotype.com>; Boris Letocha <b.letocha@gmc.net>; Brad Dunzer <BDunzer@extensis.com>; Celine PILLET <Celine.Pillet@Tagginfo.com>; Chi Nguyen <chint@necsv.com>; Chris Evans <scarybeasts@gmail.com>; Chris Liddell <chris.liddell@artifex.com>; Colin Walters <walters@verbum.org>; Computing Research Labs, New Mexico State University; D. Turner, R.Wilhelm, and W. Lemberg; Dan Liddell <lddll@yahoo.com>; Daniel Glockner <daniel-gl@gmx.net>; Dave Arnold <darnold@adobe.com>; Dave Gandy; David Bevan; David Bevan <dbevan@emtex.com>; David Capello <davidcapello@gmail.com>; David Kastrup <dak@gnu.org>; David Osborn <spam@habitualhiatus.com>; David Sachitano and Lawrence Coopet; David Turner; David Turner <david@freetype.org>; David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner; David Turner, Robert Wilhelm, Werner Lemberg and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Detlef Wuerkner; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; David Wimsey <david@wimsey.us>; Del Merritt <del@alum.mit.edu>; Dennis Felsing <dennis@felsin9.de>; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Detlef Wurkner <TetiSoft@apg.lahn.de>; Dirck Blaskey <listtarget@danbala.com>; Dmitry Timoshkov; Doug Felt <dougfelt@gmail.com>; Francesco Salvestrini; Francesco Zappa Nardelli; Francesco Zappa Nardelli <Francesco.Zappa.Nardelli@ens.fr>; Free Software Foundation Inc.; Free Software Foundation, Inc.; FreeType team; G.W. Lucas <glucas@sonalysts.com>; Gary V. Vaughan; George Williams; George Williams <gww@silcom.com>; Google, Inc.; Google, Inc. Google Author(s) Behdad Esfahbod; Gordon Childs <gchilds@quickcut.com.au>; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Henry Maddocks <maddocks@metservice.com>; Herbert Duerr <duerr@sun.com>; Hin-Tak Leung <htl10@users.sourceforge.net>; Hrant H Papazian <hpapazian@gmail.com>; Huib-Jan Imbens <ft@imbens.nl>; Huw D M Davies for Codeweavers; Ian Britten <britten@caris.com>; Ian Brown <ian.brown@printsoft.de>; Ingmar Sittl <ingmar.sittl@elektrobit.com>; Intel Corporation; Ismail Donmez <ismail@kde.org.tr>; Ivan Nincic <inincic@pdftron.com>; J. Ali Harlow <ali@avrc.city.ac.uk>; Jakub Bogusz <qboosh@pld.org.pl>; James Cloos <cloos@jhcloos.com>; Jason Owen <jason.a.owen@gmail.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jeremy Manson <jeremy.manson@gmail.com>; Jjgod Jiang <gzjjgod@gmail.com>; Joel Klinghed; Johannes Walther <joh_walt@yahoo.de>; John Cary <cary@txcorp.com>; John Emmas <john@creativepost.co.uk>; John Emmas <johne53@tiscali.co.uk>; Johnson Y. Yan <yinsen_yan@foxitsoftware.com>; Jorg Gunnewig <joerg.guennewig@googlemail.com>; Jouk Jansen <joukj@hrem.nano.tudelft.nl>; Just van Rossum; Just van Rossum <just@letterror.com>; Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Karsten Lucke <karsten.luecke@kltf.de>; Keith Packard; Kevin Blenkinsopp <arqon@promode.org>; Khaled Hosny <khaledhosny@eglug.org>; Kirill Tishin <siege@bk.ru>; Knut St. Osmundsen <bird-freetype@anduin.net>; Kostya Serebryany <kcc@google.com>; Krzysztof Kotlenga <pocek@users.sf.net>; Krzysztof Kowalczyk <kkowalczyk@gmail.com>; Marc Schonefeld <marc.schoenefeld@gmx.org>; Marco Wertz <marco.wertz@gmx.de>; Marek Kasik <mkasik@redhat.com>; Mark Adler; Markus Trippelsdorf <markus@trippelsdorf.de>; Martin P.J. Zinser zinser@decus.de; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; Masatake YAMATO, Redhat K.K, David Turner, Robert Wilhelm, and Werner Lemberg; Masatake YAMATO, Redhat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; Mateusz Jurczyk <mjurczyk@google.com>; Michael Pfeiffer; Michal Nowakowski <miszka@limes.com.pl>; Mickey Gabel <mickey@monfort.co.il>; Mikey Anbary <manbary@vizrt.com>; Mojca Miklavec <mojca.miklavec.lists@gmail.com>; Nickolas George <darknova.clan@gmail.com>; Nicolas Rougier <Nicolas.Rougier@inria.fr>; Niels Boldt <nielsboldt@gmail.com>; Nigel Tao <nigeltao@golang.org>; Nikhil Ramakrishnan <ramakrishnan.nikhil@gmail.com>; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; Nikolaus Waxweiler <madigens@gmail.com>; Nikolay Sivov <bunglehead@gmail.com>; Ning Dong <flintning@163.com>; Nis Martensen <nis.martensen@web.de>; Oran Agra <oran@monfort.co.il>; Oran Agra and Mickey Gabel; Patrick Thomas <pthomas505@gmail.com>; Paul Watson <pwatson@redlinepy.com>; Peter Breitenlohner <peb@mppmu.mpg.de>; Peter Weilbacher <mozilla@weilbacher.org>; Rahul Bhalerao; Ralf S. Engelschall <rse@engelschall.com>; Richard COOK <rscook@unicode.org>; Robert Marki <gsmiko@gmail.com>; Roberto Alameda; Roberto Alameda <ojancano@geekmail.de>; Robin Watts <robin.watts@artifex.com>; Roy Tam <roytam@gmail.com>; Sander van der Wal <svdwal@xs4all.nl>; Scott James Remnant; Sean McBride; Sean McBride <sean@rogue-research.com>; Sebastien Leix <s.leix@sdi.fr>; Sender Ghost <lightside@gmx.com>; Shailesh Mistry <shailesh.mistry@hotmail.co.uk>; Shao Yu Zhang <shaozhang@fb.com>; Static Jobs LLC; Stephan T. Lavavej <stl@nuwen.net>; Stephen Fisher <sfisher@SDF.ORG>; Steve Hartwell <shspamsink@comcast.net>; Steve Langasek <vorlon@debian.org>; Stichting Mathematisch Centrum, Amsterdam, The Netherlands; Stuart Gill and Behdad Esfahbod; Sven Neumann sven@gimp.org; Sylvain Beucler <beuc@gnu.org>; Tavis Ormandy <taviso@google.com>; Taylor Holberton <taylorcholberton@gmail.com>; The FreeType Development Team - www.freetype.org; The FreeType Project; The Open Group; Tim Toolan; Titus Nemeth <tn@tntypography.eu>; Tobias Wolf <towolf@gmail.com>; Tom Bishop <wenlin@wenlin.com>; Tony J. Ibbs <tibs@sj.co.uk>; Tony Smith <tony.smith@macro4.com>; Truc Truong <tructv@necsv.com>; Vaibhav Nagarnaik <vnagarnaik@gmail.com>; Victor Stinner <victor.stinner@haypocalc.com>; Werner Lemberg; Werner Lemberg <wl@gnu.org>; Werner Lemberg and Detlef Wurkner; Wojciech Mamrak <wmamrak@gmail.com>; X Consortium; YAMANO-UCHI Hidetoshi <mer@din.or.jp>; YAMATO Masatake and SUZUKI Toshiya; Yu Lei <yulei0@gmail.com>; Zhang Jun Zhi <418092625@qq.com>; chris@dokein.co.uk; community; content David; content FreeType; foobar; gzip. Files; just@letterror.com; just@letterror.com. Heavily Fixed; mpsuzuki, George Williams, and Sean McBride; suyu@cooee.cn; suzuki toshiya, D. Turner, R.Wilhelm, and W. Lemberg; suzuki toshiya, David Turner, Robert Wilhelm, and Werner Lemberg; suzuki toshiya, Masatake YAMATO, Red; suzuki toshiya, Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; suzuki toshiya. On; the Free Software Foundation; the FreeType team; the LilyPond; write David Turner, Robert Wilhelm, and Werner Lemberg",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/f/freetype-2.10.4-10.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/guAdRo221lS8DWXikNqDD1Fin0TpejfXfu7u6nLPx9o/freetype-~-10.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/freetype@2.10.4-10.el9_5?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.freetype.org",
    "licenseConcluded" : "(BSD-3-Clause AND MIT AND GPL-2.0-or-later AND LicenseRef-Public-Domain AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/freetype",
    "versionInfo" : "2.10.4-10.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gawk-5.1.0-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 1989, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2001, 2002, 2003, 2004, 2005, 2007, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020\nCopyright 2012, 2013, 2014, 2018, Free Software Foundation, Inc.\nCopyright (c) 2008 Davide Brini\nCopyright (c) 1989, 1991-2015 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005, 2006, 2007, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1983, 1993 The Regents of the University of California\nCopyright (c) 1989, 1991- d Free Software Foundation\nCopyright (c) 2013, 2017, 2019 the Free Software Foundation, Inc.\n(c) 1997 Cambridge Center",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gawk-5.1.0-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TM9dpWRDnthR16og6Z5jJ1W4-GAoGpz-Qr4XGB4CrD4/gawk-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gawk@5.1.0-6.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/gawk/",
    "licenseConcluded" : "(GPL-3.0-or-later AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gawk",
    "versionInfo" : "5.1.0-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gdbm-libs-1.23-1.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc.\nCopyright 2000-2002, 2007-2008, 2011, 2017-2022 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2011-2022 Free Software Foundation, Inc.\nCopyright (c) 2007, 2011 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2020-2021 Sergey Poznyakoff\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright s Free Software Foundation, Inc",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gdbm-libs-1.23-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QhaipY59p_ceG026IZl_bBHxQjmo5aA4yCxdT-h0zRE/gdbm-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gdbm-libs@1.23-1.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/gdbm/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gdbm-libs",
    "versionInfo" : "1.23-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glib2-2.68.4-16.el9-6.2-arch-x86-64",
    "copyrightText" : "Copyright @ 2006\nCopyright 2001-2003 Andrew Lanoix\nCopyright 2024 Collabora Ltd.\nCopyright 2018 Emmanuele Bassi\nCopyright 2016 Endless Mobile, Inc.\nCopyright 2020 Frederic Martinsons\nCopyright 1991, 92, 95, 96, 97, 98, 99 Free Software Foundation, Inc.\nCopyright 2001 Hans Breuer\nCopyright 2021 Igalia S.L.\nCopyright 2014-2018 Jan-Michael Brummer <jan.brummer@tabos.org>\nCopyright 2015 Lars Uebernickel\nCopyright 2005 Matthias Clasen\nCopyright 2009 Nokia Corporation\nCopyright 1998 Owen Taylor\nCopyright 1998 Owen Taylor and Tor Lillqvist\nCopyright 1995-2011 Peter Mattis, Spencer Kimball, Josh MacDonald, Sebastian Wilhelmi and others\nCopyright 1995-2011 Peter Mattis, Spencer Kimball, Josh MacDonald and others\nCopyright 2019 Red Hat, Inc\nCopyright 2006-2011 Red Hat, Inc. and others\nCopyright 2017 Ruslan Izhbulatov\nCopyright 2015 Ryan Lortie\nCopyright 2007, 2008 Ryan Lortie <desrt@desrt.ca>\nCopyright 1998 Sebastian Wilhelmi University of Karlsruhe\nCopyright 1998 Sebastian Wilhelmi University of Karlsruhe Owen Taylor\nCopyright 1998-2011 Tim Janik, Red Hat, Inc. and others\nCopyright 1998-2011 Tim Janik and others\nCopyright 2000 Tor Lillqvist\nCopyright 1999-2000 Tor Lillqvist and Craig Setera\nCopyright (c) 2001, 02, 03, 05\nCopyright (c) 2001, 02, 03, 05, 07, 10\nCopyright (c) 2002\nCopyright (c) 1995, A.M. Kuchling\nCopyright (c) 2004-2005 Adam Weinberger <adamw@gnome.org>\nCopyright (c) 2005 Alexander Larsson <alexl@redhat.com>\nCopyright (c) 2004 Anders Carlsson <andersca@gnome.org>\nCopyright (c) 2001 Behdad Esfahbod\nCopyright (c) 2009 Benjamin Otte <otte@gnome.org>\nCopyright (c) 2011 Canonical Limited\nCopyright (c) 2005 Canonical Ltd.\nCopyright (c) 2009-2010 Christian Hergert <chris@dronelabs.com>\nCopyright (c) 2010 Christian Kellner\nCopyright (c) 2008 Christian Kellner, Samuel Cormier-Iijima\nCopyright (c) 2010 Christian Persch\nCopyright (c) 2014 Chun-wei Fan\nCopyright (c) 2008 Clemens N. Buss <cebuzz@gmail.com>\nCopyright (c) 2010 Codethink Limited\nCopyright (c) 2012 Colin Walters <walters@verbum.org>\nCopyright (c) 2017 Collabora Inc.\nCopyright (c) 2011 Collabora Ltd.\nCopyright (c) 2012 Collabora Ltd. <http://www.collabora.co.uk/>\nCopyright (c) Croatiann team Translators Denis Lackovic <delacko@fly.srk.fer.hr>\nCopyright (c) 2006 Dave Benson\nCopyright (c) 2006-2008 Diego Petteno <flameeyes@gmail.com>\nCopyright (c) 2011, 2012 Dmitry Matveev <me@dmitrymatveev.co.uk>\nCopyright (c) 2000 Eazel, Inc.\nCopyright (c) 2005-2006 Emmanuele Bassi\nCopyright (c) 2007 Emmanuele Bassi <ebassi@gnome.org>\nCopyright (c) 2010 Emmanuele Bassi <ebassi@linux.intel.com>\nCopyright (c) 2018 Endless Mobile, Inc.\nCopyright (c) 2022 Endless OS Foundation, LLC\nCopyright (c) 2007 Francois Gouget\nCopyright (c) Free Software Foundation, 2002\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1991,92,94,95,96,97,98,99,2000,01,02 Free Software Foundation, Inc.\nCopyright (c) 1992,95-97,99,2000,01,02,04,07 Free Software Foundation, Inc.\nCopyright (c) 2016 Free Software Foundation, Inc. Borislav Aleksandrov <B.Aleksandrov@cnsys.bg> , 2002. Alexander Shopov <ash@kambanaria.org> , 2002, 2005, 2006, 2007, 2008, 2009, 2010, 2011. Alexander Shopov <ash@kambanaria.org> , 2012, 2013, 2015, 2016. Damyan Ivanov <dam+gnome@ktnx.net> , 2010. Krasimir Chonov <mk2616@abv.bg> , 2014\nCopyright (c) 2001-2021 Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001-2005. Daniel Nylander <po@danielnylander.se> , 2006-2012. Sebastian Rasmussen <sebras@gmail.com> , 2014, 2015. Anders Jonsson <anders.jonsson@norsjovallen.se> , 2015, 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2016, 2017, 2018, 2019, 2020, 2021 Free Software Foundation, Inc. Christopher R. Gabriel <cgabriel@pluto.linux.it> 2002. Nota\nCopyright (c) 2001,2002,2003, 2006, 2007, 2008 Free Software Foundation, Inc. Isam Bayazidi <bayazidi@arabeyes.org> , 2001,2002. Arafat Medini <lumina@silverpen.de> , 2003. Djihed Afifi <djihed@gmail.com> , 2006, 2007. Khaled Hosny <khaledhosny@eglug.org> , 2006, 2007, 2008, 2010, 2011, 2012. Anas Afif Emad <anas.e87@gmail.com> , 2008\nCopyright (c) 2001-2003, 2005 Free Software Foundation, Inc. Kjartan Maraas <kmaraas@gnome.org> , 2001-2018. Terance Edward Sola <terance@lyse.net> , 2005. Torstein Adolf Winterseth <kvikende@fsfe.org> , 2010\nCopyright (c) 2009 Free Software Foundation, Inc. Lauri Nurmi <lanurmi@iki.fi> , 2002-2004, Sami Pesonen <sampeson@iki.fi> , 2004-2005. Ilkka Tuohela <hile@iki.fi> , 2005-2009. Timo Jyrinki <timo.jyrinki@iki.fi> , 2008-2010. Harri Pitkanen\nCopyright (c) 2001 - 2010 Free Software Foundation, Inc. Marius Andreiana <mandreiana@yahoo.com> , 2001. Misu Moldovan <dumol@gnome.ro> , 2004 - 2010. Lucian Adrian Grijincu <lucian.grijincu@gmail.com> , 2010, 2011. Lupescu Mircea <mircea.crazy@gmail.com> , 2010. Lupescu Mircea <mircea.crazy@gmail.com> , 2011. Daniel Serbanescu\nCopyright (c) 2001 Free Software Foundation, Inc. Pablo Saratxaga <pablo@walon.org> , 2004\nCopyright (c) 2001, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Proxecto Trasno\nCopyright (c) 2003 Free Software Foundation, Inc. Raphael Finkel <raphael@cs.uky.edu> , 2003\nCopyright (c) 2002, 2004, 2006, 2009 Free Software Foundation, Inc. Simos Xenitellis <simos@hellug.gr> , 2002. Kostas Papadimas <pkst@gmx.net> , 2002. Kostas Papadimas <pkst@gnome.org> , 2004, 2006. Jennie Petoumenou <epetoumenou@gmail.com> , 2009. Fotis Tsamis <ftsamis@gmail.com> , 2009. Michael Kotsarinis <mk73628@gmail.com> , 2011. Dimitris Spingos (Demetres Spiggos) <dmtrs32@gmail.com> , 2012. Dimitris Spingos (Demetres Spiggos) <dmtrs32@gmail.com> , 2012, 2013, 2014, 2015. Efstathios Iosifidis <iosifidis@opensuse.org> , 2015\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006 Free Software Foundation, Inc. Softcatala <info@softcatala.org> , 2001. Jordi Mallach <jordi@sindominio.net> , 2002, 2003, 2004, 2005, 2006. Josep Puigdemont <josep.puigdemont@gmail.com> , 2006. Silvia Miranda <silvia@softcatala.cat> , 2011. Jordi Serratosa <jordis@softcatala.cat> , 2012, 2017. Gil Forcada <gilforcada@guifi.net> , 2008-2013, 2013, 2014, 2016. Jordi Mas\nCopyright (c) 1995 Free Software Foundation, Inc. Ulrich Drepper <drepper@gnu.ai.mit.edu> , 1995\nCopyright (c) 2016 GNOME i18n Project for Vietnamese\nCopyright (c) 2010 HZ\nCopyright (c) 2008 Hans Breuer\nCopyright (c) 2018 Igalia S.L.\nCopyright (c) 2005 Imendio AB\nCopyright (c) 2018 Inigo Martinez <inigomartinez@gmail.com>\nCopyright (c) 2010 Intel Corp.\nCopyright (c) 2005 John McCutchan\nCopyright (c) 2006 John McCutchan <john@johnmccutchan.com>\nCopyright (c) 2003 Jonathan Blandford <jrb@alum.mit.edu>\nCopyright (c) 2000-2017 Julian Seward\nCopyright (c) 2007 Jurg Billeter\nCopyright (c) 2010, Karo Mkrtchyan Karo Mkrtchyan <020113@mail.ru>\nCopyright (c) 2013 Lars Uebernickel\nCopyright (c) 2012 Lucas De Marchi <lucas.de.marchi@gmail.com>\nCopyright (c) 2006 Lukas Novotny <lukasnov@cvs.gnome.org>\nCopyright (c) 2005 - 2007, Marco Barisione <marco@barisione.org>\nCopyright (c) 2003 Matthias Clasen\nCopyright (c) 200 Matthias Clasen <mclasen@redhat.com>\nCopyright (c) 2004 Matthias Clasen <mclasen@redhat.com>\nCopyright (c) 2004, 2005 Miloslav Trmac <mitr@volny.cz>\nCopyright (c) 2014 NICE\nCopyright (c) 2003 Noah Levitt\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2008 Novell, Inc.\nCopyright (c) 2021 Ole Andre Vadla Ravnas\nCopyright (c) 2014 Patrick Griffis\nCopyright (c) 2018-2019 Patrick Griffis, James Westman\nCopyright (c) 1995-1997, 1999 Peter Mattis, Red Hat, Inc.\nCopyright (c) 1995-1997 Peter Mattis, Spencer Kimball and Josh MacDonald\nCopyright (c) 2005 Red Hat\nCopyright (c) 2019 Red Hat, Inc.\nCopyright (c) 2006-2007 Red Hat, Inc. 2009 Benjamin Otte\nCopyright (c) 1999, 2003 Red Hat Software\nCopyright (c) 2014 Ruslan Izhbulatov\nCopyright (c) 2014 Ruslan Izhbulatov <lrn1986@gmail.com>\nCopyright (c) 2007, 2008 Ryan Lortie\nCopyright (c) 2009-10 Sam Thursfield\nCopyright (c) 1999, 2000 Scott Wimer\nCopyright (c) 2007 Sebastian Droge\nCopyright (c) 2003 Sebastian Wilhelmi\nCopyright (c) 2000 Sebastian Wilhelmi University of Karlsruhe\nCopyright (c) 2004 Sharif FarsiWeb, Inc\nCopyright (c) 2002, 2004, 2005, 2006 Sharif FarsiWeb, Inc. Roozbeh Pournader <roozbeh@farsiweb.info> , 2002, 2004, 2006. Hamed Malek <hamed@farsiweb.info> , 2005. Meelad Zakaria <meelad@farsiweb.info> , 2006 Arash Mousavi <mousavi.arash@gmail.com> , 2011\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007 Soeren Sandmann (sandmann@daimi.au.dk)\nCopyright (c) 2011 Stef Walter <stefw@collabora.co.uk>\nCopyright (c) 2007 Sven Herzberg\nCopyright (c) 2012 Swecha telugu localisation Team <localization@swecha.net>\nCopyright (c) 2005 THE PACKAGE'S\nCopyright (c) 2007 THE glib.HEAD'S\nCopyright (c) 2005 THE glib's\nCopyright (c) 2007-2011 The GNOME Project\nCopyright (c) 2010 Thiago Santos <thiago.sousa.santos@collabora.co.uk>\nCopyright (c) 1997, 1998 Tim Janik\nCopyright (c) 1997-1999, 2000-2001 Tim Janik and Red Hat, Inc.\nCopyright (c) 1998, 1999 Tom Tromey\nCopyright (c) 2018 Tomasz Miasko\nCopyright (c) 1998 Tor Lillqvist\nCopyright (c) 2006 Ubuntu Georgian Translators\nCopyright (c) 1997-2006 University of Cambridge\nCopyright (c) 2011 William Hua\nCopyright (c) 2020 William Manley\nCopyright (c) 2000-2003 Ximian Inc.\nCopyright (c) 2008 by Claus Tondering\nCopyright (c) 1995, 1996, 1997 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2008 codethink\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 glib Distributed\nCopyright (c) 2001-2013, 2020 glib's\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 the\nCopyright (c) 2002-2021 the glib\nCopyright (c) 2006-2008 xine project\nMaithili Copyright (c) 2006 The GNOME Foundation\n(c) 2019, 2021 Red Hat Inc.\n(c) 2008 codethink\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glib2-2.68.4-16.el9_6.2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glib2@2.68.4-16.el9_6.2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fs9D_ylqDeRN1Sd0NJcqvjaWmjgK-nuuQ9QryK2yQdw/glib2-~-16.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gtk.org",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glib2",
    "versionInfo" : "2.68.4-16.el9_6.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glibc-common-2.34-168.el9-6.20-arch-x86-64",
    "copyrightText" : "Copyright (c) Free Software Foundation, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glibc-common-2.34-168.el9_6.20.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glibc-common@2.34-168.el9_6.20?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHcIazwidMjkT1UE4eDmm90AwkrpEeaFnkLlB8d8wC8/glibc-~-168.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/glibc/",
    "licenseConcluded" : "(BSD-3-Clause AND GFDL-1.1-or-later AND ISC AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glibc-common",
    "versionInfo" : "2.34-168.el9_6.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glibc-minimal-langpack-2.34-168.el9-6.20-arch-x86-64",
    "copyrightText" : "Copyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright 1995 by Tom Lord\nCopyright (c) 1991,1990,1989 Carnegie Mellon University\nCopyright (c) 1992 Eric Young Collected\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2000, Intel Corporation\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 1991 Regents of the University of California\nCopyright (c) 1997-2003 University of Cambridge\nCopyright (c) 1998 WIDE Project\nCopyright (c) 1993 by Sun Microsystems, Inc.\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\ncopyright Eric Young\ncopyright Henry Spencer\ncopyright Stephen L. Moshier\ncopyright Sun Microsystems, Inc.\ncopyright Tom Lord\ncopyright University of Cambridge\ncopyright by the University of Cambridge, England\ncopyright (c) by Craig Metz\ncopyrighted by UC Berkeley\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glibc-minimal-langpack-2.34-168.el9_6.20.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glibc-minimal-langpack@2.34-168.el9_6.20?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHcIazwidMjkT1UE4eDmm90AwkrpEeaFnkLlB8d8wC8/glibc-~-168.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/glibc/",
    "licenseConcluded" : "(BSD-3-Clause AND GFDL-1.1-or-later AND ISC AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glibc-minimal-langpack",
    "versionInfo" : "2.34-168.el9_6.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-glibc-2.34-168.el9-6.20-arch-x86-64",
    "copyrightText" : "Copyright 1992, 1993, 1994, 1997 Henry Spencer\nCopyright 2001 by Stephen L. Moshier <moshier@na-net.ornl.gov>\nCopyright 1995 by Tom Lord\nCopyright (c) 1991,1990,1989 Carnegie Mellon University\nCopyright (c) 1992 Eric Young Collected\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2000, Intel Corporation\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 1991 Regents of the University of California\nCopyright (c) 1997-2003 University of Cambridge\nCopyright (c) 1998 WIDE Project\nCopyright (c) 1993 by Sun Microsystems, Inc.\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\ncopyright Eric Young\ncopyright Henry Spencer\ncopyright Stephen L. Moshier\ncopyright Sun Microsystems, Inc.\ncopyright Tom Lord\ncopyright University of Cambridge\ncopyright by the University of Cambridge, England\ncopyright (c) by Craig Metz\ncopyrighted by UC Berkeley\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/glibc-2.34-168.el9_6.20.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/glibc@2.34-168.el9_6.20?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LHcIazwidMjkT1UE4eDmm90AwkrpEeaFnkLlB8d8wC8/glibc-~-168.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/glibc/",
    "licenseConcluded" : "(BSD-3-Clause AND GFDL-1.1-or-later AND ISC AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Inner-Net-2.0-GLIBC AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/glibc",
    "versionInfo" : "2.34-168.el9_6.20"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gmp-6.2.0-13.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 2001-2003, 2005, 2006\nCopyright 1991, 1996, 1999, 2000, 2007 Free Software Foundation, Inc.\nCopyright 2000-2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2006 Red Hat, Inc. Thomas Woerner <twoerner@redhat.com>\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gmp-6.2.0-13.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gmp@6.2.0-13.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aitFIyIT9oTO0yEo3m1HZdYG38utko3ob1zSMeqaGbg/gmp-~-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gmplib.org/",
    "licenseConcluded" : "LGPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gmp",
    "versionInfo" : "6.2.0-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gnupg2-2.3.3-4.el9-arch-x86-64",
    "copyrightText" : "(C), Dian Zi\nCopr https://dev.gnupg.org/T1646\nCopyright 2002-2008 Amir Szekely\nCopyright 1998-2021 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url https://fsf.org\nCopyright 2007 Ingo Klocker\nCopyright 2016 Intevation GmbH\nCopyright 2002-2009 Joost Verburg\nCopyright 1999-2009 Nullsoft and Contributors\nCopyright 2003 Ramon\nCopyright 2014-2017 The GnuPG Project\nCopyright 1998-2003 The OpenLDAP Foundation\nCopyright 1997-2019 Werner Koch\nCopyright 1998 by The Internet Society\nCopyright (c) 2014 Andreas Schwier <andreas.schwier@cardcontact.de>\nCopyright (c) 2015 Ben McGinnes\nCopyright (c) 2006-2014 Brainspark B.V.\nCopyright (c) 2015-2016 Bundesamt fur Sicherheit\nCopyright (c) 2013 Christian Grothoff\nCopyright (c) 2015 Daiki Ueno\nCopyright (c) 2015 Daniel Kahn Gillmor <dkg@fifthhorseman.net>\nCopyright (c) 2000 Dimitrios Souflis\nCopyright (c) 2013-2014 Dmitry Eremin-Solenikov\nCopyright (c) 2000, 2001 Fabio Fiorina\nCopyright (c) 1989,1991-2017 Free Software Foundation, Inc.\nCopyright (c) 2003, 2004, 2005 Free Software Foundation, Inc. Acest\nCopyright (c) 2012 Free Software Foundation, Inc. Birger Langkjer, <birger.langkjer@image.dk> , 2000. Kenneth Christiansen, kenneth@ripen.dk, 2000. Joe Hansen, <joedalton2@yahoo.dk> , 2012\nCopyright (c) 2001, 2002, 2003, 2005 Free Software Foundation, Inc. Carles Sadurni Anguita <sadurni@jazzfree.com> , 2001. Jordi Mallach <jordi@gnu.org> , 2001, 2002, 2003, 2005. Coses\nCopyright (c) 2002 Free Software Foundation, Inc. Dokianakis Theofanis <madf@hellug.gr> , 2002\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Edmund GRIMLEY\nCopyright (c) 2001, 2002, 2003 Free Software Foundation, Inc. Jacobo Tarrio <jtarrio@trasno.net> , 2001, 2002, 2003\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2007 Free Software Foundation, Inc. Janusz A. Urbanowicz <alex@bofh.net.pl> , 1999, 2000, 2001, 2002, 2003-2004 Jakub Bogusz <qboosh@pld-linux.org> , 2003-2020\nCopyright (c) 1998, 1999, 2000, 2001, 2003-2004 Free Software Foundation, Inc. Jouni Hiltunen <jouni.hiltunen@kolumbus.fi> , 2003. Tommi Vainikainen <Tommi.Vainikainen@iki.fi> , 2003-2004. Suomennoksia\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Magda Prochazkova <magda@math.muni.cz> 2001, Roman Pavlik <rp@tns.cz> 2001, 2002, 2003, 2004, 2005. Petr Pisar <petr.pisar@atlas.cz> , 2009, 2010, 2011, 2013, 2014, 2015, 2016. Petr Pisar <petr.pisar@atlas.cz> , 2017, 2018, 2019, 2020\nCopyright (c) 1998, 1999, 2001, 2002 Free Software Foundation, Inc. Marco d'Itri <md@linux.it> , 1998, 1999, 2001, 2002\nCopyright (c) 1998 - 2004 Free Software Foundation, Inc. Michal Majer <mmajer@econ.umb.sk> , 2002 - 2004\nCopyright (c) 2003, 2004, 2020 Free Software Foundation, Inc. Nagy Ferenc Laszlo <nfl@nfllab.com> , 2003, 2004, 2020\nCopyright (c) 1999, 2000, 2001, 2002 Free Software Foundation, Inc. Pedro Morais <morais@kde.org>\nCopyright (c) 1999-2011 Free Software Foundation, Inc. Per Tunedal <info@clipanish.com> , 2004. Daniel Resare <daniel@resare.com> , 1999-2002. Daniel Nylander <po@danielnylander.se> , 2006, 2007, 2008, 2011\nCopyright (c) 1999, 2000, 2001, 2002, 2003, 2004 Free Software Foundation, Inc. Tedi Heriyanto <tedi_h@gmx.net> , 1999, 2000, 2001, 2002, 2003, 2004\nCopyright (c) 2001, 2002 Free Software Foundation, Inc. Toomas Soome <Toomas.Soome@microlink.ee> , 2003\nCopyright (c) 1998, 1999, 2001, 2002 Free Software Foundation, Inc. Urko Lusa <ulusa@euskalnet.net> , 1998, 1999. I've\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2011 Free Software Foundation, Inc. Walter Koch <koch@u32.de> , 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006 Merged\nCopyright (c) 1998, 1999, 2000, 2001, 2003, 2006, 2007, 2009 Free Software Foundation, Inc. 2015 g10 Code GmbH\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1998-2003 Hallvard B. Furuseth\nCopyright (c) 1999-2003 Howard Y.H. Chu\nCopyright (c) 2001-2004 IBM Corporation\nCopyright (c) 2004-2008 Igor Belyi\nCopyright (c) 2016 Ineiev <ineiev@gnu.org>\nCopyright (c) 2012 Intel Corporation\nCopyright (c) 2016 Intevation GmbH\nCopyright (c) 2021 James Bottomley <James.Bottomley@HansenPartnership.com>\nCopyright (c) 2002 John Goerzen\nCopyright (c) 2013-2017 Jussi Kivilinna\nCopyright (c) 2001 Justin Frankel\nCopyright (c) 2002 Klaralvdalens Datakonsult AB\nCopyright (c) 1998-2004 Kurt D. Zeilenga\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 2014, 2015 Martin Albrecht\nCopyright (c) 2006-2007 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 1998-2004 Net Boolean Incorporated\nCopyright (c) 2003 Nikos Mavroyanopoulos\nCopyright (c) 1999-2005 Nullsoft, Inc.\nCopyright (c) 1996-2006 Peter Gutmann, Matt Thomlinson and Blake Coverett\nCopyright (c) 1996-1999 Peter Gutmann, Paul Kendall, and Chris Wedgwood\nCopyright (c) 1992-1996 Regents of the University of Michigan\nCopyright (c) 1999 Robert Bihlmeyer <robbe@orcus.priv.at>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2014 Serge Voilokov\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 2012 Simon Josefsson, Niels Moller\nCopyright (c) 2014 Stephan Mueller\nCopyright (c) 1999-2003 Symas Corporation\nCopyright (c) 1998 The Internet Society\nCopyright (c) 1998-2004 The OpenLDAP Foundation\nCopyright (c) 1995-1997, 2000-2007 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1991-2020 Unicode, Inc.\nCopyright (c) 1998-2003, 2006, 2009, 2017 Werner\nCopyright (c) 1997 Werner Koch\nCopyright (c) 1999 Werner Koch, Duesseldorf\nCopyright (c) 2008, 2009, 2010, 2012-2016 William Ahern\nCopyright (c) 1994 X Consortium\nCopyright (c) 2004 by Albrecht Dress <albrecht.dress@arcor.de>\nCopyright (c) 1998 by The Internet Society\nCopyright (c) 1995-1997, 2000-2007 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1986 by University of Toronto\nCopyright (c) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, @c 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2010, 2011 2012, 2013, 2014, 2015 g10 Code GmbH\nCopyright (c) 2005, 2014, 2019-2021 g10 Code GmbH 2017 Intevation GmbH\nCopyright 2003-2021 g10 Code GmbH\nCopyright xa9 2021\nPortions Copyright 1998-2003 Hallvard B. Furuseth\nPortions Copyright 1999-2003 Howard Y.H. Chu\nPortions Copyright 2001-2004 IBM Corporation\nPortions Copyright 1998-2004 Kurt D. Zeilenga\nPortions Copyright 1998-2004 Net Boolean Incorporated\nPortions Copyright 1999-2003 Symas Corporation\nPortions Copyright (c) 1992-1996 Regents of the University of Michigan\nSmenit (N)Imia, (c) Primechanie\n(c) Copyright IBM Corporation 2015 - 2019\n(c) 2002, 2004, 2005, 2006, 2007, 2010 Free Software Foundation, Inc.\n(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 2010-2016 Steve Bennett <steveb@workware.net.au>\n(c) 2013, 2014, 2015 Werner Koch\n(c) 2015, 2016, 2017 g10 Code GmbH.\ncopyright 2002, 2004, 2005, 2006, 2007, 2010 Free Software Foundation\ncopyright 2013, 2014, 2015 Werner\ncopyright (c) 1996-2010 Julian R Seward\n\nAuthors: <dmitri@advantrix.com>; Albrecht Dress; Alexandre Oliva <oliva@dcc.unicamp.br>; Amir Szekely; Andreas Schwier; Armando Ramos <armando@clerval.org>; Ben McGinnes; Brainspark B.V.; Bundesamt fur Sicherheit; Christian Grothoff; Christopher Seiwald seiwald@perforce.com; Christopher Seiwald seiwald@vix.com; Daiki Ueno; Daniel Kahn Gillmor; Dian Zi; Dimitrios Souflis; Dmitry Eremin-Solenikov; Fabio Fiorina; Fran,cois Pinard; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. @url; Free Software Foundation, Inc. Acest; Free Software Foundation, Inc. Birger Langkjer, , Kenneth Christiansen, Joe Hansen; Free Software Foundation, Inc. Carles Sadurni Anguita , Jordi Mallach , Coses; Free Software Foundation, Inc. Dokianakis Theofanis; Free Software Foundation, Inc. Edmund GRIMLEY; Free Software Foundation, Inc. Jacobo Tarrio; Free Software Foundation, Inc. Janusz A. Urbanowicz , Jakub Bogusz; Free Software Foundation, Inc. Jouni Hiltunen , Tommi Vainikainen , Suomennoksia; Free Software Foundation, Inc. Magda Prochazkova Roman Pavlik Petr Pisar , Petr Pisar; Free Software Foundation, Inc. Marco d'Itri; Free Software Foundation, Inc. Michal Majer; Free Software Foundation, Inc. Nagy Ferenc Laszlo; Free Software Foundation, Inc. Pedro Morais; Free Software Foundation, Inc. Per Tunedal , Daniel Resare , Daniel Nylander; Free Software Foundation, Inc. Tedi Heriyanto; Free Software Foundation, Inc. Toomas Soome; Free Software Foundation, Inc. Urko Lusa , I've; Free Software Foundation, Inc. Walter Koch , Merged; Free Software Foundation, Inc. g10 Code GmbH; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hallvard B. Furuseth; Henry Spencer. Not; Howard Y.H. Chu; IBM Corporation; Igor Belyi; Ineiev; Ingo Klocker; Intel Corporation; Intevation GmbH; Jakub Jelen <jjelen@redhat.com>; James Bottomley; Jean-loup Gailly and Mark Adler; Jim Meyering; John Goerzen; Joost Verburg; Jose Carlos Garcia Sogo <jsogo@debian.org>; Julian R Seward; Jussi Kivilinna; Justin Frankel; Klar'alvdalens Datakonsult AB; Klaralvdalens Datakonsult AB; Kurt D. Zeilenga; L. Peter Deutsch; Martin Albrecht; Michael Tokarev, mjt@corpit.ru; Moritz Schulte <moritz@g10code.com>; NTT (Nippon Telegraph and Telephone Corporation); Net Boolean Incorporated; Nikos Mavroyanopoulos; Noah Friedman <friedman@prep.ai.mit.edu>; Nullsoft and Contributors; Nullsoft, Inc.; Per Bothner; Peter Gutmann, Matt Thomlinson and Blake Coverett; Peter Gutmann, Paul Kendall, and Chris Wedgwood; Ramon; Regents of the University of Michigan; Robert Bihlmeyer; Scott James Remnant; Serge Voilokov; Simon Josefsson; Simon Josefsson, Niels Moller; Smenit (N)Imia, Primechanie; Stephan Mueller; Steve Bennett; Steve Bennett <steveb@workware.net.au>; Symas Corporation; The GnuPG Project; The Internet Society; The OpenLDAP Foundation; Timo Schulz. Not; Tom Tromey <tromey@cygnus.com>; Tor Lillqvist <tml@iki.fi>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Ulrich Drepper <drepper@cygnus.com> , Check; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Ulrich Drepper <drepper@gnu.org>; Unicode, Inc.; University of Toronto; Werner; Werner Koch; Werner Koch <wk@gnupg.org>; Werner Koch, Duesseldorf; Werner Koch. Other; William Ahern; X Consortium; disastry@saiknes.lv; exstatus.awk; fygrave@epr0.org; g10 Code GmbH; g10 Code GmbH Intevation GmbH; https://dev.gnupg.org/T1646; me, David; the Free Software Foundation; xa9",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gnupg2-2.3.3-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gnupg2@2.3.3-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gtx-nArEby3-PTeX4UQ3LnGiR8-poR6EUWoYQ9c1UpA/gnupg2-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gnupg2",
    "versionInfo" : "2.3.3-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gnutls-3.8.3-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 2001-2003, 2005, 2006\nCopyright 2009-2012 Aleksey Kravchenko <rhash.admin@gmail.com>\nCopyright 2015-2015 Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nCopyright 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG\nCopyright 1991, 1996, 1999, 2000, 2007 Free Software Foundation, Inc.\nCopyright 2001-2023 Free Software Foundation, Inc., and others\nCopyright 2000-2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2016 Google Inc.\nCopyright 2001-2024 Nikos Mavrogiannopoulos\nCopyright 2017 Red Hat, Inc.\nCopyright (c) 2016 - 2018 ARPA2 project\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2008 Alexander von Gernler\nCopyright (c) 2009 Allan Caffee <allan.caffee@gmail.com>\nCopyright (c) 2002 Andrew McDonald\nCopyright (c) 2002 Andrew McDonald <andrew@mcdonald.org.uk>\nCopyright (c) 2011-2013, Andy Polyakov <appro@openssl.org>\nCopyright (c) 2011 Bardenheuer GmbH, Munich and Bundesdruckerei GmbH, Berlin\nCopyright (c) 2015,2018 Bastien ROUCARIES\nCopyright (c) 2009, Ben Hoyt\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2006-2012, CRYPTOGAMS\nCopyright (c) 2013 Christian Grothoff\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2021 Daiki Ueno\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2012 Dan Winship\nCopyright (c) 2018-2021 David Woodhouse\nCopyright (c) 2020 Dmitry Baryshkov\nCopyright (c) 2013-2015 Dmitry Eremin-Solenikov\nCopyright (c) 2015 Dmity Eremin-Solenikov\nCopyright (c) 2015-2016 Dyalog Ltd.\nCopyright (c) 2015 Enrico M. Crisostomo <enrico.m.crisostomo@gmail.com>\nCopyright (c) 2013 Frank Morgner\nCopyright (c) 2013 Frank Morgner <morgner@informatik.hu-berlin.de>\nCopyright (c) 2012 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2000-2023 Free Software Foundation, and others\nCopyright (c) 2012 INRIA Paris-Rocquencourt\nCopyright (c) 2008-2012 Intel Corporation\nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 2008 Joe Orton <joe@manyfish.co.uk>\nCopyright (c) 2008 John Darrington <j.darrington@elvis.murdoch.edu.au>\nCopyright (c) 2012 KU Leuven\nCopyright (c) 2011 Katholieke Universiteit Leuven\nCopyright (c) 2012 Lucas Fisher lucas.fisher at gmail.com\nCopyright (c) 2000, 2001 Markus Friedl\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2000, 2001, 2008 Niels Moller\nCopyright (c) 2000, 2001, 2002, 2003, 2004 Nikos Mavrogiannopoulos\nCopyright (c) 2015 Nikos Mavrogiannopoulos, Inc.\nCopyright (c) 2012 Nikos Mavrogiannopoulos, Niels Moller\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2001,2002 Paul Sheer\nCopyright (c) 2012, 2016 Philip Withnall\nCopyright (c) 2013 Red Hat\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Simon Josefsson\nCopyright (c) 2017 Stephan Mueller <smueller@chronox.de>\nCopyright (c) 2017 Tim Ruehsen\nCopyright (c) 2017 Tim Ruhsen\nCopyright (c) 2022 Tobias Heider <tobias.heider@canonical.com>\nCopyright (c) 2008 Tom Howard <tomhoward@users.sf.net>\nCopyright (c) 2019 Tom Vrancken (dev@tomvrancken.nl)\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2016 Wrymouth Innovation Ltd\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright (c) 1996,1999 by Internet Software Consortium\nPortions Copyright (c) 2001 Niels Moeller\nPortions Copyright (c) 2002,2003 Nikos Mavrogiannopoulos\n(c) Internal macro Tests\ncopyrighted by the Free Software Foundation\ncopyrights for 2020\n\nAuthors: <Pasi.Eronen@nokia.com>; <appro@openssl.org>; ARPA2 project; Adam Langley <agl@imperialviolet.org>; Adam Langley <alangley@gmail.com>; Adam Sampson; Adrian Bunk <bunk@debian.org>; Ajit <ajeetsinghchahar2@gmail.com>; Ajit Singh <ajeetsinghchahar2@gmail.com>; Albrecht Dress <albrecht.dress@arcor.de>; Aleix Conchillo Flaque <aleix@member.fsf.org>; Aleksei Nikiforov <darktemplar@basealt.ru>; Aleksey Kravchenko; Alessandro Ghedini <alessandro@ghedini.me>; Alex Gaynor <alex.gaynor@gmail.com>; Alex Monk <krenair@gmail.com>; Alexander Kanavin <alex.kanavin@gmail.com>; Alexander Sosedkin; Alexander Sosedkin <asosedkin@redhat.com>; Alexander von Gernler; Alexandre Oliva <oliva@dcc.unicamp.br>; Alfredo Pironti; Allan Caffee; Alon Bar-Lev <alon.barlev@gmail.com>; Ander Juaristi; Ander Juaristi <a@juaristi.eus>; Ander Juaristi, Nikos Mavrogiannopoulos; Anderson Toshiyuki Sasaki <ansasaki@redhat.com>; Andreas Metzler <ametzler@debian.org>; Andreas Metzler <ametzler@downhill.at.eu.org>; Andreas Schneider <asn@samba.org>; Andreas Schwab <schwab@suse.de>; Andrew McDonald; Andrew W. Nosenko <andrew.w.nosenko@gmail.com>; Andy Polyakov; Andy Polyakov <appro@fy.chalmers.se>; Arfrever Frehtes Taifersar Arahesis <arfrever.fta@gmail.com>; Armin Burgmeier <armin@arbur.net>; Asad Mehmood <asad78611@googlemail.com>; Assaf Gordon <assafgordon@gmail.com>; Attila Molnar <attilamolnar@hush.com>; Avinash Sonawane <rootkea@gmail.com>; Bardenheuer GmbH, Munich and Bundesdruckerei GmbH, Berlin; Bas van Schaik <gitlab.com@s.traiectum.net>; Bastien ROUCARIES; Ben Hoyt; Benjamin Herrenschmidt <benh@kernel.crashing.org>; Bernhard M. Wiedemann <bwiedemann@suse.de>; Bjoern Jacke <bjacke@samba.org>; Bjorn Christensen <bhc@insight.dk>; Bjorn Jacke <bjacke@samba.org>; Bootstrap Authors; Brad Hards <bradh@frogmouth.net>; Brad Smith <brad@comstyle.com>; Brendan Doherty <brendand@gentrack.com>; Brian Wickman <bwickman97@outlook.com>; Bruno Haible; Bruno Haible <bruno@clisp.org>; CRYPTOGAMS; Christian Grothoff; Christian Grothoff <christian@grothoff.org>; Christian Persch; Christopher Baines <mail@cbaines.net>; Clemens Lang <cllang@redhat.com>; Colin Walters <walters@verbum.org>; Craig Gallek <cgallek@gmail.com>; Daiki Ueno; Daiki Ueno <ueno@gnu.org>; Daiki Ueno, Ander Juaristi; Dan Nicholson; Dan Winship; Daniel Black <dragonheart@gentoo.org>; Daniel Kahn Gillmor <dkg-debian.org@fifthhorseman.net>; Daniel Kahn Gillmor <dkg@fifthhorseman.net>; Daniel Lenski <dlenski@gmail.com>; Daniel NebuchadnezzaR Dehennin <nebuchadnezzar@asgardr.info>; Daniel P. Berrange <berrange@redhat.com>; Daniel Schaefer <git@danielschaefer.me>; Daniel Stenberg <daniel@haxx.se>; Darshit Shah; David Caldwell <david@porkrind.org>; David Harvey and Torbjorn Granlund; David MacKenzie <djm@gnu.ai.mit.edu>; David Walker <david.walker@vcatechnology.com>; David Weber <dave@veryflatcat.com>; David Woodhouse; David Woodhouse <dwmw2@infradead.org>; David Woodhouse <dwmw2@infradead.org> , Nikos Mavrogiannopoulos, Daiki Ueno; Dennis Vshivkov <walrus@amur.ru>; Dick Karpinski (dick@cca.ucsf.edu); Dimitri John Ledkov <xnox@ubuntu.com>; Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>; Dimitris Apostolou <dimitris.apostolou@icloud.com>; Dmitriy Tsvettsikh <dmitrycvet@gmail.com>; Dmitry Baryshkov; Dmitry Baryshkov <dbaryshkov@gmail.com>; Dmitry Eremin-Solenikov; Dmity Eremin-Solenikov; Dosenpfand <m@sad.bz>; Doug Nazar <nazard@nazar.ca>; Douglas E. Engert <deengert@anl.gov>; Dyalog Ltd.; Eduardo Villanueva Che; Edward Stangler <estangler@bradmark.com>; Eli Zaretskii <eliz@gnu.org>; Elias Gustafsson <elias.skondal@gmail.com>; Elta Koepp <alexi_2019@protonmail.com>; Elta Koepp <elta_koepp@gmail.com>; Emile van Bergen <emile@e-advies.nl>; Enrico M. Crisostomo; Eric Blake; Eric Blake <ebb9@byu.net>; Eric Blake <eblake@redhat.com>; Eric Blake and Bruno Haible; Eric Blake, Paul Eggert, and Jim Meyering; Evgeny Grin <k2k@narod.ru>; Evgeny Legerov <admin@gleg.net>; Fabian Fagerholm <fabbe@paniq.net>; Fabrice Fontaine <fontaine.fabrice@gmail.com>; Fiona Klute <fiona.klute@gmx.de>; Florian Pelz <pelzflorian@pelzflorian.de>; Fran,cois Pinard; Frank Morgner; Frantisek Krenzelok <krenzelok.frantisek@gmail.com>; Fratnisek Krenzelok; Fraunhofer SIT sponsored by Infineon Technologies AG; Frediano Ziglio <freddy77@gmail.com>; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. @uref; Free Software Foundation, Inc., and others; Free Software Foundation, and others; Fridolin Pokorny Nikos Mavrogiannopoulos; GNU Texinfo; Gary V. Vaughan; Gerrit P. Haase <gp@familiehaase.de>; Giuseppe Scrivano <gscrivano@gnu.org>; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gregor Jasny <gjasny@googlemail.com>; Gunther Deschner <gd@samba.org>; Gustavo Zacarias <gustavo@zacarias.com.ar>; Hans Leidekker <hans@codeweavers.com>; Howard Chu <hyc@symas.com>; Hubert Kario <hkario@redhat.com>; Hugo Beauzee-Luyssen <hugo@beauzee.fr>; INRIA Paris-Rocquencourt; Ian Peters <itp@ximian.com>; Ilya V. Matveychikov <i.matveychikov@securitycode.ru>; Intel Corporation; Internal macro Tests; Internet Software Consortium; Jaak Ristioja <jaak.ristioja@cyber.ee>; Jakub Jelen <jjelen@redhat.com>; James Bottomley <James.Bottomley@HansenPartnership.com>; James Henstridge Damon Chaplin Stefan Sauer; James Henstridge Stefan Sauer; Jan Palus <jpalus@fastmail.com>; Jan Vcelak <jan.vcelak@nic.cz>; Jay Foad <jay.foad@gmail.com>; Jean-Francois Bignolles <bignolle@ecoledoc.ibp.fr>; Jeff Cai <jeff.cai@sun.com>; Jim Blandy (jimb@ai.mit.edu); Jim Meyering; Jim Meyering <meyering@ascend.com>; Jim Meyering and Bruno Haible; Jim Meyering and Paul Eggert; Jiri Klimes <jklimes@redhat.com>; Joe Orton; Joe Orton <joe@manyfish.co.uk>; John Amanatides (amana@sasquatch.cs.yorku.ca); John Brooks <special@dereferenced.net>; John Darrington; JonasZhou <JonasZhou@zhaoxin.com>; Jonathan Bastien-Filiatrault; Jonathan Bastien-Filiatrault Nikos Mavrogiannopoulos; Jonathan Nieder <jrnieder@gmail.com>; Jose E. Marchesi <jemarch@gnu.org>; Jouni Malinen <jkmaline@cc.hut.fi>; Jussi Kukkonen <jussi.kukkonen@intel.com>; KU Leuven; Karl Tarbe <karl.tarbe@cyber.ee>; Karsten Ohme <k_o_@users.sourceforge.net>; Kataja Kai <kai.kataja@op.fi>; Katholieke Universiteit Leuven; Ke Zhao <kzhao@redhat.com>; Kenneth J. Miller <ken@miller.ec>; Kevin Cernekee <cernekee@gmail.com>; Kevin Quick <quick@sparq.org>; Kris Karas <ktk@enterprise.bidmc.harvard.edu>; Kukosa, Tomas <tomas.kukosa@siemens-enterprise.com>; LaMont Jones <lamont@smallone.fc.hp.com>; Laurence Withers <l@lwithers.me.uk>; Lei Maohui <leimaohui@cn.fujitsu.com>; Leonardo Bras <leobras.c@gmail.com>; Lili Quan <13132239506@163.com>; Lucas Fisher lucas.fisher at gmail.com; Ludovic Courtes <ludo@gnu.org>; Ludovic Courtes <ludovic.courtes@laas.fr>; Lukasz Stelmach <stlman@poczta.fm>; Luke Dashjr <luke-jr+git@utopios.org>; Maciej S. Szmigiero; Maks Naumov <maksqwe1@ukr.net>; Marc F. Clemente <marc@mclemente.net>; Marcin Cieslak <saper@saper.info>; Marcin Garski <mgarski@post.pl>; Marga Manterola <marga@google.com>; Mario Lenz <mario.lenz@gmx.net>; Marius Bakke <mbakke@fastmail.com>; Mark Harfouche <mark.harfouche@gmail.com>; Markus Friedl; Martijn Koster <mak@greenhills.co.uk>; Martin Lambers <marlam@marlam.de>; Martin Lambers <marlam@web.de>; Martin Schwidefsky; Martin Storsjo; Martin Storsjo <martin@martin.st>; Martin Sucha <anty.sk+git@gmail.com>; Martin Ukrop <mukrop@redhat.com>; Martin von Gagern <Martin.vGagern@gmx.net>; Marvin Scholz <epirat07@gmail.com>; Massimo Gaspari <massimo.gaspari@alice.it>; Matt Turner <mattst88@gmail.com>; Matthias Koenig <mkoenig@suse.de>; Matthias Scheler <tron@NetBSD.org>; Matthias Urlichs <smurf@smurf.noris.de>; Matthias Wimmer <m@tthias.eu>; Matthias-Christian Ott <ott@mirix.org>; Max Kellermann <max@duempel.org>; Maya Rashish <coypu@sdf.org>; Michael C. Vergallen <mvergall@telenet.be>; Michael Catanzaro <mcatanzaro@gnome.org>; Michael Catanzaro <mcatanzaro@igalia.com>; Michael Catanzaro <mcatanzaro@redhat.com>; Michael Kiefer <Michael-Kiefer@web.de>; Michael Meskes <meskes@debian.org>; Michael Weiser <michael.weiser@gmx.de>; Michael Weiser <michael@weiser.dinsnail.net>; Michael Zucchi; Michael.Ringe@aachen.utimaco.de; Mike Castle <dalgoda@ix.netcom.com>; Miroslav Kratochvil <exa.exa@gmail.com>; Miroslav Lichvar <mlichvar@redhat.com>; Mitsubishi and NTT.; Mohit Agarwal; Nate Nielsen <nielsen-list@memberwebs.com>; Nia Alarie; Nick Child <nick.child@ibm.com>; Nicolas Dufresne <nicolas.dufresne@collabora.com>; Niels Moeller; Niels Moller; Niels Moller <nisse@lysator.liu.se>; Nikolaos Chatzikonstantinou <nchatz314@gmail.com>; Nikolay Sivov <nsivov@codeweavers.com>; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos <nmav@gnutls.org>; Nikos Mavrogiannopoulos <nmav@redhat.com>; Nikos Mavrogiannopoulos, Ander Juaristi; Nikos Mavrogiannopoulos, Anderson Toshiyuki Sasaki; Nikos Mavrogiannopoulos, Bjorn Christensen; Nikos Mavrogiannopoulos, Daiki Ueno, Martin Ukrop; Nikos Mavrogiannopoulos, Inc.; Nikos Mavrogiannopoulos, Niels Moller; Nikos Mavrogiannopoulos, Simon Josefsson; Nikos Mavrogiannopoulos, Simon Josefsson, Howard Chu; Nikos Mavrogiannopoulos, Stef Walter; Nikos Mavroyanopoulos; Nikos Mavroyanopoulos, Simon Josefsson; Norbert Pocs <npocs@redhat.com>; Ondrej Moris <omoris@redhat.com>; Ondrej Moris, Zoltan Fridrich; Oskar Liljeblad; Oskar Liljeblad <oskar@osk.mine.nu>; Paolo Bonzini; Paolo Borelli; Patrik Hornik <patrik@hornik.sk>; Paul Eggert; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Paul Eggert and Bruno Haible; Paul Eggert and Jim Meyering; Paul Eggert and Martin Lambers; Paul Eggert, Bruno Haible, Derek Price; Paul Eggert, Bruno Haible, Sam Steingold, Peter Burwood; Paul Eggert, Bruno Haible, and Jim Meyering; Paul Millar <p.millar@physics.gla.ac.uk>; Paul Sheer; Paul Vixie; Paul Zimmermann (zimmermann@inria.inria.fr); Pavlov Konstantin <thresh@altlinux.ru>; Pedro Monreal <pmgdeb@gmail.com>; Per Bothner; Peter Hendrickson <pdh@wiredyne.com>; Peter Leitmann <pleitman@redhat.com>; Peter Rosin <peda@lysator.liu.se>; Peter Wu <peter@lekensteyn.nl>; Petr Pavlu <petr.pavlu@suse.com>; Philip Blundell <pjb27@cam.ac.uk>; Philip Withnall; Philippe Proulx <eeppeliteloop@gmail.com>; Philippe Widmer <pw@earthwave.ch>; Pierre Ossman <ossman@cendio.se>; Pierre-Joseph Gailly (pjg@sunbim.be); Pravek Sharma <sharmapravek@gmail.com>; R. Andrew Bailey <bailey@akamai.com>; Radostin Stoyanov <radostin@redhat.com>; Rainer Gerhards <rgerhards@gmail.com>; Red Hat; Red Hat, Inc.; Remi Olivier <remi_8@hotmail.com>; Rical Jasan <ricaljasan@pacific.net>; Ricardo M. Correia <rcorreia@wizy.org>; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Costa <richard.costa@suse.com>; Richard Stallman; Richard W.M. Jones <rjones@redhat.com>; Robert Scheck <robert@fedoraproject.org>; Roberto Newmon <robertonewmon@fake-box.com>; Robey Pointer <robey@danger.com>; Roland McGrath (roland@ai.mit.edu); Rolf Eike Beer <eike@sf-mail.de>; Romain Francoise <romain@orebokech.com>; Roman Bogorodskiy <novel@FreeBSD.org>; Ross Nicholson <phunkyfish@gmail.com>; Rowan Thorpe <rowan@rowanthorpe.com>; Rupert Kittinger <r.kittinger@efkon.com>; Ruslan N. Marchenko <me@ruff.mobi>; Sadie Powell; Sahana Prasad <sahana@redhat.com>; Sam James <sam@gentoo.org>; Sam Varshavchik <mrsam@courier-mta.com>; Samuel Thibault <samuel.thibault@ens-lyon.org>; Sascha Ziemann <sascha.ziemann@secunet.com>; Saurav Babu <saurav.babu@samsung.com>; Scott James Remnant; Sebastian Droge <sebastian@centricular.com>; Seppo Yli-Olli <seppo.yliolli@gmail.com>; Sergey Poznyakoff <gray@Mirddin.farlep.net>; Simo Sorce <simo@redhat.com>; Simon Josefsson; Simon Josefsson <jas@josefsson.org>; Simon Josefsson <simon@josefsson.org>; Simon Josefsson and Bruno Haible; Simon Josefsson and Nikos Mavrogiannopoulos; Simon Josefsson and Paul Eggert; Simon Josefsson and Yoann Vandoorselaere <yoann@prelude-ids.org>; Simon Josefsson, Bruno Haible; Simon Josefsson, Nikos Mavrogiannopoulos; Simon Josefsson, Nikos Mavrogiannopoulos, Martin Ukrop; Simon Posnjak <simon.posnjak@cetrtapot.si>; Simon South <simon@simonsouth.net>; Stanislav Zidek <szidek@redhat.com>; Stefan Berger <stefanb@linux.ibm.com>; Stefan Buhler <stbuehler@web.de>; Stefan Kangas <stefankangas@gmail.com>; Stefan Sorensen <stefan.sorensen@spectralink.com>; Steffen Jaeckel <jaeckel-floss@eyet-services.de>; Stephan Mueller; Stephan Mueller <smueller@chronox.de>; Stephane LOEUILLET <stephane.loeuillet@tiscali.fr>; Stephen Paul; Steve Dispensa; Steve Lhomme <robux4@ycbcr.xyz>; Steven M. Bellovin <smb@research.att.com>; Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com>; Thierry Quemerais <tquemerais@awox.com>; Thomas Klausner <tk@giga.or.at>; Thomas Klausner <wiz@NetBSD.org>; Thomas Klute <thomas2.klute@uni-dortmund.de>; Tim Kosse <tim.kosse@filezilla-project.org>; Tim Ruehsen; Tim Ruhsen; Tim Ruhsen <tim.ruehsen@gmx.de>; Tobias Heider; Tobias Heider <tobias.heider@canonical.com>; Tom Carroll <incentivedesign@gmail.com>; Tom G. Christensen <tgc@jupiterrise.com>; Tom Howard; Tom Tromey <tromey@cygnus.com>; Tom Vrancken; Tom Vrancken (dev@tomvrancken.nl); Tom Vrancken <dev@tomvrancken.nl>; Tomas Hoger <thoger@redhat.com>; Tomas Mraz <tmraz@fedoraproject.org>; Torbjorn Granlund (tege@sics.se); Tristan Hill <stan@saticed.me.uk>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Ulrich Drepper <drepper@cygnus.com> , Check; Ulrich Drepper <drepper@gnu.ai.mit.edu>; Vitezslav Cizek <vcizek@suse.com>; Werner Koch <wk@gnupg.org>; Wilbur Wetterquarz <freaxmate@protonmail.com>; Wrymouth Innovation Ltd; X Consortium; Xan Lopez; Yoann Vandoorselaere <yoann@prelude-ids.org>; Yongye Zhu <zyy1102000@gmail.com>; Yoshisato YANAGISAWA <yanagisawa@csg.is.titech.ac.jp>; Yuriy M. Kaminskiy <yumkam@gmail.com>; Yutaka OIWA <y.oiwa@aist.go.jp>; Zoltan Fridrich; Zoltan Fridrich <zfridric@redhat.com>; epl@unimelb.edu.au; ihsinme <ihsinme@gmail.com>; librik@panix.com; morozov@eags.ru; nia <nia@NetBSD.org>; nix@esperi.demon.co.uk; peonix <ajeetsinghchahar2@gmail.com>; raspa0 <raspa0@protonmail.com>; rrivers2 <5981058-rrivers2@users.noreply.gitlab.com>; sskaje <sskaje@gmail.com>; the Free Software Foundation; xuraoqing <609179072@qq.com>; xuraoqing <xuraoqing@huawei.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gnutls-3.8.3-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gnutls@3.8.3-6.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XJfTnnXA63vLc6FmyCxx1wv_Zq1YNiLn_bbPA02k5Ms/gnutls-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnutls.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gnutls",
    "versionInfo" : "3.8.3-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gobject-introspection-1.68.0-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 2009 Johan Dahlin\nCopyright (c) 2010 Andreas Rottmann <a.rottmann@gmx.at>\nCopyright (c) 2018 Christoph Reiter\nCopyright (c) 2014 Chun-wei Fan\nCopyright (c) 2008 Colin Walters\nCopyright (c) 2008 Colin Walters <walters@verbum.org>\nCopyright (c) 2012-2013 Dieter Verfaillie <dieterv@optionexplicit.be>\nCopyright (c) 2011-2016 Dominique Leuenberger <dimstar@opensuse.org>\nCopyright (c) 1991 Free Software Foundation, Inc.\nCopyright (c) 2013 Hat, Inc.\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2007 Johan Dahlin\nCopyright (c) 2008 Johan Dahlin <johan@gnome.org>\nCopyright (c) 2007 Jurg Billeter\nCopyright (c) 2007-2008 Jurg Billeter <j@bitron.ch>\nCopyright (c) 2005 Matthias Clasen\nCopyright (c) 2008 Philip Van Hoof\nCopyright (c) 2008 Red Hat, Inc\nCopyright (c) 1997 Sandro Sigala <ssigala@globalnet.it>\nCopyright (c) 2011 Shaun McCance\nCopyright (c) 2010 Zach Goldberg\n(c) 2003, 2004, 2005 Thomas Vander Stichele",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gobject-introspection-1.68.0-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rNXjVYohfwKkV5Twxs_90gnDY2h3B3l9Iz1eq19TtL0/gobject-introspection-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gobject-introspection@1.68.0-11.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/GObjectIntrospection",
    "licenseConcluded" : "(MIT AND GPL-2.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gobject-introspection",
    "versionInfo" : "1.68.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-google-guice-4.2.3-10.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2024 Google, Inc.\nCopyright 2006-2008 The Apache Software Foundation\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2006 Google Inc. Bundle-Description Guice\nCopyright (c) 2006 Google Inc. https://github.com/google/guice",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/g/google-guice-4.2.3-10.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ntaBTx3iVQ2kMoeq7bdtc0HNMA1hVFcq-KYauQnYlKg/google-guice-~-10.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/google-guice@4.2.3-10.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guice",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/google-guice",
    "versionInfo" : "4.2.3-10.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-gpgme-1.15.1-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url https://fsf.org\nCopyright GPL BuildRoot\nCopyright (c) 2008 Alan W. Irwin\nCopyright (c) 2008 Andrew Collier\nCopyright (c) 2015, 2018 Ben McGinnes\nCopyright (c) 2015 Ben McGinnes <ben@adversary.org>\nCopyright (c) 2018 Ben McGinnes <ben@gnupg.org>\nCopyright (c) 2015 Benjamin D. McGinnes\nCopyright (c) 2015 Benjamin D. McGinnes <ben@adversary.org>\nCopyright (c) 2008 Benjamin Kosnik <bkoz@redhat.com>\nCopyright (c) 2008 Bernhard Reiter <bernhard@intevation.de>\nCopyright (c) 2015, 2016, 2018 Bundesamt fur Sicherheit\nCopyright (c) 2016 Bundesamt fur Sicherheit in der Informationstechnik Software\nCopyright (c) 2014 Code GmbH\nCopyright (c) 2013 Daniel Mullner <muellner@math.stanford.edu>\nCopyright (c) 2009 Dave Gamble\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2014, 2015 Google Inc.\nCopyright (c) 2009 Horst Knorr <hk_classes@knoda.org>\nCopyright (c) 2004-2008 Igor Belyi\nCopyright (c) 2004 Igor Belyi <belyi@users.sourceforge.net>\nCopyright (c) 2016 Intevation GmbH\nCopyright (c) 2002 John Goerzen\nCopyright (c) 2002 John Goerzen <jgoerzen@complete.org>\nCopyright (c) 2002 Klaralvdalens Datakonsult AB\nCopyright (c) 2003,2004 Klaralvdalens Datakonsult AB 2016 Bundesamt fur Sicherheit in der Informationstechnik Software\nCopyright (c) 2003, 2007 Klaralvdalens Datakonsult AB 2017, 2018 Intevation GmbH\nCopyright (c) 2009 Klaralvdalens Datakonsult AB <info@kdab.com>\nCopyright (c) 2004 Klaravdalens Datakonsult AB\nCopyright (c) 2014, 2015 Martin Albrecht\nCopyright (c) 2014, 2015 Martin Albrecht <martinralbrecht@googlemail.com>\nCopyright (c) 1999 Masanao Izumo <iz@onicos.co.jp>\nCopyright (c) 2009 Matteo Settenvini <matteo@member.fsf.org>\nCopyright (c) 2015 Moritz Klammler <moritz@klammler.eu>\nCopyright (c) 2011 Murray Cumming <murrayc@openismus.com>\nCopyright (c) 2015 Paul Norman <penorman@mac.com>\nCopyright (c) 2008 Rafael Laboissiere <rafael@laboissiere.net>\nCopyright (c) 2013 Roy Stogner <roystgnr@ices.utexas.edu>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2008 Sebastian Huber <sebastian-huber@web.de>\nCopyright (c) The GnuPG Project\nCopyright (c) The Internet Society (1998)\nCopyright (c) 2000 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Zack Weinberg <zackw@panix.com>\nCopyright (c) 2016 by Bundesamt fur Sicherheit\nCopyright (c) 2001-2021 g10 Code GmbH\nCopyright (c) 2020 g10 Code GmbH Software\nCopyright 2001-2021 g10 Code GmbH\ncopyright 2018, The GnuPG",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/gpgme-1.15.1-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-KjqHzwJiQaYbdMabtfu8NNHhlB69MIxSEN4qaoi3Zk/gpgme-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/gpgme@1.15.1-6.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://gnupg.org/related_software/gpgme/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/gpgme",
    "versionInfo" : "1.15.1-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-graphite2-1.3.14-9.el9-arch-x86-64",
    "copyrightText" : "Copyright, Family, Subfamily, UniqueSubfamily, Fullname, Version, PostScript\nCopyright 2004-2010, Marcus Holland-Moritz <mhx-cpan@gmx.net> 2001, Paul Marquess <pmqs@cpan.org>\nCopyright 2010 Martin Hosken <martin_hosken@sil.org>\nCopyright 2010 Martin Hosken <martin_hosken@sil.org> 2011 Rene Engelhard <rene@debian.org>\nCopyright 2010, SIL International\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1995-2006 International Business Machines Corporation and others\nCopyright (c) 2004 Keith Stribley\nCopyright (c) 1999, Kenneth Albanowski\nCopyright (c) 2004-2009, Marcus Holland-Moritz\nCopyright (c) 2001, Paul Marquess\nCopyright (c) 2010-2011, SIL International\nCopyright (c) 2011 Simon Cozens\nCopyright (c) 2011 Simon Cozens <simon@cpan.org>\nCopyright (c) 2005 www.thanlwinsoft.org\nCopyright (c) 2005 www.thanlwinsoft.org, SIL International Responsibility Keith Stribley, Martin Hosken\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/graphite2-1.3.14-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Is_6xbDWNrJsQnWXj0fIe6xa7EnPeqAu-uG3_lig3Tw/graphite2-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/graphite2@1.3.14-9.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://sourceforge.net/projects/silgraphite/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/graphite2",
    "versionInfo" : "1.3.14-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-grep-3.6-5.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 1992, 1997-2002, 2004-2020 Free Software Foundation, Inc.\nCopyright (c) 1997-99, 2000, 2001, 2002 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2001, 2002, 2003 Free Software Foundation, Inc. Ales Nyakhaychyk <nab@mail.by> , 2001-2003\nCopyright (c) 1996, 1997, 2019 Free Software Foundation, Inc. Bang Jun-Young <bangjy@geocities.com> , 1996-1997. Seong-ho Cho <darkcircle.0426@gmail.com> , 2019, 2020\nCopyright (c) 2002, 2005 Free Software Foundation, Inc. Eli Zaretskii <eliz@gnu.org> , 2005\nCopyright (c) 2003 Free Software Foundation, Inc. Eugen Hoanca <eugenh@urban-grafx.ro> , 2003. Florentina Musat <florentina.musat.28@gmail.com> , 2020\nCopyright (c) 2004 Free Software Foundation, Inc. Mikel Olasagasti <hey_neken@mundurat.net> , 2004, 2005\nCopyright (c) 2005 Free Software Foundation, Inc. Nilgun Belma Buguner <nilgun@superonline.com> , 2001\nCopyright (c) 2004 Free Software Foundation, Inc. Petri Jooste <rkwjpj@puk.ac.za> , 2004\nCopyright (c) 1998, 2002 Free Software Foundation, Inc. Simos Xenitellis <simos@hellug.gr> , 1998, 2002. Savvas Radevic <vicedar@gmail.com> , 2012\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2020\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\n(c) 1988, 1992-2002, 2004, 2005 Erkin Programma Fondu\n(c) 1988, 1992-2001 Free Software Foundation, Inc.\n(c) Internal macro Tests",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/g/grep-3.6-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/grep@3.6-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DCmq0Q9y786KsY097rpQYRhd4mQDLn8gvBlpgp3_8M4/grep-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/grep/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/grep",
    "versionInfo" : "3.6-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-guava-31.0.1-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Adomas Paltanavicius; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben L. Titzer; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; David Richter; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Eamonn McManus; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; George van den Driessche; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Jige Yu; Jim McMaster; Johannes Henkel; John Sirois; Jon Donovan; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luiz-Otavio Zorzella; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Cripps; Mike Ward; Miles Barr; Nicholaus Shupe; Nick Kralevich; Nick Piepmeier; Nikita Sidorov; Nishant Thakkar; Omar Darwish; Osvaldo Doederlein; Paul Lindner; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Regina O'Dell; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zach van Schouwen; code CacheBuilder",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/g/guava-31.0.1-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/guava@31.0.1-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/q5ZRHWIstf4VVXmFD8FEvvK4imOk38R4sUH2Ly1cT0A/guava-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(Apache-2.0 AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/guava",
    "versionInfo" : "31.0.1-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-harfbuzz-2.7.4-10.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2006 Behdad Esfahbod\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Codethink Limited\nCopyright (c) 2005 David Turner\nCopyright (c) 1998-2004 David Turner and Werner Lemberg\nCopyright (c) 2018,2019,2020 Ebrahim Byagowi\nCopyright (c) 2019,2020 Facebook, Inc.\nCopyright (c) 2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020 Google, Inc.\nCopyright (c) 2009 Keith Stribley\nCopyright (c) 2009 Martin Hosken and SIL International\nCopyright (c) 2012 Mozilla Foundation\nCopyright (c) 2008,2010 Nokia Corporation and/or its subsidiary(-ies)\nCopyright (c) 2004,2007,2008,2009,2010 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/h/harfbuzz-2.7.4-10.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/harfbuzz@2.7.4-10.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t_0DwWqGSXfcdlB00ef8yLUTLj_2b4WT391k2XX4xCo/harfbuzz-~-10.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://harfbuzz.github.io/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/harfbuzz",
    "versionInfo" : "2.7.4-10.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-httpcomponents-client-4.5.13-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 1999-2020 The Apache Software Foundation\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/h/httpcomponents-client-4.5.13-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/httpcomponents-client@4.5.13-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uFxU52_sqnVmULy15yKlHsMUjSRFC4j_Z-q5w_NgD3A/httpcomponents-client-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/httpcomponents-client",
    "versionInfo" : "4.5.13-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-httpcomponents-core-4.4.13-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2005-2020 The Apache Software Foundation\nCopyright 2005-2022 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/h/httpcomponents-core-4.4.13-8.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/httpcomponents-core@4.4.13-8.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jvQ9g9BfhrdsETtJ1rp2uWwrVh-VO3VABA06aHuNsB4/httpcomponents-core-~-8.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/httpcomponents-core",
    "versionInfo" : "4.4.13-8.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jakarta-annotations-1.3.5-15.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "COPYRIGHT HOLDERS AND THE ECLIPSE FOUNDATION\nCopyright (c) 2017, 2019 Contributors to the Eclipse Foundation\nCopyright (c) 2018 Eclipse Foundation\nCopyright (c) 2019 Eclipse Foundation\nCopyright (c) Eclipse Foundation, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2012, 2018 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to the Eclipse Foundation; Eclipse Foundation; Eclipse Foundation, Inc.; Free Software Foundation, Inc.; Oracle and/or its affiliates; THE ECLIPSE FOUNDATION; the Free Software Foundation; the Jakarta Annotations project",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jakarta-annotations-1.3.5-15.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SxAAUSxlGyHpT7sF6Qufd1DDqwB8LTncwi1YfUISke0/jakarta-annotations-~-15.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jakarta-annotations@1.3.5-15.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/common-annotations-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jakarta-annotations",
    "versionInfo" : "1.3.5-15.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jansi-2.4.0-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-x86-64-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2009-2017 the original",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jansi-2.4.0-7.module+el9.4.0+21292+f76c4bf2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XTgP8TyuJqhf3NwZKUpHHCSBq4mrL-4-6dKqHUt8UWQ/jansi-~-7.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jansi@2.4.0-7.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=x86_64&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://fusesource.github.io/jansi/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jansi",
    "versionInfo" : "2.4.0-7.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-java-21-openjdk-devel-21.0.8.0.9-1.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright (c) 1996 Netscape Communications Corporation\nCopyright (c) 1994, 2020, Oracle and/or its affiliates\nCopyright (c) 2009, Red Hat Inc.\n(c) 2006 VeriSign, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/java-21-openjdk-devel-21.0.8.0.9-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mgx5j67o18RCMktJyi6uEXXnSv7BQj4GQh-OusoQSAk/java-21-openjdk-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/java-21-openjdk-devel@21.0.8.0.9-1.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.org/",
    "licenseConcluded" : "(Zlib AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/java-21-openjdk-devel",
    "versionInfo" : "21.0.8.0.9-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-java-21-openjdk-headless-21.0.8.0.9-1.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1996 Chih-Hao Tsai @ Beckman Institute, University of Illinois c-tsai4@uiuc.edu http://casper.beckman.uiuc.edu/~c-tsai4\nCopyright 1994 Hewlett-Packard Co.\nCopyright 2012-2024 JP Aumasson\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2000, 2001, 2002, 2003 Nara Institute of Science and Technology\nCopyright OpenJS Foundation and other contributors, https://openjsf.org\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 1996, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 1996-2003 by Elliot Joel Berk and C. Scott Ananian\nCopyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter\nCopyright (c) 2018-2019 Adobe Inc.\nCopyright (c) 2006-2014 Adobe Systems Incorporated\nCopyright (c) 2013-2015 Alexei Podtelezhnikov\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2009-2013, Attila Szegedi\nCopyright (c) 2006-2025 Behdad Esfahbod\nCopyright (c) 2013 Brian Eugene Wilson, Robert Martin Campbell\nCopyright (c) 1999-2006 Brian Paul\nCopyright (c) 2007 Chris Wilson\nCopyright (c) 2011 Codethink Limited\nCopyright (c) 2021 Collabora Ltd.\nCopyright (c) 1999 Computer Systems and Communication Lab, Institute of Information Science, Academia Sinica\nCopyright (c) 2000 Computing Research Labs, New Mexico State University\nCopyright (c) 2018-2025 Cosmin Truta\nCopyright (c) 1999 David Corcoran <corcoran@musclecard.com>\nCopyright (c) 1999 David Turner\nCopyright (c) 1998-2004 David Turner and Werner Lemberg\nCopyright (c) 2018-2020 Ebrahim Byagowi\nCopyright (c) 2016 Elie Roux <elie.roux@telecom-bretagne.eu>\nCopyright (c) 1997 Eric S. Raymond\nCopyright (c) 2019 Facebook, Inc.\nCopyright (c) 2000-2011 France Telecom\nCopyright (c) 2001-2015 Francesco Zappa Nardelli\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2006-2008, Google Inc.\nCopyright (c) 2002 Graz University of Technology\nCopyright (c) 2012 Grigori Goronzy <greg@kinoho.net>\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 2016 Igalia S.L.\nCopyright (c) 1995-2016 International Business Machines Corporation and others\nCopyright (c) 2016 Jean-Philippe Aumasson <jeanphilippe.aumasson@gmail.com>\nCopyright (c) 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright (c) 2009 Keith Stribley\nCopyright (c) 2018 Khaled Hosny\nCopyright (c) 2013, LeRoy Benjamin Sharon\nCopyright (c) 2002-2009 Ludovic Rousseau <ludovic.rousseau@free.fr>\nCopyright (c) 1998-2025 Marti Maria Saguer\nCopyright (c) 2005 Martin Paljak <martin@paljak.pri.ee>\nCopyright (c) 2022 Matthias Clasen\nCopyright (c) 2015 Mozilla Foundation\nCopyright (c) 1998 National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government\nCopyright (c) OASIS Open 2023\nCopyright (c) 1994, 2024, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 1999 Pai-Hsiang Hsiao\nCopyright (c) 2004-2015 Paul R. Holser, Jr\nCopyright (c) 2023 PipeWire authors\nCopyright (c) 2004-2013 Red Hat, Inc.\nCopyright (c) 1999 TaBE Project\nCopyright (c) 1995-2025 The\nCopyright (c) 1995-2005 The Cryptix Foundation Limited\nCopyright (c) 2008 - 2018 The Khronos Group Inc.\nCopyright (c) 1982 The Royal Institute, Thai Royal Government\nCopyright (c) 1991-1998, Thomas G. Lane\nCopyright (c) 1998, Thomas G. Lane Caution\nCopyright (c) 1991-2022 Unicode, Inc.\nCopyright (c) 2016 Unicode, Inc. and others\nCopyright (c) 2009 VMware, Inc.\nCopyright (c) 2005 Werner Lemberg\nCopyright (c) 2018-2023 Wim Taymans\nCopyright (c) 2004 World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) 2012 Zilong Tan (eric.zltan@gmail.com)\nCopyright (c) 2007-2024 by David Turner\nCopyright (c) 2018-2024 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams\nCopyright (c) 1996-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2007-2024 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2024 by Derek Clegg and Michael Toftdal\nCopyright (c) 2013-2024 by Google, Inc.\nCopyright (c) 1996-2024 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2024 by Masatake YAMATO, Red Hat K.K.\nCopyright (c) 2004-2024 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2019-2024 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2024 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2024 by Rahul Bhalerao <rahul.bhalerao@redhat.com>\nCopyright (c) 2001, softSurfer (www.softsurfer.com)\nCopyright (c) 2002-2023, the original author or authors\nCopyright jQuery Foundation and other contributors, https://jquery.org\nCopyright property of CompuServe Incorporated\nCopyright 2006-2011, the V8 project authors\nPortions Copyright Eastman Kodak Company 1991-2003\nat iClick, Inc., software copyright (c) 1999\n(c) 2006 Entrust, Inc.\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net Limited\n(c) 2024 Unicode(r), Inc.\n(c) 2009 by Remo Dentato (rdentato@gmail.com)\ncopyright (c) 1999, IBM Corporation., http://www.ibm.com\ncopyright (c) 2001, Institute\ncopyright (c) 1999-2002, Lotus Development Corporation., http://www.lotus.com\ncopyright (c) 1999, Sun Microsystems., http://www.sun.com\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\n\nAuthors: Adobe Inc.; Adobe Systems Incorporated; Alexei Podtelezhnikov; Andreas Dilger; Attila Szegedi; Behdad Esfahbod; Brian Eugene Wilson, Robert Martin Campbell; Brian Paul; Chih-Hao Tsai @ Beckman Institute, University of Illinois; Chris Wilson; Codethink Limited; Collabora Ltd.; CompuServe Incorporated; Computer Systems and Communication Lab, Institute of Information Science, Academia Sinica; Computing Research Labs, New Mexico State University; Cosmin Truta; David Corcoran; David Turner; David Turner and Werner Lemberg; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg, George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Eastman Kodak Company; Ebrahim Byagowi; Elie Roux; Elliot Joel Berk and C. Scott Ananian; Entrust, Inc.; Entrust, Inc. - for; Entrust.net Limited; Eric S. Raymond; Facebook, Inc.; France Telecom; Francesco Zappa Nardelli; Free Software Foundation, Inc.; Glenn Randers-Pehrson; Google Inc.; Google, Inc.; Graz University of Technology; Grigori Goronzy; Guy Eric Schalnat, Group 42, Inc.; Hewlett-Packard Co.; IBM Corporation; Igalia S.L.; Institute; International Business Machines Corporation and others; JP Aumasson; Jean-Philippe Aumasson; Jean-loup Gailly and Mark Adler; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Keith Stribley; Khaled Hosny; LeRoy Benjamin Sharon; Lotus Development Corporation; Ludovic Rousseau; Mark Adler; Marti Maria Saguer; Martin Paljak; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K.; Matthias Clasen; Mozilla Foundation; Nara Institute of Science and Technology; National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; OASIS Open; OpenJS Foundation and other contributors; Oracle and/or its affiliates; Oran Agra and Mickey Gabel; Otto Moerbeek; Ovidiu Predescu (ovidiu@cup.hp.com); Pai-Hsiang Hsiao; Paul R. Holser, Jr; PipeWire authors; Rahul Bhalerao; Red Hat, Inc.; Remo Dentato; Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter; Sun Microsystems; TaBE Project; The Apache Software Foundation; The Apache Software Foundation (http://www.apache.org/); The Cryptix Foundation Limited; The FreeType Project; The Khronos Group Inc.; The Open Group; The Royal Institute, Thai Royal Government; Thomas G. Lane; Thomas G. Lane Caution; Unicode(r), Inc.; Unicode, Inc.; Unicode, Inc. and others; VMware, Inc.; Werner Lemberg; Wim Taymans; World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University); Zilong Tan; iClick, Inc., software; jQuery Foundation and other contributors; softSurfer; the Free Software Foundation; the V8 project authors; the original author or authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/java-21-openjdk-headless-21.0.8.0.9-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_n9tO2kIfZW8f_Buq4fcx9RKZDdIyb6yUV-CkgyQ2AQ/java-21-openjdk-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/java-21-openjdk-headless@21.0.8.0.9-1.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.org/",
    "licenseConcluded" : "(Zlib AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/java-21-openjdk-headless",
    "versionInfo" : "21.0.8.0.9-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-java-21-openjdk-21.0.8.0.9-1.el9-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 1995-2024 Jean-loup Gailly and Mark Adler Screen\nCopyright 1995-2024 Mark Adler\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2018-2025 Cosmin Truta\nCopyright (c) 1998-2002,2004,2006-2018 Glenn Randers-Pehrson\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 1998, Thomas G. Lane Caution",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/java-21-openjdk-21.0.8.0.9-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mgx5j67o18RCMktJyi6uEXXnSv7BQj4GQh-OusoQSAk/java-21-openjdk-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/java-21-openjdk@21.0.8.0.9-1.el9?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://openjdk.org/",
    "licenseConcluded" : "(Zlib AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND LGPL-2.0-or-later AND GPL-2.0-only AND LicenseRef-Public-Domain AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND FTL)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/java-21-openjdk",
    "versionInfo" : "21.0.8.0.9-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-javapackages-filesystem-6.4.0-1.el9-arch-noarch",
    "copyrightText" : "Copyright (c) 2000-2006, JPackage Project\nCopyright (c) 2011-2015 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/javapackages-filesystem-6.4.0-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7ZyLdvTGEEEdsxhaeMsDQECVBKLt-0Vi64v_Yhbe_PA/javapackages-tools-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/javapackages-filesystem@6.4.0-1.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fedora-java/javapackages",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/javapackages-filesystem",
    "versionInfo" : "6.4.0-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jcl-over-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 1999-2005 The Apache Software Foundation\nCopyright (c) 2000-2009, JPackage Project\nCopyright (c) 2004-2007 QOS.ch\nCopyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2013 QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2004-2017 http://www.qos.ch/> QOS.ch",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jcl-over-slf4j-1.7.32-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jcl-over-slf4j@1.7.32-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_uIIY3rMEEU5n6EVxvtp8r2LGrT0tp2jkkscsQTw-80/slf4j-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jcl-over-slf4j",
    "versionInfo" : "1.7.32-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-json-c-0.14-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 2018 Google Inc.\nCopyright (c) 2016 Alexadru Ardelean\nCopyright (c) 2016 Alexandru Ardelean\nCopyright (c) 2009-2012 Eric Haszlakiewicz\nCopyright (c) 2020 Eric Hawicz\nCopyright (c) 2009 Hewlett-Packard Development Company, L.P.\nCopyright (c) 2004, 2005 Metaparadigm Pte Ltd\nCopyright (c) 2004, 2005 Metaparadigm Pte. Ltd. Michael Clark <michael@metaparadigm.com>\nCopyright (c) 2008-2009 Yahoo! Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/j/json-c-0.14-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/json-c@0.14-11.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D5MXo0Dzmk51MLNqmSuVtBz_CvdTPj8Yc0nlLuNSGMI/json-c-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/json-c/json-c",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/json-c",
    "versionInfo" : "0.14-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-json-glib-1.6.6-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 2010, 2012 Adobe Systems Inc.\nCopyright 2013 Emmanuele Bassi\nCopyright 2021 GNOME Foundation\nCopyright 2020 GNOME Foundation <https://gnome.org>\nCopyright 2009, 2010, 2011, 2012 Intel Corp.\nCopyright 2014 John Hawthorn\nCopyright 2007, 2008 OpenedHand Ltd\nCopyright 2019 Red Hat Inc.\nCopyright 2021 Simon McVittie\nCopyright 2001 Vivake Gupta <v@nano.com>\nCopyright (c) 2015 Collabora Ltd.\nCopyright (c) 2013 Emmanuele Bassi\nCopyright (c) 2012 Emmanuele Bassi <ebassi@gnome.org>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2010 IETF Trust and the persons identified as the document authors\nCopyright (c) 2009 Intel Corp.\nCopyright (c) 2014 John Hawthorn\nCopyright (c) 2010 Luca Bruno <lethalman88@gmail.com>\nCopyright (c) 2008 OpenedHand\nCopyright (c) 2007 OpenedHand Ltd\nCopyright (c) 2012 Seong-ho Cho\nCopyright (c) 2012, Swecha Localisation Team <localization@swecha.net>\nCopyright (c) 2014 THE json-glib'S\nCopyright (c) The Internet Society (2006)\nCopyright (c) 1997, 1998 Tim Janik\nCopyright (c) 2012 json-glib\nCopyright (c) 2012 json-glib authors\nCopyright (c) 2011 json-glib's\nCopyright (c) 2012 json-glib's authors and contributors\nCopyright (c) 2012-2013, 2017-2018 json-glib's developers\nCopyright (c) 2011-2018 the json-glib\n\nAuthors: Adobe Systems Inc.; Collabora Ltd.; Douglas Crockford douglas@crockford.com; Eduardo Lima Mitev <elima@igalia.com>; Emmanuele Bassi; Emmanuele Bassi <ebassi@gnome.org>; Emmanuele Bassi <ebassi@linux.intel.com>; Emmanuele Bassi <ebassi@linux.intel.com> Philip Withnall <philip.withnall@collabora.co.uk>; Emmanuele Bassi <ebassi@openedhand.com>; Evelyn Waugh; Free Software Foundation, Inc.; GNOME Foundation; GTK Development Team; Herman Melville; IETF Trust and the persons identified as the document authors; Intel Corp.; J. R. R. Tolkien; John Hawthorn; Luca Bruno; Luca Bruno <lethalman88@gmail.com>; Luca Bruno <lethalman88@gmail.com> Philip Withnall <philip.withnall@collabora.co.uk>; Nigel Rees; OpenedHand; OpenedHand Ltd; Red Hat Inc.; Red Hat, Inc.; Seong-ho Cho; Simon McVittie; Swecha Localisation Team; THE json-glib'S; The Internet Society; Tim Janik; Vivake Gupta; json-glib; json-glib authors; json-glib's; json-glib's authors and contributors; json-glib's developers; the Ada Initiative and other volunteers (http://geekfeminism.wikia.com/wiki/Conference_anti-harassment/Policy); the Free Software Foundation; the json-glib",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/j/json-glib-1.6.6-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/json-glib@1.6.6-1.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/48T4-n9dXvrGdem-1n2ruiuZauk8t_TRW_8YOKKv7CQ/json-glib-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/JsonGlib",
    "licenseConcluded" : "(GPL-3.0-or-later AND Apache-2.0 AND CC0-1.0 AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/json-glib",
    "versionInfo" : "1.6.6-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-jsr-305-3.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2005 Brian Goetz\nCopyright (c) 2007-2009, JSR305 expert group",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/j/jsr-305-3.0.2-7.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/jsr-305@3.0.2-7.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IogAAQOYbTfw-AU8zFOoC8vm7ea_la4XMQ6nI3qtNvE/jsr-305-~-7.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://code.google.com/p/jsr-305",
    "licenseConcluded" : "(BSD-3-Clause AND CC-BY-2.5)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/jsr-305",
    "versionInfo" : "3.0.2-7.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-keyutils-libs-1.6.3-1.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) David Howells (dhowells@redhat.com) 2018\nCopyright (c) 1989, 1991 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2016 Intel Corporation\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) Wang Lei (wang840925@gmail.com) 2010",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/k/keyutils-libs-1.6.3-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/keyutils-libs@1.6.3-1.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/evfF3iAL4C3tZKIKvbza9P7drUXp7XAkXCm52GnwnkM/keyutils-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git",
    "licenseConcluded" : "(GPL-2.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/keyutils-libs",
    "versionInfo" : "1.6.3-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-krb5-libs-1.21.1-8.el9-6-arch-x86-64",
    "copyrightText" : "COPYRIGHT (c) 2006,2007 - THE\nCopyright 1985-2023\nCopyright 2006 Andreas Jellinghaus\nCopyright 2004-2008 Apple Inc.\nCopyright 1997, 1998, 1999 Computing Research Labs\nCopyright 1997, 1998, 1999 Computing Research Labs, New Mexico State University\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 1985, 1986, 1989 -1996, 2002, 2011, 2018 Masachusetts Institute of Technology\nCopyright 1990,1991,1992,1993,1994,2000,2004 Massachusetts Institute of Technology\nCopyright 1987, 1988, 1989 Massachusetts Institute of Technology (Student Information Processing Board)\nCopyright 2011 NORDUnet A/S.\nCopyright, OpenVision Technologies, Inc., 1993-1996\nCopyright 2011 Red Hat, Inc.\nCopyright 2007 Secure Endpoints Inc.\nCopyright 1988, Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright 2003 Sun Microsystems, Inc.\nCopyright 1998-2008 The OpenLDAP Foundation\nCopyright 1999-2003 The OpenLDAP Foundation, Redwood City, California, USA.\nCopyright 2000 by Carnegie Mellon University\nCopyright 1995 by Cygnus\nCopyright 1995 by Lehman Brothers, Inc.\nCopyright 1987, 1988, 1989 by Massachusetts Institute of Technology\nCopyright 1993 by OpenVision Technologies, Inc.\nCopyright 1995 by Richard P. Basch\nCopyright 2007 by Secure Endpoints Inc.\nCopyright 1996 by Sun Microsystems, Inc.\nCopyright 1999 by Theodore Ts'o\nCopyright 2000 by Zero-Knowledge Systems, Inc.\nCopyright 1985, 1986, 1987, 1988, 1990 by the Massachusetts Institute\nCopyright 1990,1991,2007,2008 by the Massachusetts Institute of Technology\nCopyright 1997 by the Regents of the University of Michigan\nCopyright 1987 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1995\nCopyright (c) 1984, 1985 Adobe Systems Incorporated\nCopyright (c) 2008 Alexandre Duret-Lutz <adl@gnu.org>\nCopyright (c) 2007 Apple Inc.\nCopyright (c) 1998-2013, Brian Gladman, Worcester, UK.\nCopyright (c) 1994 CyberSAFE Corporation\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 2001, Dr Brian Gladman <brg@gladman.uk.net> , Worcester, UK. par\nCopyright (c) 2000 Dug Song\nCopyright (c) 2000 Dug Song dugsong@UMICH.EDU\nCopyright (c) 1984, 1989-1990, 2000-2015 Free Software Foundation, Inc.\nCopyright (c) 2015-2016, Google Inc.\nCopyright (c) Hewlett-Packard Company 1991\nCopyright (c) 2010, Intel Corporation\nCopyright (c) 2006 Kungliga Tekniska Hogskola\nCopyright (c) 2006 Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1995, 1996, 1997 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2007,2008,2009 Marc Alexander Lehmann\nCopyright (c) 2007,2008,2009 Marc Alexander Lehmann <libev@schmorp.de>\nCopyright (c) 2019 Marc Stevens <marc.stevens@cwi.nl>\nCopyright (c) 1994, 1995 Margo I. Selzer\nCopyright (c) 2005 Marko Kreen\nCopyright (c) 2006 Massachusetts Institute of Technology\nCopyright (c) 1988 Massachusetts Institute of Technology, Student Information Processing Board\nCopyright (c) 2006,2007,2009 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 2002 Naval Research Laboratory\nCopyright (c) 2004-2005, Novell, Inc.\nCopyright (c) 2010, Oracle America, Inc.\nCopyright (c) 2011, PADL Software Pty Ltd.\nCopyright (c) 1990, RSA Data Security, Inc.\nCopyright (c) 1990-2, RSA Data Security, Inc.\nCopyright (c) 2006 Red Hat, Inc.\nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1985, 1986, 1988 Richard M. Stallman\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2006 Secure Endpoints Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2004 Sun Microsystems, Inc.\nCopyright (c) 1997, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 1995 The President and Fellows of Harvard University\nCopyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 2000 The Regents of the University of Michigan\nCopyright (c) 1999-2000, The University of Chicago\nCopyright (c) 1998 Todd C. Miller\nCopyright (c) 1998 Todd C. Miller Todd.Miller@courtesan.com\nCopyright (c) 2022 United States Government as represented by the Secretary of the Navy\nCopyright (c) 1994 X Consortium\nCopyright (c) 2017 by Cloudera, Inc.\nCopyright (c) 2000 by Computer Science Laboratory, Rensselaer Polytechnic Institute\nCopyright (c) 1991, 1992, 1994 by Cygnus\nCopyright (c) 1998 by Danilo Almeida\nCopyright (c) 2016 by Red Hat, Inc.\nCopyright (c) 1995, by Sun Microsystems, Inc.\nCopyright (c) 1998 by the FundsXpress, INC.\nCopyright (c) 1985-2023 by the Massachusetts Institute of Technology\nCopyright (c) 1989-1994 by the Massachusetts Institute of Technology, Cambridge, MA, USA.\nCopyright (c) 1985-2023 by the Massachusetts Institute of Technology and its contributors\nCopyright (c) 1985-2012 by the Massachusetts Institute of Technology. par par\nCopyright (c) 1994 by the University of Southern California\nCopyright copy 1991, 1992, 1994\nCopyright copy 1998-2013, Brian Gladman, Worcester, UK.\nCopyright copy 1994 CyberSAFE Corporation\nCopyright copy 2000 Dug Song dugsong@UMICH.EDU\nCopyright copy 2010, Intel Corporation\nCopyright copy 2006 Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden)\nCopyright copy 2006,2007,2009 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright copy 2002 Naval Research Laboratory\nCopyright copy 2004-2005, Novell, Inc.\nCopyright copy 2010, Oracle America, Inc.\nCopyright copy 1990, RSA Data Security, Inc.\nCopyright copy 1990-2, RSA Data Security, Inc.\nCopyright copy 2006 Red Hat, Inc.\nCopyright copy 1983 Regents of the University of California\nCopyright copy 2006 Secure Endpoints Inc.\nCopyright copy 2004 Sun Microsystems, Inc.\nCopyright copy 1997, 1998 The NetBSD Foundation, Inc.\nCopyright copy 1995 The President and Fellows of Harvard University\nCopyright copy 2000 The Regents of the University of Michigan\nCopyright copy 1998 Todd C. Miller Todd.Miller@courtesan.com\nCopyright copy 2022 United States Government as represented by the Secretary of the Navy\nCopyright copy 1998 by the FundsXpress, INC.\nCopyright copy 1985-2023 by the Massachusetts Institute of Technology\nCopyright copy 1985-2023 by the Massachusetts Institute of Technology and its contributors\nCopyright copy 1994 by the University of Southern California\nCopyright (c) 2015-2016 the fiat-crypto authors\nCopyright 2006 g10 Code GmbH\nCopyright 1990,1991 the Massachusetts Institute of Technology\nPortions Copyright (c) 2009 Apple Inc.\nPortions Copyright copy 2009 Apple Inc.\nPortions copyright (c) 2006 Massachusetts Institute of Technology\nPortions copyright copy 2006 Massachusetts Institute of Technology\nRem Copyright 1995 by the Massachusetts Institute of Technology. Rem\n(c) Copyright 2006, Novell, Inc.\n(c) Copyright 1990,1991, 1996, 2008 by the Massachusetts Institute of Technology\n(c) 2011 Emanuele Giaquinta\n(c) 2009-2015 Marc Alexander Lehmann <libecb@schmorp.de>\n(c) N 1994\n(c) 1987 SMI\n(c) Y 1978\ncopyright MIT, Cygnus Support, Novell, OpenVision Technologies, Oracle, Red Hat, Sun Microsystems, FundsXpress, and others\ncopyright MIT, Cygnus Support, OpenVision, Oracle\n\nAuthors: Adobe Systems Incorporated; Alexandre Duret-Lutz; Andreas Jellinghaus; Andreas Schneider <asn@redhat.com>; Andrew Bartlet; Apple Inc.; Barr3y Jaspan, Student; Barry Jaspan; Barry Jaspan of OpenVision Technologies, Inc.; Brian Gladman, Worcester, UK.; Carnegie Mellon University; Cloudera, Inc.; Computer Science Laboratory, Rensselaer Polytechnic Institute; Computing Research Labs; Computing Research Labs, New Mexico State University; CyberSAFE Corporation; Cygnus; Dan Nicholson; Daniel J. Bernstein, <brnstnd@acf10.nyu.edu>; Daniel Richard G.; Danilo Almeida; Dr Brian Gladman , Worcester, UK. par; Dug Song; Dug Song dugsong@UMICH.EDU'; Edward Wang (edward@ucbarpa.berkeley.edu); Emanuele Giaquinta; Frank Dabek; Fred Drake; Free Software Foundation, Inc.; Glen Machin at Sandia; Google Inc.; Hewlett-Packard Company; Intel Corporation; Jeffrey Altman <jaltman@mit.edu>; Jonathan I. Kamens; Joseph D. Touch <touch@isi.edu>; Ken Raeburn; Kungliga Tekniska Hogskola; Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden); Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lehman Brothers, Inc.; MIT, Cygnus Support, Novell, OpenVision Technologies, Oracle, Red Hat, Sun Microsystems, FundsXpress, and others; MIT, Cygnus Support, OpenVision, Oracle; Marc Alexander Lehmann; Marc Stevens; Margo I. Selzer; Marko Kreen; Masachusetts Institute of Technology; Massachusetts Institute of Technology; Massachusetts Institute of Technology (Student Information Processing Board); Massachusetts Institute of Technology, Student Information Processing Board; Matt Crawford <crawdad@fnal.gov>; Matt Crawford crawdad@fnal.gov; N; NORDUnet A/S.; NTT (Nippon Telegraph and Telephone Corporation); Naval Research Laboratory; Noah Friedman <friedman@prep.ai.mit.edu>; Novell, Inc.; OpenVision Technologies, Inc.; Oracle America, Inc.; PADL Software Pty Ltd.; RSA Data Security, Inc.; Red Hat, Inc.; Regents of the University of California; Rem by the Massachusetts Institute of Technology. Rem; Rewritten by Theodore Ts'o; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard M. Stallman; Richard P. Basch; Richard Stallman; SMI; Scott James Remnant; Secure Endpoints Inc.; Steven G. Johnson; Steven M. Bellovin <smb@research.att.com>; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems, Inc.; THE REGENTS OF THE UNIVERSITY OF MICHIGAN; The NetBSD Foundation, Inc.; The OpenLDAP Foundation; The OpenLDAP Foundation, Redwood City, California, USA.; The President and Fellows of Harvard University; The Regents of the University of California; The University of Chicago; Theodore Ts'o; Todd C. Miller; Tom Yu at MIT; United States Government as represented by the Secretary of the Navy; W. David Shambroom <DShambroom@gte.com>; X Consortium; Y; Zero-Knowledge Systems, Inc.; copy; copy Apple Inc.; copy Brian Gladman, Worcester, UK.; copy CyberSAFE Corporation; copy Dug Song dugsong@UMICH.EDU''; copy Intel Corporation; copy Kungliga Tekniska Hogskola (Royal Institute of Technology, Stockholm, Sweden); copy Massachusetts Institute of Technology; copy NTT (Nippon Telegraph and Telephone Corporation); copy Naval Research Laboratory; copy Novell, Inc.; copy Oracle America, Inc.; copy RSA Data Security, Inc.; copy Red Hat, Inc.; copy Regents of the University of California; copy Secure Endpoints Inc.; copy Sun Microsystems, Inc.; copy THE REGENTS OF THE UNIVERSITY OF MICHIGAN; copy The NetBSD Foundation, Inc.; copy The President and Fellows of Harvard University; copy Todd C. Miller; copy United States Government as represented by the Secretary of the Navy; copy by the FundsXpress, INC.; copy by the Massachusetts Institute of Technology; copy by the Massachusetts Institute of Technology and its contributors; copy by the University of Southern California; g10 Code GmbH; rharwood@redhat.com; the FundsXpress, INC.; the Massachusetts Institute; the Massachusetts Institute of Technology; the Massachusetts Institute of Technology and its contributors; the Massachusetts Institute of Technology, Cambridge, MA, USA.; the Massachusetts Institute of Technology. par par; the NetBSD Foundation, Inc. and its contributors; the Student Information Processing Board of the Massachusetts Institute of Technology; the University of California, Berkeley; the University of California, Berkeley and its contributors; the University of Michigan's Center; the University of Southern California; the fiat-crypto authors; title About",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/k/krb5-libs-1.21.1-8.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/y8l-5TclNXLksjTNzM-YkSDRG5yHRyHriec_IfH_OIc/krb5-~-8.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/krb5-libs@1.21.1-8.el9_6?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://web.mit.edu/kerberos/www/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/krb5-libs",
    "versionInfo" : "1.21.1-8.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-langpacks-core-en-3.0-16.el9-arch-noarch",
    "copyrightText" : "Copyright 2020 Parag Nemade <pnemade@fedoraproject.org>\nCopyright 2016 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/langpacks-core-en-3.0-16.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SHofomMVsXKvj1m2hVJgdHjgHKuPPfDVATZmCeRiFFU/langpacks-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/langpacks-core-en@3.0-16.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/langpacks-core-en",
    "versionInfo" : "3.0-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-langpacks-core-font-en-3.0-16.el9-arch-noarch",
    "copyrightText" : "Copyright 2020 Parag Nemade <pnemade@fedoraproject.org>\nCopyright 2016 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/langpacks-core-font-en-3.0-16.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SHofomMVsXKvj1m2hVJgdHjgHKuPPfDVATZmCeRiFFU/langpacks-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/langpacks-core-font-en@3.0-16.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/langpacks-core-font-en",
    "versionInfo" : "3.0-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-langpacks-en-3.0-16.el9-arch-noarch",
    "copyrightText" : "Copyright 2020 Parag Nemade <pnemade@fedoraproject.org>\nCopyright 2016 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/langpacks-en-3.0-16.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SHofomMVsXKvj1m2hVJgdHjgHKuPPfDVATZmCeRiFFU/langpacks-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/langpacks-en@3.0-16.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/langpacks-en",
    "versionInfo" : "3.0-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libX11-common-1.7.0-11.el9-arch-noarch",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright IBM Corporation 1993\nCopyright 2006 Josh Triplett\nCopyright 1990-1992,1999,2000,2004,2009,2010 Oracle and/or its affiliates\nCopyright 2009 Red Hat, Inc.\nCopyright 1984-1994, 1998 The Open Group\nCopyright 2000 The XFree86 Project, Inc.\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1994, 1996 X Consortium\nCopyright 1999-2000 by Bruno Haible\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991 by Digital Equipment Corporation\nCopyright 1987, 1988, 1990 by Digital Equipment Corporation, Maynard\nCopyright 1987 by Digital Equipment Corporation, Maynard, Massachusetts\nCopyright 1990, 1991, 1992, 1993, 1994 by FUJITSU LIMITED\nCopyright 1991, 1992 by Fuji Xerox Co., Ltd.\nCopyright 1993 by Fujitsu Open Systems Solutions, Inc.\nCopyright 1990, 1991 by OMRON Corporation\nCopyright 1990, 1991 by OMRON Corporation, NTT Software Corporation, and Nippon Telegraph and Telephone Corporation\nCopyright 1992 by Oki Technosystems Laboratory, Inc.\nCopyright 1993, 1994 by Sony Corporation\nCopyright 1993 by SunSoft, Inc.\nCopyright 1992, 1993 by TOSHIBA Corp.\nCopyright 1988 by Wyse Technology, Inc., San Jose, Ca\nCopyright 1993 by the FUJITSU LIMITED\nCopyright 1991 by the Open Software Foundation\nCopyright 1993, 1994 by the Sony Corporation\nCopyright 1993 by the TOSHIBA Corp.\nCopyright (c) 2008 Alexandre Oliva\nCopyright (c) 2008 Andreas Schwab <schwab@suse.de>\nCopyright (c) 1995 David E. Wexelblat\nCopyright (c) 1985, 1986, 1987, 1988, 1989, 1991 Digital Equipment Corporation\nCopyright (c) 1999-2000 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2003-2006,2008 Jamey Sharp, Josh Triplett\nCopyright (c) 2003 Keith Packard\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 2008 Stepan Kasal <kasal@ucw.cz>\nCopyright (c) 2000 The XFree86 Project, Inc.\nCopyright (c) 2007-2009, Troy D. Hanson\nCopyright (c) 1993, 1994 X Consortium\nCopyright (c) 1993, 1995 by Silicon Graphics Computer Systems, Inc.\nPortions Copyright 1990, 1991 by Tektronix, Inc\n(c) 1996\n(c) Copyright 1995 FUJITSU LIMITED\n(c) Copyright 1990 1991 Tektronix, Inc.\n(c) Copyright 1996 by Sebastien Marineau and Holger Veit <marineau@genie.uottawa.ca> <Holger.Veit@gmd.de>\n(c) U3269 CIRCLED",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libX11-common-1.7.0-11.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0dKaWw1mEbLLwlq31JyLkvK0-9k7EiSkWAC4ymQjtYM/libX11-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libX11-common@1.7.0-11.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libX11-common",
    "versionInfo" : "1.7.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libX11-1.7.0-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright IBM Corporation 1993\nCopyright 2006 Josh Triplett\nCopyright 1990-1992,1999,2000,2004,2009,2010 Oracle and/or its affiliates\nCopyright 2009 Red Hat, Inc.\nCopyright 1984-1994, 1998 The Open Group\nCopyright 2000 The XFree86 Project, Inc.\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1994, 1996 X Consortium\nCopyright 1999-2000 by Bruno Haible\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991 by Digital Equipment Corporation\nCopyright 1987, 1988, 1990 by Digital Equipment Corporation, Maynard\nCopyright 1987 by Digital Equipment Corporation, Maynard, Massachusetts\nCopyright 1990, 1991, 1992, 1993, 1994 by FUJITSU LIMITED\nCopyright 1991, 1992 by Fuji Xerox Co., Ltd.\nCopyright 1993 by Fujitsu Open Systems Solutions, Inc.\nCopyright 1990, 1991 by OMRON Corporation\nCopyright 1990, 1991 by OMRON Corporation, NTT Software Corporation, and Nippon Telegraph and Telephone Corporation\nCopyright 1992 by Oki Technosystems Laboratory, Inc.\nCopyright 1993, 1994 by Sony Corporation\nCopyright 1993 by SunSoft, Inc.\nCopyright 1992, 1993 by TOSHIBA Corp.\nCopyright 1988 by Wyse Technology, Inc., San Jose, Ca\nCopyright 1993 by the FUJITSU LIMITED\nCopyright 1991 by the Open Software Foundation\nCopyright 1993, 1994 by the Sony Corporation\nCopyright 1993 by the TOSHIBA Corp.\nCopyright (c) 2008 Alexandre Oliva\nCopyright (c) 2008 Andreas Schwab <schwab@suse.de>\nCopyright (c) 1995 David E. Wexelblat\nCopyright (c) 1985, 1986, 1987, 1988, 1989, 1991 Digital Equipment Corporation\nCopyright (c) 1999-2000 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2003-2006,2008 Jamey Sharp, Josh Triplett\nCopyright (c) 2003 Keith Packard\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek <otto@drijf.net>\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 2008 Stepan Kasal <kasal@ucw.cz>\nCopyright (c) 2000 The XFree86 Project, Inc.\nCopyright (c) 2007-2009, Troy D. Hanson\nCopyright (c) 1993, 1994 X Consortium\nCopyright (c) 1993, 1995 by Silicon Graphics Computer Systems, Inc.\nPortions Copyright 1990, 1991 by Tektronix, Inc\n(c) 1996\n(c) Copyright 1995 FUJITSU LIMITED\n(c) Copyright 1990 1991 Tektronix, Inc.\n(c) Copyright 1996 by Sebastien Marineau and Holger Veit <marineau@genie.uottawa.ca> <Holger.Veit@gmd.de>\n(c) U3269 CIRCLED",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libX11-1.7.0-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0dKaWw1mEbLLwlq31JyLkvK0-9k7EiSkWAC4ymQjtYM/libX11-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libX11@1.7.0-11.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libX11",
    "versionInfo" : "1.7.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXau-1.0.9-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1988, 1993, 1994, 1998 The Open Group\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXau-1.0.9-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXau@1.0.9-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mehmalVhS2af8OT3GW7ApozpBxE5fnxV7-4eKveJTNU/libXau-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXau",
    "versionInfo" : "1.0.9-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXcomposite-0.4.5-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2001,2003 Keith Packard\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2006, 2007, Oracle and/or its affiliates\nCopyright (c) 2006 Sun Microsystems\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXcomposite-0.4.5-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXcomposite@0.4.5-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZF0GNoOJpuOj7i8p9Msp2hAgtDCB5uCeiFyW2bUoDxY/libXcomposite-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXcomposite",
    "versionInfo" : "0.4.5-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXext-1.3.4-8.el9-arch-x86-64",
    "copyrightText" : "Copyright Digital Equipment Corporation, 1996\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1992 Network Computing Devices\nCopyright 1986, 1987, 1988, 1989, 1994, 1998 The Open Group\nCopyright 1991,1993 by Digital Equipment Corporation, Maynard, Massachusetts, and Olivetti Research Limited, Cambridge, England\nCopyright 1986, 1987, 1988 by Hewlett-Packard Corporation\nCopyright (c) 1996 Digital Equipment Corporation, Maynard, Massachusetts\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto <gabriele.svelto@gmail.com>\nCopyright (c) 1994, 1995 Hewlett-Packard Company\nCopyright (c) 1999, 2005, 2006, 2013, Oracle and/or its affiliates\nCopyright (c) 2007-2008 Peter Hutterer\nCopyright (c) 1997 Silicon Graphics, Inc.\nCopyright (c) 1989, 1994 X Consortium\nCopyright (c) 1991 X Consortium, Inc.\nCopyright (c) 1989 X Consortium, Inc. and Digital Equipment Corporation\nCopyright (c) 1994, 1995 X Consortium, Inc. and Hewlett-Packard Company\nCopyright (c) 1992 X Consortium, Inc. and Intergraph Corporation\nCopyright (c) 1993 X Consortium, Inc. and Silicon Graphics, Inc.\nCopyright (c) 1997 by Silicon Graphics Computer Systems, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXext-1.3.4-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXext@1.3.4-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ANPgALhdtcXsw1S_pWKNJiLbJX1OeqfV1PWk89WQK7U/libXext-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXext",
    "versionInfo" : "1.3.4-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXi-1.7.10-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2017 Free Software Foundation, Inc.\nCopyright 2008 Peter Hutterer\nCopyright 2006 Peter Hutterer <peter@cs.unisa.edu.au>\nCopyright 2009 Red Hat, Inc.\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1989, 1998 The Open Group\nCopyright 1989 by Hewlett-Packard Company, Palo Alto, California\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 1989, 1990, 1991, 1992 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXi-1.7.10-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXi@1.7.10-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AfdgMMUmWyyCy_PquQZM96GJXuEFitzdGzQ4FQZ35Po/libXi-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXi",
    "versionInfo" : "1.7.10-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXrender-0.9.10-16.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2013 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2001,2003 Keith Packard\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2000 SuSE, Inc.\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXrender-0.9.10-16.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-0esFcwEwOGeNXH2v4ZD0SEG5nzYk3HL5XtHjnotyRk/libXrender-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXrender@0.9.10-16.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXrender",
    "versionInfo" : "0.9.10-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libXtst-1.2.3-16.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2013 Free Software Foundation, Inc.\nCopyright 1995 Network Computing Devices\nCopyright 1994 Network Computing Devices, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright 1992, 1993, 1995, 1998 The Open Group\nCopyright 1990, 1991 by UniSoft Group Limited\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007, Oracle and/or its affiliates\nCopyright (c) 1992, 1994, 1995 X Consortium\nCopyright (c) 1992 by UniSoft Group Ltd.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libXtst-1.2.3-16.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bm9gHfo7WMDQKlUe7ZN-Z1hDsJKeuLfvTpwOcUotC50/libXtst-~-16.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libXtst@1.2.3-16.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libXtst",
    "versionInfo" : "1.2.3-16.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libacl-2.3.1-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc\nCopyright (c) 2007 Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 2000, 2002 Andreas Gruenbacher <agruen@suse.de>\nCopyright (c) 1999, 2000 Andreas Gruenbacher <andreas.gruenbacher@gmail.com>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc\nCopyright (c) 2000 Free Software Foundation, Inc. Andreas Grunbacher <a.gruenbacher@computer.org> , 2000\nCopyright (c) 2007 Free Software Foundation, Inc. Antonio Trueba <atrueba@users.sourceforge.net> , 2007\nCopyright (c) 2006 Free Software Foundation, Inc. Daniel Nylander <po@danielnylander.se> , 2006\nCopyright (c) 2004 Free Software Foundation, Inc. Jakub Bogusz <qboosh@pld-linux.org> , 2004\nCopyright (c) 2005 Free Software Foundation, Inc. Sylvain Archenault <sylvain.archenault@laposte.net> , 2005\nCopyright (c) 2001-2002 Silicon Graphics, Inc\nCopyright (c) 1994 X Consortium\nCopyright (c) 1999 by Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\n(c) 1999 Andreas Gruenbacher, <a.gruenbacher@computer.org>\n(c) 2000 Andreas Gruenbacher, <andreas.gruenbacher@gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libacl-2.3.1-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eHHw6urD7S2wrBS8rgWTL5fSXG6rbdWyE9C8T_i4sOk/acl-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libacl@2.3.1-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://savannah.nongnu.org/projects/acl",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libacl",
    "versionInfo" : "2.3.1-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libarchive-3.5.3-5.el9-6-arch-x86-64",
    "copyrightText" : "Copyright by Tim Kientzle\nCopyright (c) 2016 Martin Matuska\nCopyright (c) 1989, 1990, 1993 The Regents of the University of California\nCopyright (c) 2003-2009 Tim Kientzle\nCopyright (c) 2003-2018 <author(s)>\n\nAuthors: <author(s)>; Dick Haight; Martin Matuska; The Regents of the University of California; Tim Kientzle",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libarchive-3.5.3-5.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mA4T7rV0MTIKzKfJrtXbhc1B4wJa-XpzSYABjE835Ic/libarchive-~-5.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libarchive@3.5.3-5.el9_6?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.libarchive.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libarchive",
    "versionInfo" : "3.5.3-5.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libassuan-2.5.5-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2001-2013 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url http://fsf.org\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2001-2013 Free Software Foundation, Inc.\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 2000 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001-2021 g10 Code GmbH\nCopyright 2001-2020 g10 Code GmbH",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libassuan-2.5.5-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nazYcywqUzNisYBc0USuWJ2GmwA7FSXwZI2NRhbQt_8/libassuan-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libassuan@2.5.5-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libassuan",
    "versionInfo" : "2.5.5-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libattr-2.5.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2007 Andreas Gruenbacher <a.gruenbacher@computer.org>\nCopyright (c) 2002 Andreas Gruenbacher <agruen@suse.de>\nCopyright (c) 2001-2002 Andreas Gruenbacher <andreas.gruenbacher@gmail.com>\nCopyright (c) 2002, 2003 Andreas Grunbacher <a.gruenbacher@computer.org>\nCopyright (c) 2007 Antonio Trueba <atrueba@users.sourceforge.net>\nCopyright (c) 2006 Daniel Nylander <po@danielnylander.se>\nCopyright (c) 2015 Dmitry V. Levin <ldv@altlinux.org>\nCopyright (c) 2007 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005 Guilhelm Panaget <guilhelm.panaget@free.fr>\nCopyright (c) 2004, 2005 Jakub Bogusz <qboosh@pld-linux.org>\nCopyright (c) 2004 Luk Claes <luk.claes@ugent.be>\nCopyright (c) 2008 Petr Pisar <petr.pisar@atlas.cz>\nCopyright (c) 2000-2002,2004 Silicon Graphics, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libattr-2.5.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/peGJWZaprb1fARi3RHOrNAqDV_T781XpKFlWAtzERhM/attr-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libattr@2.5.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://savannah.nongnu.org/projects/attr",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libattr",
    "versionInfo" : "2.5.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libblkid-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libblkid-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libblkid",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libbrotli-1.0.9-7.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2015 The Brotli Authors\nCopyright (c) 2009, 2010, 2013-2016 by the Brotli Authors\n\nAuthors: Evan Nemerson <evan@nemerson.com>; Google Inc.; the Brotli Authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libbrotli-1.0.9-7.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libbrotli@1.0.9-7.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gm4rk3GxFLdybt4M8Q_gk10iuu-bQXllt60J0dt3cxY/brotli-~-7.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/brotli",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libbrotli",
    "versionInfo" : "1.0.9-7.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcap-ng-0.8.2-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2009, 2013, 2020 Red Hat Inc.\nCopyright 2009-10, 2013, 2017, 2020 Red Hat Inc.\nCopyright 2009 Red Hat Inc., Durham, North Carolina\nCopyright 2009,2014-15,2017 Red Hat Inc., Durham, North Carolina\nCopyright 2009-2020 Steve Grubb <sgrubb@redhat.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2009,2012,2020 Red Hat Inc.\nCopyright (c) 2009-10,2012,2017,2020 Red Hat Inc.\nCopyright (c) 2009 Steve Grubb sgrubb@redhat.com\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcap-ng-0.8.2-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcap-ng@0.8.2-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7_GVt9BDcCCK83SWo14qvP4sffEzvpcj0nICBvgaC4M/libcap-ng-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://people.redhat.com/sgrubb/libcap-ng/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcap-ng",
    "versionInfo" : "0.8.2-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcap-2.48-9.el9-2-arch-x86-64",
    "copyrightText" : "Copyright (c) 1997\nCopyright (c) 1997 Aleph One\nCopyright (c) 1997,2007 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 1997,2007-8,2020 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 1997-8 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2007,11,19,20 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2007,2019 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2007-8,2019 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997-8,2008,20 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 2008-11,16,19,2020 Andrew G. Morgan <morgan@kernel.org>\nCopyright (c) 2019-21 Andrew G Morgan <morgan@kernel.org>\nCopyright (c) 1997 Andrew Main <zefram@dcs.warwick.ac.uk>\nCopyright (c) 1998 Finn Arne Gangstad <finnag@guardian.no>\nCopyright (c) 2010 Serge Hallyn <serue@us.ibm.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcap-2.48-9.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcap@2.48-9.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nypfUSoKxO8yMxQlO1yt-ObMhfSTaNOB28QyxuvYSNg/libcap-~-9.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://sites.google.com/site/fullycapable/",
    "licenseConcluded" : "GPL-2.0-only",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcap",
    "versionInfo" : "2.48-9.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcom-err-1.46.5-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1986, 1987, 1988\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1990, 1991, 1992 Free Software Foundation, Inc.\nCopyright 2014 Google Inc.\nCopyright 2019 Google LLC\nCopyright IBM Corporation, 2007\nCopyright 1987,1988 Massachusetts Institute of Technology\nCopyright 1987, 1988, 1989 Massachusetts Institute of Technology (Student Information Processing Board)\nCopyright Oracle, 2014\nCopyright 2014, Oracle, Inc.\nCopyright 1998-2000 Red Hat, Inc\nCopyright 1999-2000 Red Hat Software\nCopyright 2000 Red Hat corp\nCopyright 1988, Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright 2017 The Android Open Source Project\nCopyright Theodore Ts'o, 1996-1999\nCopyright 1999 by David Beattie\nCopyright 1987, 1988, 1989 by Massachusetts Institute of Technology\nCopyright 2014 by Oracle, Inc.\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright 1998 by Theodore Ts'o and PowerQuest, Inc.\nCopyright 1988 by the Massachusetts Institute of Technology\nCopyright 1987 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001\nCopyright (c) 2014 Adam Kropelin\nCopyright (c) 2001 Alcove <http://www.alcove.com/>\nCopyright (c) 2000 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2001 Andreas Gruenbacher, <a.gruenbacher@computer.org>\nCopyright (c) Andrew Esh 2001\nCopyright (c) Andrew Tridgell 1999-2005\nCopyright (c) 1998 Andrey Shedel (andreys@ns.cr.cyco.com)\nCopyright (c) Andries Brouwer\nCopyright (c) 2005 Ben Gardner <bgardner@wabtec.com>\nCopyright (c) 1994-2008 Carnegie Mellon University\nCopyright (c) 2003,2004 Cluster\nCopyright (c) 2018 Collabora Ltd.\nCopyright (c) 2001 Daniel Phillips\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1989,90,91,92,93,94,96,97 Free Software Foundation, Inc.\nCopyright (c) 1996 Free Software Foundation, Inc. Michel Robitaille <robitail@IRO.UMontreal.CA>\nCopyright (c) 1995 Gadi Oxman\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2012, Intel Corporation\nCopyright (c) Jeremy Allison 2000-2006\nCopyright (c) 2008 John Darrington <j.darrington@elvis.murdoch.edu.au>\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 1997 Kaz Kylheku <kaz@ashi.footprints.net>\nCopyright (c) 2004-2006 Kern Sibbald\nCopyright (c) 1997 Klee Dienes\nCopyright (c) 1997, 1998, 2001 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 1997 Mark Habersack\nCopyright (c) 1988 Massachusetts Institute of Technology, Student Information Processing Board\nCopyright (c) 1995-1996 Michael Nonweiler <mrn20@cam.ac.uk>\nCopyright (c) 2009 NEC Software Tohoku, Ltd.\nCopyright (c) 2018 Nicholas Clark <nicholas.clark@gmail.com>\nCopyright (c) 2014 Oracle\nCopyright (c) Paul Rusty Russell 2000\nCopyright (c) 2001 Red Hat, Inc.\nCopyright (c) 2010 Red Hat, Inc., Lukas Czerner <lczerner@redhat.com>\nCopyright (c) 1999 Red Hat Software\nCopyright (c) 1988 Regents of the University of California\nCopyright (c) 1992, 1993 Remy Card <card@masi.ibp.fr>\nCopyright (c) 1993 Remy Card (card@masi.ibp.fr)\nCopyright (c) 1992, 1993, 1994 Remy Card (card@masi.ibp.fr) Laboratoire\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1992, 1993, 1994 Remy Card <card@masi.ibp.fr> Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 2014 Robert Yang <liezhi.yang@windriver.com>\nCopyright (c) 2014 SGI.\nCopyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c) 2000 Silicon Graphics, Inc.\nCopyright (c) 2000 Stephen C. Tweedie\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2009 Sun Microsystems, Inc.\nCopyright (c) 2007 The Android Open Source Project\nCopyright (c) 1993 Theodore Ts'o\nCopyright (c) 2001 Theodore Ts'o (tytso@mit.edu)\nCopyright (c) 2003-2006 Theodore Ts'o <tytso@mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 1994 Ulrich Windl ALte Regensburger Strasse\nCopyright (c) 2003 VMware, Inc.\nCopyright (c) 2011 Whamcloud, Inc.\nCopyright (c) 1997-2003 Yann Dirson <dirson@debian.org>\nCopyright (c) 2012 Zheng Liu <wenqing.lz@taobao.com>\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2006, 2007 by Andreas Dilger <adilger@clusterfs.com>\nCopyright (c) 1999, 2001 by Andries Brouwer\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 by Theodore Ts'o\nCopyright (c) 1997, 1998 by Theodore Ts'o and PowerQuest, Inc.\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1985-2005 by the Massachusetts Institute of Technology\nCopyright co 2018 Oracle\nCopyright transferred from Raider Solutions, Inc\nJeremy Fitzhardinge <jeremy@zip.com.au> 1998\nPortions Copyright 1998-2000, Theodore Ts'o\nTheodore Ts'o, Copyright 2007, 2008, 2009\n(c) 1999 Andrea Arcangeli <andrea@suse.de>\n(c) 2000 Andreas Gruenbacher, <a.gruenbacher@computer.org>\n(c) Copyright 2003, 2004, 2008 by Theodore Ts'o\n(c) 2002 David Woodhouse <dwmw2@infradead.org>\n(c) 2010 Red Hat, Inc., Lukas Czerner <lczerner@redhat.com>\ncopyrighted by Linus Torvalds <Linus.Torvalds@cs.helsinki.fi>\ncopyrighted by remap tt\ncopyrighted by the Free Software Foundation\nportions Copyright (c) 1994 Theodore Ts'o\nportions copyright (c) 2007 Cluster",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcom_err-1.46.5-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcom_err@1.46.5-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eZeimKJoKWevIamBWGDyRIyimK6hJUH8NMa0Wk6oBW4/e2fsprogs-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://e2fsprogs.sourceforge.net/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcom_err",
    "versionInfo" : "1.46.5-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libcurl-minimal-7.76.1-31.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2009 - 2020, John Malmberg\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2014, Bill Nagel <wnagel@tycoint.com> , Exacq Technologies\nCopyright (c) 2019, Bjorn Stenberg, <bjorn@haxx.se>\nCopyright (c) 2001-2004 Damien Miller <djm@openbsd.org>\nCopyright (c) 1998-2016 Daniel Stenberg\nCopyright (c) 1998 - 2021, Daniel Stenberg, <daniel@haxx.se>\nCopyright (c) 1996 - 2021, Daniel Stenberg, <daniel@haxx.se> , and many contributors\nCopyright (c) 2000 - 2020 David Odin\nCopyright (c) 2006 - 2020, David Shaw <dshaw@jabberwocky.com>\nCopyright (c) 2001 - 2020, Eric Lavigne\nCopyright (c) 2017, Florin Petriuc, <petriuc.florin@gmail.com>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2003 - 2021, Gisle Vanem <gvanem@yahoo.no>\nCopyright (c) 2004 - 2014, Guenter Knauf\nCopyright (c) 2010, Hoi-Ho Chan, <hoiho.chan@gmail.com>\nCopyright (c) 2010, Howard Chu, <hyc@highlandsun.com>\nCopyright (c) 2010, Howard Chu, <hyc@openldap.org>\nCopyright (c) 1996-2019 Internet Software Consortium\nCopyright (c) 2020 - 2021, Jacob Hoffman-Andrews, <github@hoffman-andrews.com>\nCopyright (c) 2015, Jay Satiro, <raysatiro@yahoo.com>\nCopyright (c) 2018 - 2020 Jeroen Ooms <jeroenooms@gmail.com>\nCopyright (c) 2011 - 2020, Jim Hollinger\nCopyright (c) 2008 Kaveh Ghazi <ghazi@caip.rutgers.edu>\nCopyright (c) 1998, 1999 Kungliga Tekniska Hogskolan\nCopyright (c) 1995, 1996, 1997, 1998, 1999 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2012 - 2014, Linus Nielsen Feltzing, <linus@haxx.se>\nCopyright (c) 2012, Marc Hoersken, <info@marc-hoersken.de>\nCopyright (c) 2012, Mark Salisbury, <mark.salisbury@hp.com>\nCopyright (c) 2009, Markus Moeller, <markus_moeller@compuserve.com>\nCopyright (c) 2019 - 2020, Michael Forney, <mforney@mforney.org>\nCopyright (c) 2012 - 2014, Nick Zitzmann, <nickzman@gmail.com>\nCopyright (c) 2017 - 2021 Red Hat, Inc.\nCopyright (c) 2017 Reini Urban <rurban@cpan.org>\nCopyright (c) 2020 - 2021, Simon Josefsson, <simon@josefsson.org>\nCopyright (c) 2003 - 2019 Simtec Electronics\nCopyright (c) 2012 - 2020, Steve Holme, <steve_holme@hotmail.com>\nCopyright (c) 2003 - 2020 The OpenEvidence Project\nCopyright (c) 1994 X Consortium\nCopyright (c) 2017 - 2018, Yiming Jing, <jingyiming@baidu.com>\nCopyright (c) 1996 - 2020 by Internet Software Consortium\nCopyright (c) 2006-2015 wolfSSL Inc.\ncopyright by the original\n\nAuthors: $year, Daniel Stenberg; Alexander Peslyak; Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Almroth; Andrew Lambert; Andrey Cherezov; Bill Nagel , Exacq Technologies; Bjorn Stenberg; Bruno de Carvalho; Casey O'Donnell; Chris Double; Christophe Espern; Clifford Wolf; Cris Bailiff and Balint Szilakszi; Damien Miller; Dan Wood; Daniel Stenberg; Daniel Stenberg, , and many contributors; Danil Osipchuk; David Odin; David Shaw; David Strauss; David Szafranski; Eiffel Software; Eric Lavigne; Eric Young (eay@cryptsoft.com); Florin Petriuc; Fran,cois Pinard; Free Software Foundation, Inc.; Galois, Inc; Gary V. Vaughan; Gisle Vanem; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guenter Knauf; Hoi-Ho Chan; Howard Chu; Internet Software Consortium; Ishan SinghLevett; Jacob Hoffman-Andrews; Jan Schaumann; Jay Satiro; Jean-Philippe Barrette-LaPierre; Jeff Pohlmeyer; Jeffrey Phillips; Jeffrey Pohlmeyer; Jeremy Brown; Jeroen Ooms; Jim Hollinger; John Malmberg; Jud Bishop; Kaveh Ghazi; Kenneth Bogert; Kungliga Tekniska Hogskolan; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); Lars Nilsson; Liam Healy; Linus Nielsen Feltzing; Marc Hoersken; Mark Salisbury; Markus Moeller; Michael Forney; Michael L. Gran; Mikhail Merkuryev; Nick Zitzmann; Nikos Mavrogiannopoulos, Tomas Mraz, Stanislav Zidek, Robert Kolcun, Andreas Schneider; Paul Howe; Paul Querna; Paul Vixie; Peter Sylvester, Jean-Paul Merlin; Peter Verhas; Ray Smith; Red Hat, Inc.; Reini Urban; Richard Atterer; Rob Crittenden (rcritten@redhat.com); Roland Krikava; Ross Bamford; Scott James Remnant; Simon Josefsson; Simtec Electronics; Stephen Nestinger and Jonathan Rogado; Sterling Hughes; Steve Holme; The OpenEvidence Project; Tim Hudson (tjh@cryptsoft.com); Tom Tromey <tromey@cygnus.com>; Viktor Szakats; Vincent Sanders <vince@kyllikki.org>; X Consortium; Yiming Jing; a community; the OpenSSL Project; the original; wolfSSL Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libcurl-minimal-7.76.1-31.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/j7ldn8lpWdBaJSt41m_cf-hSIMGbwBl-EpN1PaBuivY/curl-~-31.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libcurl-minimal@7.76.1-31.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://curl.se/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libcurl-minimal",
    "versionInfo" : "7.76.1-31.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libdnf-0.69.0-13.el9-arch-x86-64",
    "copyrightText" : "Copyright 2004-2009 Kitware, Inc.\nCopyright 2015 Lautsprecher Teufel GmbH\nCopyright 2009 Mathieu Malaterre <mathieu.malaterre@gmail.com>\nCopyright 2009 Rich Wareham\nCopyright (c) 2011, Chris Foster\nCopyright (c) 2015 Colin Walters <walters@verbum.org>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2017 Jaroslav Rohel <jrohel@redhat.com>\nCopyright (c) 2012 Raphael Kubo da Costa <rakuco@webkit.org>\nCopyright (c) 2012-2013 Red Hat, Inc.\nCopyright (c) 2009-2015 Richard Hughes <richard@hughsie.com>\nCopyright richard@hughsie.com Richard Hughes 2014 http://validator.w3.org/check/referer\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libdnf-0.69.0-13.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/-U3Lq_zMAftlUiy-BC9DfECH0bkESD0DMaDTtY-rzcQ/libdnf-~-13.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libdnf@0.69.0-13.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/libdnf",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libdnf",
    "versionInfo" : "0.69.0-13.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libevent-2.1.12-8.el9-4-arch-x86-64",
    "copyrightText" : "Copyright 2002 Christopher Clark\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2000-2011 Insight Software Consortium\nCopyright 2000-2013 Kitware, Inc.\nCopyright 2003 Michael A. Davis <mike@datanerds.net>\nCopyright 2005, Nick Mathewson\nCopyright 2007-2012 Nick Mathewson and Niels Provos\nCopyright 2000-2007 Niels Provos\nCopyright 2007-2012 Niels Provos, Nick Mathewson\nCopyright 2007-2012 Niels Provos and Nick Mathewson\nCopyright 2000-2007 Niels Provos <provos@citi.umich.edu>\nCopyright (c) 2010 BitTorrent, Inc.\nCopyright (c) 2004-2018 Bootstrap Authors\nCopyright (c) 2010 Chris Davis, Niels Provos, and Nick Mathewson\nCopyright (c) 2002 Christopher Clark\nCopyright (c) 2008, Damien Miller <djm@openbsd.org>\nCopyright (c) 1996 - 2013, Daniel Stenberg, <daniel@haxx.se>\nCopyright (c) 1996, David Mazieres <dm@uun.org>\nCopyright (c) 2000 Dug Song <dugsong@monkey.org>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2006 Maxim Yegorushkin <maxim.yegorushkin@gmail.com>\nCopyright (c) 2003 Michael A. Davis <mike@datanerds.net>\nCopyright (c) 2009, Michihiro NAKAJIMA\nCopyright (c) 2007-2012 Niels Provos, Nick Mathewson\nCopyright (c) 2007-2012 Niels Provos and Nick Mathewson\nCopyright (c) 2000-2007 Niels Provos <provos@citi.umich.edu>\nCopyright (c) 2015 Olaf Mandel <olaf@mandel.name>\nCopyright (c) 2009 Oren Ben-Kiki <oren@ben-kiki.org>\nCopyright (c) 2007 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2007 Sun Microsystems\nCopyright (c) 1993 The Regents of the University of California\nCopyright (c) 1998 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012, iSEC Partners\n\nAuthors: Adam Langley <agl@imperialviolet.org>; Alban Diquet; Alexandre Oliva <oliva@dcc.unicamp.br>; BitTorrent, Inc.; Bootstrap Authors; Chris Davis, Niels Provos, and Nick Mathewson; Christopher Clark; Damien Miller; Daniel Stenberg; David Mazieres; David Pacheco (dp.spambait@gmail.com); Dug Song; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Insight Software Consortium; Kitware, Inc.; Maxim Yegorushkin; Michael A. Davis; Michihiro NAKAJIMA; Nick Mathewson; Nick Mathewson and Niels Provos; Niels Provos; Niels Provos and Nick Mathewson; Niels Provos, Nick Mathewson; Olaf Mandel; Oren Ben-Kiki; Scott James Remnant; Steven G. Johnson; Sun Microsystems; The Regents of the University of California; Todd C. Miller; Tom Tromey <tromey@cygnus.com>; X Consortium; iSEC Partners; rewritten by Hagne Mahre and then Hannah",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libevent-2.1.12-8.el9_4.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/D-Mab0F0MUc0WEQa7LsE52BDdbpOo7-jOrVpQuM32GU/libevent-~-8.el9_4.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libevent@2.1.12-8.el9_4?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libevent.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND ISC)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libevent",
    "versionInfo" : "2.1.12-8.el9_4"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libffi-3.4.2-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008-2019, 2021 Anthony Green and Red Hat, Inc.\nCopyright 1985, 1986, 1988, 1990-2019 Free Software Foundation, Inc.\nCopyright (c) 2009, 2010, 2011, 2012 ARM Ltd.\nCopyright (c) 2012 Alan Hourihane\nCopyright (c) 2009 Alan Jenkins <alan-jenkins@tuffmail.co.uk>\nCopyright (c) 2012 Alexandre K. I. de Mendonca <alexandre.keunecke@gmail.com>\nCopyright (c) 2012 Alexandre K. I. de Mendonca <alexandre.keunecke@gmail.com> , Paulo Pizarro <paulo.pizarro@gmail.com>\nCopyright (c) 2017-2018 Alexey Kopytov\nCopyright (c) 1998, 2012 Andreas Schwab\nCopyright (c) 2004 Anthony Green\nCopyright (c) 1996-2021 Anthony Green, Red Hat, Inc and others\nCopyright (c) 2008-2019, 2021 Anthony Green and Red Hat, Inc.\nCopyright (c) 2005 Axis Communications AB\nCopyright (c) 2002 Bo Thorsen\nCopyright (c) 2002 Bo Thorsen <bo@suse.de>\nCopyright (c) 2009 Bradley Smith <brad@brad-smith.co.uk>\nCopyright (c) 2010 CodeSourcery\nCopyright (c) 1998 Cygnus Solutions\nCopyright (c) 2008 David Daney\nCopyright (c) 2011 Free Software Foundation\nCopyright (c) 1998 Geoffrey Keating\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2000 Hewlett Packard Company\nCopyright (c) 2013 IBM\nCopyright (c) 2013 Imagination Technologies\nCopyright (c) 2013 Imagination Technologies Ltd.\nCopyright (c) 2003 Jakub Jelinek <jakub@redhat.com>\nCopyright (c) 2000 John Hornkvist\nCopyright (c) 2020 Kalray\nCopyright (c) 2002, 2003, 2004, 2006, 2008 Kaz Kojima\nCopyright (c) 2011 Kyle Moffett\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2020 Madhavan T. Venkataraman\nCopyright (c) 2008 Matteo Frigo\nCopyright (c) 2013 Mentor Graphics\nCopyright (c) 2015 Michael Knyszek <mknyszek@berkeley.edu> 2015 Andrew Waterman <waterman@cs.berkeley.edu> 2018 Stef O'Rear <sorear2@gmail.com>\nCopyright (c) 2015 Michael Petch <mpetch@capp-sysware.com>\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2021 Microsoft, Inc.\nCopyright (c) 2014 Mike Frysinger <vapier@gentoo.org>\nCopyright (c) 2013 Miodrag Vallat. <miod@openbsd.org>\nCopyright (c) 2011 Plausible Labs Cooperative, Inc.\nCopyright (c) 2002 Ranjit Mathew\nCopyright (c) 1998, 2001, 2007, 2008, 2011, 2014 Red Hat\nCopyright (c) 1996 Red Hat, Inc.\nCopyright (c) 2004 Renesas Technology\nCopyright (c) 2010 Rhys Ulerich <rhys.ulerich@gmail.com>\nCopyright (c) 2002 Roger Sayle\nCopyright (c) 2014 Sebastian Macke <sebastian@macke.de>\nCopyright (c) 2004 Simon Posnjak\nCopyright (c) 2000 Software AG\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2013 Synopsys, Inc. (www.synopsys.com)\nCopyright (c) 2013 Synposys, Inc. (www.synopsys.com)\nCopyright (c) 2013 Tensilica, Inc.\nCopyright (c) 2013 The\nCopyright (c) 2012, 2016 Thorsten Glaser\nCopyright (c) 2011 Tilera Corp.\nCopyright (c) 2011 Timothy Wall\nCopyright (c) 2014 Tsukasa Oi\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012, 2013 Xilinx, Inc\nCopyright (c) 2009 the Initial Developer\n(c) 2011 Anthony Green\n(c) 2006 Free Software Foundation, Inc.\n(c) 2003-2004 Randolph Chung <tausq@debian.org>\n(c) 2008 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libffi-3.4.2-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/N8r-3ZhHN0Oc2DF-hMr6bjLc_5UDUs1u9MYdudmv1Tg/libffi-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libffi@3.4.2-8.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://sourceware.org/libffi",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libffi",
    "versionInfo" : "3.4.2-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libfontenc-1.1.3-17.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2014 Free Software Foundation, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998-2001 by Juliusz Chroboczek",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libfontenc-1.1.3-17.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/J7_5vmxuMpwS--Q34JW8ZLzuUcneDaGUsV7p1ZRXHkE/libfontenc-~-17.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libfontenc@1.1.3-17.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libfontenc",
    "versionInfo" : "1.1.3-17.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libgcc-11.5.0-5.el9-5-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2009 Free Software Foundation, Inc. <http://fsf.org/>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libgcc-11.5.0-5.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ToYhGOaq6rtJ7Jc0ZRXHRBlFdZvMMhKesYmWPrscvUQ/gcc-~-5.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libgcc@11.5.0-5.el9_5?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org",
    "licenseConcluded" : "(GPL-3.0-or-later WITH GCC-exception-3.1 AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libgcc",
    "versionInfo" : "11.5.0-5.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libgcrypt-1.10.0-11.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998, 1999, 2000, 2001, 2002, 2003, 2009, 2011 Free Software Foundation, Inc.\nCopyright 2021- IBM Inc.\nCopyright Peter Gutmann, Matt Thomlinson and Blake Coverett 1996-2006\nCopyright Peter Gutmann, Paul Kendall, and Chris Wedgwood 1996-1999\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright 2012 Simon Josefsson and Niels Moller\nCopyright Stephan Mueller <smueller@chronox.de> , 2013\nCopyright Stephan Mueller <smueller@chronox.de> , 2014 - 2021 Design\nCopyright 1997, 1998, 1999, 2001 Werner Koch\nCopyright (c) 2020 Alibaba Group\nCopyright (c) 2018 Bundesamt fur Sicherheit\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 2013 Christian Grothoff\nCopyright (c) 2013-2014 Dmitry Eremin-Solenikov\nCopyright (c) 2012 Dmitry Kasatkin\nCopyright (c) 1992, 1994, 1998, 2001, 2002 Fee Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1994, 1996, 1998, 2000, 2002 2003 Free Software Foundation, Inc. 2013 g10 Code GmbH\nCopyright (c) 2024, Hubert Kario, Red Hat\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2017 Jia Zhang\nCopyright (c) 2021, Joshua E. Hill <josh@keypair.us>\nCopyright (c) 2013-2022 Jussi Kivilinna\nCopyright (c) 2012-2017 Jussi Kivilinna <jussi.kivilinna@iki.fi>\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 2018 Martin Storsjo <martin@martin.st>\nCopyright (c) 2006-2007 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 2003 Nikos Mavroyanopoulos\nCopyright (c) 1996-2006 Peter Gutmann, Matt Thomlinson and Blake Coverett\nCopyright (c) 1996-1999 Peter Gutmann, Paul Kendall, and Chris Wedgwood\nCopyright (c) 2010 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 1999 Richard Henderson <rth@redhat.com>\nCopyright (c) 2019 Shawn Landden <shawn@git.icu>\nCopyright (c) 2012 Simon Josefsson\nCopyright (c) 2012 Simon Josefsson, Niels Moller\nCopyright (c) 2014 Stephan Mueller\nCopyright (c) 2017 - 2021, Stephan Mueller <smueller@chronox.de>\nCopyright (c) 1998 The Internet Society\nCopyright (c) 2020 Tianjia Zhang\nCopyright (c) 2020 Tianjia Zhang <tianjia.zhang@linux.alibaba.com>\nCopyright (c) 1997 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 19YY\nCopyright (c) 1997, 1998, 1999 by Werner Koch\nCopyright (c) 2012-2022 g10 Code GmbH\nCopyright 2013 g10 Code GmbH\ncopyright Peter Gutmann (and various others) 1996, 1997, 1998, 1999\ncopyrighted by the Free Software Foundation\ncopyright to FSF.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libgcrypt-1.10.0-11.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TmomwhZp_7qX75OAX5giaTOBNWMarFLHNxapL2HawjM/libgcrypt-~-11.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libgcrypt@1.10.0-11.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libgcrypt",
    "versionInfo" : "1.10.0-11.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libgpg-error-1.42-5.el9-arch-x86-64",
    "copyrightText" : "Copyright 1989, 1991 Free Software Foundation, Inc.\nCopyright LGPL BuildRoot\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2005 Free Software Foundation, Inc. Acest\nCopyright (c) 2014 Jedi Lin\nCopyright (c) 2010 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 1999 Richard Henderson <rth@redhat.com>\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 1998-2006, 2008-2017 Werner Koch\nCopyright (c) 1994 X Consortium\nCopyright (c) 19YY\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2018, 2021 g10 Code GmbH\nCopyright 2006 g10 Code GmbH",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libgpg-error-1.42-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libgpg-error@1.42-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IL_ykCBp0LWcmXVM2gqjMankEM12rnIxk77wTxOk2EY/libgpg-error-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/related_software/libgpg-error/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libgpg-error",
    "versionInfo" : "1.42-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libidn2-2.3.0-7.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright 2011-2017 Simon Josefsson\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2015 Bastien ROUCARIES\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2012 Dan Winship\nCopyright (c) 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright (c) 20118 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2003 Free Software Foundation, Inc. Acest\nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2001, 2002 Nikos Mavrogiannopoulos\nCopyright (c) 2019 Orivej Desh\nCopyright (c) 2008 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2012, 2016 Philip Withnall\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2011-2016 Simon Josefsson\nCopyright (c) 2011-2019 Simon Josefsson, Tim Ruehsen\nCopyright (c) 2018-2019 Tim Ruehsen\nCopyright (c) 2016 Tim Ruhsen\nCopyright (c) 1991-2016 Unicode, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright 2011- s Simon Josefsson, Tim Ruehsen\n(c) 2018 Unicode(r), Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libidn2-2.3.0-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libidn2@2.3.0-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DwYzueGxRorH8oHixHKFWGzkX3sFotsk0z1EnPTHQH4/libidn2-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libidn/#libidn2",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libidn2",
    "versionInfo" : "2.3.0-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libksba-1.5.1-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 2012 Canonical Ltd.\nCopyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc.\nCopyright 2007 Free Software Foundation, Inc. @url http://fsf.org\nCopyright (c) 2010 Diego Elio Petteno <flameeyes@gmail.com>\nCopyright (c) 2000, 2001 Fabio Fiorina\nCopyright (c) 2009 Francesco Salvestrini <salvestrini@users.sourceforge.net>\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) The Internet Society (1999)\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2010, 2011 2012, 2013, 2014, 2015, 2018, 2019, 2020, 2021 g10 Code GmbH\nCopyright 2001, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015 g10 Code GmbH\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libksba-1.5.1-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libksba@1.5.1-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/kEX15AOB8PaRiMBM6A4GcYQ0Ypts7auT3T9UDL4U4vk/libksba-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnupg.org/",
    "licenseConcluded" : "(GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libksba",
    "versionInfo" : "1.5.1-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libmodulemd-2.13.0-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 2018 Stephen Gallagher\nCopyright (c) 2020 Red Hat\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) 2017-2018 Stephen Gallagher\nCopyright (c) 2017-2018 Stephen Gallagher <sgallagh@redhat.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libmodulemd-2.13.0-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libmodulemd@2.13.0-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Vcvkc-PytBjlLEjXqOWwBssM1uoHEP9UEnUqU1_3_yc/libmodulemd-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/fedora-modularity/libmodulemd",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libmodulemd",
    "versionInfo" : "2.13.0-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libmount-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libmount-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libmount@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libmount",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libnghttp2-1.43.0-6.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT 2012, 2015, 2016, Tatsuhiro Tsujikawa\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright Joyent, Inc. and other Node contributors\nCopyright 2011 Kitware, Inc.\nCopyright 2010 by SHIBUKAWA Yoshiki\nCopyright 2007-2009 by the Sphinx team\nCopyright (c) 2009 Alan W. Irwin\nCopyright (c) 2009 Andrew Collier\nCopyright (c) 2008 Benjamin Kosnik <bkoz@redhat.com>\nCopyright (c) 2015 British Broadcasting Corporation\nCopyright (c) 2003-2013 Christopher M. Kohlhoff (chris at kohlhoff dot com)\nCopyright (c) 2008 Daniel Casimiro <dan.casimiro@gmail.com>\nCopyright (c) 2013 Daniel Mullner <muellner@math.stanford.edu>\nCopyright (c) 2015 DeNA Co., Ltd.\nCopyright (c) 1984, 1989-1990, 2000-2015, 2018-2020 Free Software Foundation, Inc.\nCopyright (c) 2014, 2015 Google Inc.\nCopyright (c) 2008 Guido U. Draheim <guidod@gmx.de>\nCopyright (c) 2009 Horst Knorr <hk_classes@knoda.org>\nCopyright (c) 2012 Internet Initiative Japan Inc.\nCopyright (c) 2015 Kazuho Oku, DeNA Co., Ltd.\nCopyright (c) 2016, 2018 Krzesimir Nowak <qdlacz@gmail.com>\nCopyright (c) 2011 Maarten Bosmans <mkbosmans@gmail.com>\nCopyright (c) 2009 Matteo Settenvini <matteo@member.fsf.org>\nCopyright (c) 2008 Michael Tindal\nCopyright (c) 2015 Moritz Klammler <moritz@klammler.eu>\nCopyright (c) 2015 Paul Norman <penorman@mac.com>\nCopyright (c) 2008 Pete Greenwell <pete@mu.org>\nCopyright (c) 2009 Peter Adolphs\nCopyright (c) 2016 Peter Wu <peter@lekensteyn.nl>\nCopyright (c) 2009 Rafael Laboissiere <rafael@laboissiere.net>\nCopyright (c) 2005-2014 Rich Felker\nCopyright (c) 2013 Roy Stogner <roystgnr@ices.utexas.edu>\nCopyright (c) 2009 Sebastian Huber <sebastian-huber@web.de>\nCopyright (c) 1994 Sun Microsystems, Inc.\nCopyright (c) 2012, 2014, 2015, 2016 Tatsuhiro Tsujikawa\nCopyright (c) 1988-1993 The Regents of the University of California\nCopyright (c) 2008 Thomas Porschberg <thomas@randspringer.de>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Zack Weinberg <zackw@panix.com>\nCopyright (c) 2010 by the contributors (see AUTHORS file)\nCopyright (c) 2017 mruby developers\nCopyright (c) 2012, 2014, 2015, 2016 nghttp2 contributors\nCopyright (c) 2017 ngtcp2 contributors\nG. Vanem <gvanem@yahoo.no> 2013\n(c) ISALPHA (c) ISDIGIT (c)\n(c) Syoyo Fujita in Javascript (and other languages) https://code.google.com/p/aobench\ncopyright by the original\ncopyright (c) 2014 Specified Non-Profit Corporation mruby Forum\ncopyright u'2012, 2015, 2016, Tatsuhiro Tsujikawa\n\nAuthors: Alan W. Irwin; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Sokolov <sokolov@google.com>; Andrew Collier; Benjamin Kosnik; British Broadcasting Corporation; Christopher M. Kohlhoff (chris at kohlhoff dot com); Daniel Casimiro; Daniel Mullner; DeNA Co., Ltd.; Fran,cois Pinard; Free Software Foundation, Inc.; G. Vanem; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Guido U. Draheim; Horst Knorr; ISALPHA ISDIGIT; Internet Initiative Japan Inc.; Joyent, Inc. and other Node contributors; Kazuho Oku, DeNA Co., Ltd.; Kitware, Inc.; Krzesimir Nowak; Lorenz Nickel <lorenz.nickel@gmx.net>; Maarten Bosmans; Matteo Settenvini; Michael Tindal; Moritz Klammler; Paul Norman; Pete Greenwell; Peter Adolphs; Peter Wu; Rafael Laboissiere; Reza Tavakoli <9096461+tavrez@users.noreply.github.com>; Rich Felker; Richard Stallman; Roy Stogner; SHIBUKAWA Yoshiki; Scott James Remnant; Sebastian Huber; Specified Non-Profit Corporation mruby Forum; Sun Microsystems, Inc.; Syoyo Fujita in Javascript (and other languages); Tatsuhiro Tsujikawa; Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>; Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com>; The Regents of the University of California; Thomas Porschberg; Tom Tromey <tromey@cygnus.com>; X Consortium; Zack Weinberg; doxygen. Using; h2o project (https://github.com/h2o/h2o); mkstatictbl.py; mruby developers; nghttp2 contributors; ngtcp2 contributors; the Sphinx team; the contributors (see AUTHORS file); the original; u'2012, Tatsuhiro Tsujikawa",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libnghttp2-1.43.0-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libnghttp2@1.43.0-6.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/R0RqH-QeoJ4RM-pBHmgtd25rfFsWkGLAdTq_AALARZI/nghttp2-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://nghttp2.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libnghttp2",
    "versionInfo" : "1.43.0-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libpeas-1.30.0-4.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2003, 2004 Christian Persch\nCopyright (c) 1997, 1998, 1999, 2000 Free Software Foundation\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2011 Free Software Foundation, Inc. Kristjan SCHMIDT <kristjan.schmidt@googlemail.com> , 2011, 2017. Tiffany ANTOPOLSKI <tiffany.antopolski@gmail.com> , 2011\nCopyright (c) 2010 - Garrett Regier\nCopyright (c) 2011 Gnome Telugu Contributors\nCopyright (c) 2008 Ignacio Casal Quinteiro\nCopyright (c) 2011 Iranian Free Software Users Group (IFSUG.org)translation team\nCopyright (c) 2008 - Jesse van den Kieboom\nCopyright (c) 2011 Krasimir Chonov <mk2616@abv.bg>\nCopyright (c) 2010 Listed\nCopyright (c) 2003 Marco Pesenti Gritti\nCopyright (c) 2002-2005 - Paolo Maggi\nCopyright (c) 2003-2006 Paolo Maggi, Paolo Borelli\nCopyright (c) 2007-2009 Paolo Maggi, Paolo Borelli, Steve Frecinaux\nCopyright (c) 2002 Paolo Maggi and James Willcox\nCopyright (c) 2012 Rosetta Contributors\nCopyright (c) 2007 - Steve Frecinaux\nCopyright (c) 2009 Steve Frecinaux Website http://code.istique.net\nCopyright (c) 2009-10 Steve Frecinaux Website https://wiki.gnome.org/Projects/Libpeas\nCopyright (c) 2010 Steve Frecinaux Website https://wiki.gnome.org/Projects/Libpeas\nCopyright (c) 2011 THE PACKAGE'S\nCopyright (c) 2011 THE libpeas'S\nCopyright (c) 2011 Tommi Vainikainen\nCopyright (c) 2010, 2011, 2012, 2013 libpeas\nCopyright (c) 2010 libpeas's\nCopyright (c) 2019 libpeas's authors\nCopyright (c) 2011 the Free Software Foundation, Inc.\nCopyright (c) 2010-2019 the libpeas\n\nAuthors: Christian Persch; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. Kristjan SCHMIDT , Tiffany ANTOPOLSKI; Garrett Regier; Garrett Regier <garrettregier@gmail.com>; Gnome Telugu Contributors; Ignacio Casal Quinteiro; Iranian Free Software Users Group (IFSUG.org)translation team; Jesse van den Kieboom; Krasimir Chonov; Listed; Marco Pesenti Gritti; Paolo Maggi; Paolo Maggi and James Willcox; Paolo Maggi, Paolo Borelli; Paolo Maggi, Paolo Borelli, Steve Frecinaux; Rosetta Contributors; Steve Frecinaux; Steve Frecinaux <code@istique.net>; THE PACKAGE'S; THE libpeas'S; Tom Schoonjans <Tom.Schoonjans@gmail.com>; Tommi Vainikainen; libpeas; libpeas'S; libpeas's authors; the Free Software Foundation; the Free Software Foundation, Inc.; the libpeas",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libpeas-1.30.0-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libpeas@1.30.0-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C8txj278URwSKYBPaTQmoNjsDSWJ8o7_wij4NTO1cqM/libpeas-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://wiki.gnome.org/Projects/Libpeas",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libpeas",
    "versionInfo" : "1.30.0-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libpng-1.6.37-12.el9-arch-x86-64-epoch-2",
    "copyrightText" : "COPYRIGHT 251 2013,2015 John Cunningham Bowler\nCOPYRIGHT Written by Glenn Randers-Pehrson, 2016\nCOPYRIGHT Written by John Cunningham Bowler, 2010\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2015 The Chromium Authors\nCopyright (c) 2000-2008 Adam M. Costello and Cosmin Truta\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2017-2018 Arm Holdings\nCopyright (c) 2006-11-28 Charles Poynton\nCopyright (c) 2001 Christoph Pfisterer\nCopyright (c) 2018-2019 Cosmin Truta\nCopyright (c) 1995, 1996 Frank J. T. Wojcik\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2002, 2007, 2009 Glenn Randers-Pehrson and Andrey A. Chernov\nCopyright (c) 2012 Glenn Randers-Pehrson and Christopher M. Wheeler\nCopyright (c) 1998-2008 Greg Roelofs\nCopyright (c) 1998, 1999, 2002, 2006, 2008, 2010-2014 Greg Roelofs and Glenn Randers-Pehrson\nCopyright (c) 1995 Guy Eric Schalnat, Group\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) John Bowler, 2013\nCopyright (c) 2011-2013 John Cunningham Bowler\nCopyright (c) 2001, Laurent\nCopyright (c) 2000 Marc O. Gloor\nCopyright (c) 1996 Massachusetts Institute of Technology\nCopyright (c) 2002 Patrick R.L. Welche\nCopyright (c) 2000, Pawel Mrochen\nCopyright (c) 2004 Simon-Pierre Cadieux\nCopyright (c) 1995-2019 The\nCopyright (c) 1998 Tim Wegner\nCopyright (c) 2008 Vincent Torri\nCopyright (c) 2003 W3C. (MIT, ERCIM, Keio)\nCopyright (c) Willem van Schaik, 1999, 2011, 2012\nCopyright (c) 1995-2000 Wolf Faust\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998 by Andreas R. Kleinert\n(c) Copyright 1997 Tom Tanner Test\n(c) Willem van Schaik\ncopyright Glenn Randers-Pehrson\ncopyright 1995 Guy Eric Schalnat, Group 42, Inc.\ncopyright Willem van Schaik, 1999-2019\ncopyright (c) 1999-2019 by Willem van Schaik\ncopyrighted by the Free Software Foundation\n(c) readpng2$ (c) PROGHDRS\n\nAuthors: Adam M. Costello and Cosmin Truta; Alexandre Oliva <oliva@dcc.unicamp.br>; Andreas Dilger; Andreas R. Kleinert; Arm Holdings; Charles Poynton; Christian Ehrlicher; Christoph Pfisterer; Cosmin Truta; Fran,cois Pinard; Frank J. T. Wojcik; Free Software Foundation, Inc.; Gary V. Vaughan; Glenn Randers-Pehrson; Glenn Randers-Pehrson and Andrey A. Chernov; Glenn Randers-Pehrson and Christopher M. Wheeler; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Greg Roelofs; Greg Roelofs and Glenn Randers-Pehrson; Greg Roelofs and contributors; Guy Eric Schalnat, Group; Guy Eric Schalnat, Group 42, Inc.; James Yu; John Bowler; John Cunningham Bowler; Laurent; Mandar Sahastrabuddhe; Mans Rullgard; Marc O. Gloor; Martin Zinser; Massachusetts Institute of Technology; Michal Zalewski <lcamtuf@google.com>; Mike Klein and Matt Sarett; Mike Klein and Matt Sarett, Google, Inc.; Patrick R.L. Welche; Pawel Mrochen; Richard Townsend <Richard.Townsend@arm.com>; Roger Leigh; Scott James Remnant; Simon-Pierre Cadieux; The Chromium Authors; Tim Wegner; Tom Tanner Test; Tom Tromey <tromey@cygnus.com>; Vadim Barkov; Vincent Torri; W3C. (MIT, ERCIM, Keio); Willem van Schaik; Wolf Faust; X Consortium; default. Also; readpng2$ PROGHDRS; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libpng-1.6.37-12.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libpng@1.6.37-12.el9?arch=x86_64&epoch=2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KrAo78Uc7Zi4_uRviUMU5EVseVIEGWR4iePH4xLjQ8M/libpng-~-12.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.libpng.org/pub/png/",
    "licenseConcluded" : "Zlib",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libpng",
    "versionInfo" : "1.6.37-12.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-librepo-1.14.5-2.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2012 Colin Walters <walters@verbum.org>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc\nCopyright (c) 2016 Martin Hatina\nCopyright (c) 2021 Red Hat, Inc\nCopyright (c) 2014 Richard Hughes\nCopyright (c) 2014 Richard Hughes <richard@hughsie.com>\nCopyright (c) 2012 Tomas Mlcoch",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/librepo-1.14.5-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/librepo@1.14.5-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_ol63-rGLWhuOa_xc0Yp5WOKOwjOZTE3sSsQN46tc30/librepo-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/librepo",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/librepo",
    "versionInfo" : "1.14.5-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libreport-filesystem-2.15.2-6.el9-arch-noarch",
    "copyrightText" : "Copyright 2006 Rob Landley <rob@landley.net>\nCopyright (c) ABRT Team\nCopyright (c) 2015 ABRT team <abrt-devel-list@redhat.com>\nCopyright (c) 2010 Denys Vlasenko (dvlasenk@redhat.com)\nCopyright (c) 2001 Erik Andersen\nCopyright (c) 2004 Erik Andersen <andersen@codepoet.org>\nCopyright (c) 2009 Jiri Moskovcak (jmoskovc@redhat.com)\nCopyright (c) 2003 Manuel Novoa III <mjn3@codepoet.org>\nCopyright (c) 2001 Matt Krai\nCopyright (c) RedHat inc.\nCopyright (c) 2005, 2006 Rob Landley <rob@landley.net>\nCopyright (c) 2004-2008 Rodney Dawes <dobey.pwns@gmail.com>\nCopyright (c) 2009 Zdenek Prikryl (zprikryl@redhat.com)\nCopyright (c) 1999-2004 by Erik Andersen <andersen@codepoet.org>\nCopyright (c) 1995, 1996, 1997 by Ulrich Drepper <drepper@gnu.ai.mit.edu>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libreport-filesystem-2.15.2-6.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1IgcgfeUqb5Mj7IfoiHFT05VbcOfUK_BGIJ0b0WWer8/libreport-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libreport-filesystem@2.15.2-6.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://abrt.readthedocs.org/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libreport-filesystem",
    "versionInfo" : "2.15.2-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-librhsm-0.0.3-9.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2016 Michael Mraka <michael.mraka@redhat.com>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/librhsm-0.0.3-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XDq9r_f4Vkd-_sbtzCbft3BHLEh48-vPbfmhsJeT12U/librhsm-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/librhsm@0.0.3-9.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/librhsm",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/librhsm",
    "versionInfo" : "0.0.3-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libselinux-3.6-3.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 2004 Red Hat, Inc., James Morris <jmorris@redhat.com>\nEamon Walsh (ewalsh@tycho.nsa.gov) 2007\nKaiGai Kohei (kaigai@ak.jp.nec.com) 2009\nKaiGai Kohei <kaigai@ak.jp.nec.com> 2009",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libselinux-3.6-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oAbk1DCnLq9tRY1MDfYZtvPUSpxVB7W_kIDGgzdnchM/libselinux-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libselinux@3.6-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SELinuxProject/selinux/wiki",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libselinux",
    "versionInfo" : "3.6-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsemanage-3.6-5.el9-6-arch-x86-64",
    "copyrightText" : "Copyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Mellanox Technolgies Inc.\nCopyright (c) 2017 Mellanox Technologies Inc\nCopyright (c) 2017 Mellanox Techonologies Inc\nCopyright (c) 2005 Red Hat Inc.\nCopyright (c) 2004-2005 Tresys Technology, LLC\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsemanage-3.6-5.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/G1jHdmg5zvM1PpnCC60DdW-AOkm5UQoeLvSw-snXxy4/libsemanage-~-5.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SELinuxProject/selinux/wiki",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsemanage",
    "versionInfo" : "3.6-5.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsepol-3.6-2.el9-arch-x86-64",
    "copyrightText" : "Copyright 2011 Tresys Technology, LLC.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1997 Manoj Srivastava <srivasta@debian.org>\nCopyright (c) 2017 Mellanox Technologies Inc.\nCopyright (c) 2017 Mellanox Techonolgies Inc.\nCopyright (c) 2008 NEC Corporation\nCopyright (c) 2003 - 2004 Red Hat, Inc.\nCopyright (c) 2003 Tresys Technology, LLC\nCopyright (c) 2004-2005 Trusted Computer Solutions, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsepol-3.6-2.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsepol@3.6-2.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PTX_o2hBqmOQg-WlbIYcif_ubXutIEF3mytKphBWBZo/libsepol-~-2.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SELinuxProject/selinux/wiki",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsepol",
    "versionInfo" : "3.6-2.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsigsegv-2.13-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-1999, 2002-2012, 2016-2021 Bruno Haible <bruno@clisp.org>\nCopyright 2008-2010 Eric Blake <ebb9@byu.net>\nCopyright 2002-2021 Free Software Foundation, Inc.\nCopyright 1988, 1989 Hans-J. Boehm, Alan J. Demers\nCopyright 2002-2005, 2009 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 1993-1999, 2002-2003, 2006, 2008-2009, 2016-2017, 2021 Bruno Haible <bruno@clisp.org>\nCopyright (c) 2008 Eric Blake <ebb9@byu.net>\nCopyright (c) 2018 Nylon Chen <nylon7@andestech.com>\nCopyright (c) 2002 Paolo Bonzini <bonzini@gnu.org>\nCopyright (c) 1999-2002 Ralf S. Engelschall <rse@engelschall.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1999 by Hewlett-Packard Company\nCopyright (c) 1996-1999 by Silicon Graphics\nCopyright (c) 1991-1995 by Xerox Corporation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsigsegv-2.13-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsigsegv@2.13-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/r8D46_BZDVtFTQ1X58tqWx2fGo9BS3z56RaegpyDI-g/libsigsegv-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libsigsegv/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsigsegv",
    "versionInfo" : "2.13-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsmartcols-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsmartcols-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsmartcols@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsmartcols",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libsolv-0.7.24-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2008-2009 Alexander Neundorf <neundorf@kde.org>\nCopyright 2007 Company Inc\nCopyright 2004-2009 Kitware, Inc.\nCopyright 2000-2009 Kitware, Inc., Insight Software Consortium\nCopyright (c) 2000-2001, Aaron D. Gifford\nCopyright (c) 2011-2013, Ingo Weinhold <ingo_weinhold@gmx.de>\nCopyright (c) 2007, Novell Inc.\nCopyright (c) 2005-2014 Rich Felker\nCopyright (c) 2007-2017, SUSE Inc.\nCopyright (c) 2007-2015, SUSE LLC\nCopyright (c) 1992, 1993 The Regents of the University of California\nCopyright (c) 2001-2008 Ville Laurikari\nCopyright (c) 2001-2009 Ville Laurikari <vl@iki.fi>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libsolv-0.7.24-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libsolv@0.7.24-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jfnsuGylPkzFT_78oH1a2paT9bCBv-5EsZfLrwykAbY/libsolv-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/openSUSE/libsolv",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libsolv",
    "versionInfo" : "0.7.24-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libstdcPLUSPLUS-11.5.0-5.el9-5-arch-x86-64",
    "copyrightText" : "Copyright (c) 2008-2021 Free Software Foundation, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libstdc++-11.5.0-5.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libstdc%2B%2B@11.5.0-5.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ToYhGOaq6rtJ7Jc0ZRXHRBlFdZvMMhKesYmWPrscvUQ/gcc-~-5.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://gcc.gnu.org",
    "licenseConcluded" : "(GPL-2.0-or-later AND LGPL-2.0-or-later AND GPL-3.0-or-later WITH GCC-exception-3.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libstdc++",
    "versionInfo" : "11.5.0-5.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libtasn1-4.16.0-9.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990-2019 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2019 Radical Eye Software\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2009 Allan Caffee <allan.caffee@gmail.com>\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) 2015,2018 Bastien ROUCARIES\nCopyright (c) 2012 Christian Persch\nCopyright (c) 2012 Dan Winship\nCopyright (c) 2015 Enrico M. Crisostomo <enrico.m.crisostomo@gmail.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 2008 John Darrington <j.darrington@elvis.murdoch.edu.au>\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2001, 2002 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Paolo Borelli\nCopyright (c) 2012, 2016 Philip Withnall\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Simon Josefsson\nCopyright (c) 2007-2017 Stefan Sauer\nCopyright (c) 2017-2019 Tim Ruehsen\nCopyright (c) 2008 Tom Howard <tomhoward@users.sf.net>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012 Xan Lopez\nCopyright <http://www.ams.org>\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libtasn1-4.16.0-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libtasn1@4.16.0-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Co9MB1V_ZtSnIGZFc0d6Yrf8Do9x0bTRd04dQCtoQSU/libtasn1-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/libtasn1/",
    "licenseConcluded" : "(GPL-3.0-or-later AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libtasn1",
    "versionInfo" : "4.16.0-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libtool-ltdl-2.4.6-46.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1999, 2003, 2011-2015 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 1994 X Consortium\n(c) 1996 Free Software Foundation, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libtool-ltdl-2.4.6-46.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libtool-ltdl@2.4.6-46.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KOwCFKAsTxnbnR-9vVv8ngv82O2RwLdYwxEuDjXZX5I/libtool-~-46.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.gnu.org/software/libtool/",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libtool-ltdl",
    "versionInfo" : "2.4.6-46.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libunistring-0.9.10-15.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2007 Free Software Foundation, Inc. @url http://fsf.org\nCopyright (c) 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 1999-2005 Patrice Dumas <dumas@centre-cired.fr> , Derek Price <derek@ximbiot.com> , Adrian Aichner <adrian@xemacs.org>\nCopyright (c) 2001-2011 VALUE LegalTrademarks VALUE OriginalFilename unistring.dll\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libunistring-0.9.10-15.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KaBbhfRj3DRmDfH5MGkPgKegJGDJl1hKnvfaPWgHqJ8/libunistring-~-15.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libunistring@0.9.10-15.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/libunistring/",
    "licenseConcluded" : "LGPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libunistring",
    "versionInfo" : "0.9.10-15.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libusbx-1.0.26-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2006-2008, Haiku Inc.\nCopyright 2020-2021 Peter Stoiber\nCopyright (c) 2014 Akshay Jaggi <akshay1994.leo@gmail.com>\nCopyright (c) 2013-2018 Chris Dickens <christopher.a.dickens@gmail.com>\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2007-2009 Daniel Drake <dsd@gentoo.org>\nCopyright (c) 2001-2002 David Brownell (dbrownell@users.sourceforge.net)\nCopyright (c) 2013 Federico Manzan (f.manzan@gmail.com)\nCopyright (c) 1987,88,89,90,91,92,93,94,95,96,98,99,2000,2001 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2019 Google LLC.\nCopyright (c) 2011-2013 Hans de Goede <hdegoede@redhat.com>\nCopyright (c) 2012 Harald Welte <laforge@gnumonks.org>\nCopyright (c) 2001 Johannes Erdfelt <johannes@erdfelt.com>\nCopyright (c) 2009-2013 Ludovic Rousseau <ludovic.rousseau@gmail.com>\nCopyright (c) 2012-2013 Martin Pieuchot <mpi@openbsd.org>\nCopyright (c) 2010-2012 Michael Plante <michael.plante@gmail.com>\nCopyright (c) 2019 Nathan Hjelm <hjelmn@cs.umm.edu>\nCopyright (c) 2008-2021 Nathan Hjelm <hjelmn@cs.unm.edu>\nCopyright (c) 2013 Nathan Hjelm <hjelmn@mac.ccom>\nCopyright (c) 2012-2013 Nathan Hjelm <hjelmn@mac.com>\nCopyright (c) 2008-2016 Nathan Hjelm <hjelmn@users.sourceforge.net>\nCopyright (c) 2016, Oracle and/or its affiliates\nCopyright (c) 2009-2013 Pete Batard <pete@akeo.ie>\nCopyright (c) 2012 Pete Batard (pete@akeo.ie)\nCopyright (c) 2010-2012 Peter Stuge <peter@stuge.se>\nCopyright (c) 2019 Pino Toscano <toscano.pino@tiscali.it>\nCopyright (c) 2012-2013 RealVNC Ltd.\nCopyright (c) 2012-2013 RealVNC Ltd. <toby.gray@realvnc.com>\nCopyright (c) 2014 Red Hat, Inc.\nCopyright (c) 2008 Roger Williams (rawqux@users.sourceforge.net)\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2001 Stephen Williams (steve@icarus.com)\nCopyright (c) 2012-2013 Toby Gray <toby.gray@realvnc.com>\nCopyright (c) 2011 Vitali Lovich <vlovich@aliph.com>\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libusbx-1.0.26-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/L59uiS7V2c5atzwwSVNld1XJc4cb9Gs73OCQ0ri8bNg/libusbx-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://libusb.info",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libusbx",
    "versionInfo" : "1.0.26-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libuuid-2.37.4-21.el9-arch-x86-64",
    "copyrightText" : "COPYRIGHT TRANSLATORS Keep\nCOPYRIGHT (c) 1986 Gary S. Brown\nCopyright 2002 Andre C. Mazzone (linuxdev@karagee.com)\nCopyright 1999 Andreas Dilger (adilger@enel.ucalgary.ca)\nCopyright 2000 Andreas Dilger (adilger@turbolinux.com)\nCopyright 1998 Andries E. Brouwer (aeb@cwi.nl)\nCopyright 2000 Colin Watson (cjw44@cam.ac.uk)\nCopyright 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright 2001 Gunnar Ritter\nCopyright 2003-2005 H. Peter Anvin\nCopyright 2003-2006 H. Peter Anvin. Dies\nCopyright 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright IBM Corp. 2011\nCopyright 2008 James Youngman\nCopyright 2010 Jason Borden <jborden@bluehost.com>\nCopyright 2009 Johannes Berg <johannes@sipsolutions.net>\nCopyright Karel Zak\nCopyright 2007 Karel Zak <kzak@redhat.com>\nCopyright 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright 2010 Lennart Poettering\nCopyright 2009 Marcel Holtmann <marcel@holtmann.org>\nCopyright 2014 Ondrej Oprala (ondrej.oprala@gmail.com)\nCopyright 2014 Ondrej Oprala <ooprala@redhat.com>\nCopyright 1999 Peter Jones, <pjones@redhat.com>\nCopyright 2002-2009 Red Hat, Inc.\nCopyright Red Hat Software, 1999, 2000\nCopyright 1992 Rickard E. Faith (faith@cs.unc.edu)\nCopyright 2004 Robert M. Love\nCopyright 2004 Robert M. Love. Dies\nCopyright 1994 Salvatore Valente (svalente@mit.edu)\nCopyright 2017 Sami Kerola <kerolasa@iki.fi>\nCopyright 2008 Tilman Schmidt (tilman@imap.cc)\nCopyright 2009 Tim Gardner <tim.gardner@canonical.com>\nCopyright 2012 Vivek Goyal <vgoyal@redhat.com>\nCopyright abandoned, 2000, Niels Kristian Bech Jensen <nkbj@image.dk>\nCopyright 2009 by Karel Zak\nCopyright 1993, 1994, 1995 by Theodore Ts'o\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2005 Adrian Bunk <bunk@stusta.de>\nCopyright (c) 2013 Alejandro Martinez Ruiz <alex@nowcomputing.com>\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2001 Andreas Dilger\nCopyright (c) 1999, Andreas Dilger and Theodore Ts'o\nCopyright (c) 2010 Andrew Nayenko <resver@gmail.com>\nCopyright (c) Andries Brouwer\nCopyright (c) 1995 Andries E. Brouwer (aeb@cwi.nl)\nCopyright (c) 2012 Andy Lutomirski <luto@amacapital.net>\nCopyright (c) 2020-2021 Arm Ltd\nCopyright (c) 2012 Arun Persaud <arun@nubati.net>\nCopyright (c) 2014 Benjamin Weis <benjamin.weis@gmx.com>\nCopyright (c) 2000 Beth Powell <bpowell@turbolinux.com>\nCopyright (c) 2008 Cai Qian <qcai@redhat.com>\nCopyright (c) 2009 Corentin Chary <corentincj@iksaif.net>\nCopyright (c) 1998 Danek Duvall <duvall@alumni.princeton.edu>\nCopyright (c) 2016 David Sterba <dsterba@suse.cz>\nCopyright (c) 2010 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2012 Davidlohr Bueso <dave@gnu.org> 2013 Karel Zak <kzak@redhat.com>\nCopyright (c) 1999, 2000, 2001 Elrond <Elrond@Wunder-Nett.org>\nCopyright (c) 2012-2013 Eric Biederman <ebiederm@xmission.com>\nCopyright (c) 2013 Eric Sandeen <sandeen@redhat.com>\nCopyright (c) 2020 FUJITSU LIMITED.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2002, 2003, 2004, 2005 Free Software Foundation, Inc. Antoni Bella Perez <bella5@teleline.es> , 2002, 2003. Jordi Mallach <jordi@gnu.org> , 2004, 2005. Josep Puigdemont <josep.puigdemont@gmail.com> , 2005\nCopyright (c) 2001, 2002, 2003, 2004, 2007, 2016, 2017, 2018, 2019, 2020, 20201Free Software Foundation, Inc. Christian Rose <menthos@menthos.com> , 2001, 2002, 2003, 2004. Daniel Nylander <po@danielnylander.se> , 2007. Sebastian Rasmussen <sebras@gmail.com> , 2016, 2017, 2018, 2019, 2020, 2021\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1997-2014 Frodo Looijaard\nCopyright (c) 2020 Gao Xiang\nCopyright (c) 1990 Gordon Irlam (gordoni@cs.ua.oz.au)\nCopyright (c) 2000-2001 Gunnar Ritter\nCopyright (c) 2000-2001 Gunnar Ritter. Med\nCopyright (c) 2000-2001 Gunnar Ritter. Sva\nCopyright (c) 2000-2001 Gunnar Ritter. Todos\nCopyright (c) 2000-2001 Gunnar Ritter. Vsechna\nCopyright (c) 2000-2001 Gunnar Ritter. Wszelkie\nCopyright (c) 2003 -2006 H. Peter Anvin\nCopyright (c) 2010 Hajime Taira <htaira@redhat.com> Masatake Yamato <yamato@redhat.com>\nCopyright (c) 2018 Harry Mallon <hjmallon@gmail.com>\nCopyright (c) 2008 Hayden A. James (hayden.james@gmail.com)\nCopyright (c) 2006 Hewlett-Packard Development Company, L.P. Huschaam Hussain <Huschaam.Hussain@hp.com> TSG Solution Alliances Engineering\nCopyright (c) 2017 Hewlett Packard Enterprise Development LP\nCopyright (c) 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com>\nCopyright (c) 1999 Jakub Jelinek <jj@ultra.linux.cz>\nCopyright (c) 2008 James Youngman\nCopyright (c) 2008, James Youngman <jay@gnu.org>\nCopyright (c) 2010 Jason Borden <jborden@bluehost.com>\nCopyright (c) 1994-2005 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2005 Jens Axboe <jens@axboe.dk>\nCopyright (c) 2010 Jeroen Oortwijn <oortwijn@gmail.com>\nCopyright (c) 2008 - 2012 Julian Andres Klode\nCopyright (c) 2008 - 2014 Julian Andres Klode <jak@jak-linux.org>\nCopyright (c) 2011-2017 Kareil Zak <kzak@redhat.com>\nCopyright (c) 2008 -2019 Karel Zak\nCopyright (c) 2008 Karel Zak <kzak@redhat.com>\nCopyright (c) 2007-2013 Karel Zak <kzak@redhat.com> 2012 Davidlohr Bueso <dave@gnu.org>\nCopyright (c) 2013 Karel Zak <kzak@redhat.com> 2013 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2015 Karel Zak <ooprala@redhat.com>\nCopyright (c) 2001, 2002 Karl Eichwalder\nCopyright (c) 2004 Kay Sievers <kay.sievers@vrfy.org>\nCopyright (c) 2014 Kevin Cernekee <cernekee@gmail.com>\nCopyright (c) 1994-1999 Kevin E. Martin\nCopyright (c) 1994 Kevin E. Martin (martin@cs.unc.edu)\nCopyright (c) 2002-2018 Lauri Nurmi <lanurmi@iki.fi> Lauri Nurmi <lanurmi@iki.fi> , 2002-2018. Tommi Nieminen <translator@legisign.org> , 2017\nCopyright (c) 2012 Lennart Poettering\nCopyright (c) 1991 Linus Torvalds\nCopyright (c) 1988 Mark Nudleman\nCopyright (c) 2007 Matthias Koenig <mkoenig@suse.de>\nCopyright (c) 2002 Meelis Roos <mroos@linux.ee> Meelis Roos <mroos@linux.ee> , 2002\nCopyright (c) 1992-1997 Michael K. Johnson, johnsonm@redhat.com\nCopyright (c) 2010 Michael Krapp\nCopyright (c) Michael Piefel <piefel@informatik.hu-berlin.de> , 2002, 2004, 2005, 2007, 2008\nCopyright (c) Michal Luscon <mluscon@redhat.com>\nCopyright (c) 2016 Micron Technology, Inc.\nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2009 Mike Hommey <mh@glandium.org>\nCopyright (c) 2009 Mikhail Gusarov <dottedmag@dottedmag.net>\nCopyright (c) 2018 Milan Broz <gmazyland@gmail.com>\nCopyright (c) 2012 Milan Broz <mbroz@redhat.com>\nCopyright (c) 1991-2004 Miquel van Smoorenburg\nCopyright (c) 1991-2000 Miquel van Smoorenburg <miquels@cistron.nl>\nCopyright (c) 2004 Nilgun Belma Buguner\nCopyright (c) 2012 Ondrej Oprala <ooprala@redhat.com>\nCopyright (c) 2013 Ondrej Oprala <ooprala@redhat.com> Karel Zak <kzak@redhat.com>\nCopyright (c) 2014-2017 Pali Rohar <pali.rohar@gmail.com>\nCopyright (c) 2017 Philip Prindeville\nCopyright (c) 2011,2015,2016 Philipp Thomas <pth@suse.de>\nCopyright (c) 2020-2021 Qais Yousef\nCopyright (c) 2020-2021 Qais Yousef <qais.yousef@arm.com>\nCopyright (c) 2017 Rafal Milecki <rafal@milecki.pl>\nCopyright (c) 2003-2007 Red Hat, Inc.\nCopyright (c) 1980 Regents of the University of California\nCopyright (c) 1992 Rik Faith (faith@cs.unc.edu)\nCopyright (c) 2018 Riku Voipio <riku.voipio@iki.fi>\nCopyright (c) 2004 Robert Love\nCopyright (c) 2004 Robert M. Love\nCopyright (c) 2013 Rolf Fokkens <rolf@fokkens.nl>\nCopyright (c) 2010 Rosetta Contributors\nCopyright (c) 2008 Roy Peled\nCopyright (c) 2008 Roy Peled, the.roy.peled -at- gmail.com\nCopyright (c) 2016 SUSE Linux GmbH\nCopyright (c) 2017 Sami Kerola\nCopyright (c) 2012 Sami Kerola <kerolasa@iki.fi>\nCopyright (c) 2001, 2002, 2003 Santiago Vila Doncel <sanvila@unex.es>\nCopyright (c) 2015,2016 Seagate Technology\nCopyright (c) 2003-2005 Silicon Graphics, Inc.\nCopyright (c) 2016 Stanislav Brabec <sbrabec@suse.cz>\nCopyright (c) 2011 SuSE LINUX Products GmbH\nCopyright (c) 1997 The Open Group\nCopyright (c) 1989 The Regents of the University of California\nCopyright (c) 1995, 1995 Theodore Ts'o\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 1993 Theodore Ts'o <tytso@athena.mit.edu>\nCopyright (c) 2001, 2003 Theodore Y. Ts'o\nCopyright (c) 2003, 2004, 2005 Thorsten Kukuk\nCopyright (c) 2014 Timofey Titovets <Nefelim4ag@gmail.com>\nCopyright (c) 2018 Tony Asleson <tasleson@redhat.com>\nCopyright (c) 1999-2002 Transmeta Corporation\nCopyright (c) 2000-2002 Transmeta Corporation 2005 Adrian Bunk\nCopyright (c) 2018 Vaclav Dolezal <vdolezal@redhat.com>\nCopyright (c) 2000 Werner Almesberger\nCopyright (c) 2012 Werner Fink <werner@suse.de>\nCopyright (c) 2020 Western Digital Corporation\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Andreas Dilger\nCopyright (c) 2009-2010 by Andreas Dilger <adilger@sun.com>\nCopyright (c) 1999 by Andries Brouwer\nCopyright (c) 2009 by Bastian Friedrich <bastian.friedrich@collax.com>\nCopyright (c) 2010 by Jiro SEKIBA <jir@unicus.jp>\nCopyright (c) 2004-2006 by Juliane Holzt, kju -at- fqdn.org\nCopyright (c) 2018 by Kenneth Van Alstyne <kvanals@kvanals.org>\nCopyright (c) 2011 by Philipp Marek <philipp.marek@linbit.com>\nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 20nn Example Commercial, Inc\nCopyright (c) 2008-2016, util-linux's\nCopyright (c) 2019 zhenwei pi <pizhenwei@bytedance.com>\n(c) Gunnar Ritter, 2000-2001\n(c) 2000-2001 Gunnar Ritter. Ban Quan Suo\n(c) 2000-2001 Gunnar Ritter. Giu\n(c) 2000-2001 Gunnar Ritter. Kaikki\n(c) 2000-2001 Gunnar Ritter. Tum\n(c) 2014 Karel Zak <kzak@redhat.com>\n(c) 1994-1999 Kevin E. Martin\n(c) 1991 Linus Torvalds\n(c) 1994 Martin Schulze <joey@infodrom.north.de>\n(c) 1994 Salvatore Valente <svalente@mit.edu>\n(c) 2017 Sami Kerola\n(c) 1980, 1989, 1991 The Regents of the University of California\n(c) UNIX System Laboratories, Inc.\n(c) 2012 by Cody Maloney <cmaloney@theoreticalchaos.com>\n(c) 1994 by salvatore valente <svalente@athena.mit.edu>\n(c) nam 1994-1999\ncopyright Pali Rohar\ncopyright (c) 1997-2005 by Frodo Looijaard\ncopyrighted by the Free Software Foundation\n\nAuthors: 20201Free Software Foundation, Inc. Christian Rose , Daniel Nylander , Sebastian Rasmussen; 20nn Example Commercial, Inc; A. V. Le Blanc; A. V. Le Blanc leblanc@mcc.ac.uk; Adrian Bunk; Alan Wendt <alan@ezlink.com>; Alejandro Martinez Ruiz; Alessandro Rubini; Alexandre Oliva <oliva@dcc.unicamp.br>; Alvaro Martinez Echevarria (alvaro@enano.etsit.upm.es); Alvaro Martinez Echevarria, alvaro@enano.etsit.upm.es; Andre C. Mazzone; Andreas Dilger; Andreas Dilger and Theodore Ts'o; Andreas Schwab; Andreas Schwab <schwab@LS5.informatik.uni-dortmund.de>; Andrew Haylett <ajh@gec-mrc.co.uk>; Andrew Nayenko; Andries Brouwer; Andries E. Brouwer; Andries E. Brouwer (aeb@cwi.nl); Andries E. Brouwer, A. V. Le Blanc and others; Andy Lutomirski; Arjan van de Ven <arjanv@redhat.com>; Arkadiusz Miskiewicz <misiek@pld.org.pl>; Arm Ltd; Arun Persaud; Bastian Friedrich; Benjamin Schwenk <benjaminschwenk@yahoo.de> and Sybren Stuvel <sybren@thirdtower.com> Not; Benjamin Weis; Bernhard Fastenrath (fasten@informatik.uni-bonn.de); Beth Powell; Bryan Henderson <bryanh@giraffe-data.com>; Cai Qian; Charles Hedrick, hedrick@cs.rutgers.edu; Christophe Jolif (cjolif@storm.gatelink.fr.net); Clemens von Mann, Heiko Carstens and Karel Zak; Cody Maloney; Colin Plumb; Colin Watson; Corentin Chary; Danek Duvall; David Engel, <david@ods.com> Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Ron Sommeling, <sommel@sci.kun.nl>; David MacKenzie <djm@gnu.ai.mit.edu>; David MacKenzie <djm@web.us.uu.net>; David Sterba; Davidlohr Bueso; Davidlohr Bueso Karel Zak; Doug Quale (quale@saavik.cs.wisc.edu); Doug Quale <quale@saavik.cs.wisc.edu> , H.J. Lu <hlu@eecs.wsu.edu>; Elliot Lee <sopwith@redhat.com>; Elrond; Eric Biederman; Eric Sandeen; Eric Sandeen <sandeen@redhat.com> Karel Zak <kzak@redhat.com>; Erik Troan <ewt@redhat.com>; FUJITSU LIMITED.; Fran,cois Pinard; Free Software Foundation Inc.; Free Software Foundation, Inc.; Free Software Foundation, Inc. Antoni Bella Perez , Jordi Mallach , Josep Puigdemont; Frodo Looijaard; Gabriel M. Schuyler <schuyler@easiest.com>; Gao Xiang; Gary S. Brown; Gary V. Vaughan; Geoff Peck UCB; Gerald Schaefer; Gerhard Schneider <gs@ilfb.tuwien.ac.at>; Gordon Irlam; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gunnar Ritter; Gunnar Ritter. Ban Quan Suo; Gunnar Ritter. Giu; Gunnar Ritter. Kaikki; Gunnar Ritter. Med; Gunnar Ritter. Sva; Gunnar Ritter. Todos; Gunnar Ritter. Tum; Gunnar Ritter. Vsechna; Gunnar Ritter. Wszelkie; H. J. Lu (hlu@eecs.wsu.edu); H. Peter Anvin; H. Peter Anvin. Dies; Hajime Taira; Hajime Taira Masatake Yamato; Harry Mallon; Hayden A. James; Heiko Carstens <heiko.carstens@de.ibm.com>; Hewlett Packard Enterprise Development LP; Hewlett-Packard Development Company, L.P. Huschaam Hussain TSG Solution Alliances Engineering; IBM Corp.; Igor Gnatenko; J. S. Connell <ankh@canuck.gen.nz>; Jakub Jelinek; James Youngman; Jason Borden; Jeff Tranter; Jens Axboe; Jeroen Oortwijn; Jesse Thilo <Jesse.Thilo@pobox.com>; Jindrich Novy <jnovy@redhat.com>; Jiro SEKIBA; Joey Hess <joey@kitenet.net>; Johannes Berg; John Foderaro UCB; Jonathan Kamens <jik@annex-1-slip-jik.cam.ov.com>; Julian Andres Klode; Juliane Holzt, kju -at- fqdn.org; Kareil Zak; Karel Zak; Karel Zak <kzak@redhat.com>; Karel Zak <kzak@redhat.com> Petr Uzel <petr.uzel@suse.cz>; Karel Zak Davidlohr Bueso; Karel Zak Sami Kerola; Karl Eichwalder; Kars de Jong (jongk@cs.utwente.nl); Kars de Jong <jongk@cs.utwente.nl>; Kay Sievers; Kay Sievers <kay.sievers@vrfy.org>; Kenneth Van Alstyne; Kevin Cernekee; Kevin E. Martin; Kevin E.Martin; Lauri Nurmi Lauri Nurmi , Tommi Nieminen; Lennart Poettering; Linus Torvalds; Lukas Czerner <lczerner@redhat.com>; Lukas Czerner <lczerner@redhat.com> Karel Zak <kzak@redhat.com>; Maciej W. Rozycki, macro@ds2.pg.gda.pl; Marcel Holtmann; Marcel Mol (marcel@dutecad.et.tudelft.nl); Mark Nudleman; Martin Schulze; Martin Schulze <joey@finlandia.infodrom.north.de>; Masatake YAMATO <yamato@redhat.com>; Matthias Koenig; Meelis Roos Meelis Roos; Michael Glad (glad@daimi.aau.dk); Michael K. Johnson; Michael Krapp; Michael Meskes <meskes@Informatik.RWTH-Aachen.DE>; Michael Piefel; Michal Luscon; Micron Technology, Inc.; Microsoft Corporation; Mika Liljeberg (liljeber@cs.Helsinki.FI); Mike Grupenhoff (kashmir@umiacs.umd.edu); Mike Grupenhoff <kashmir@umiacs.UMD.EDU>; Mike Hommey; Mike Jagdis jaggy@purplet.demon.co.uk; Mikhail Gusarov; Milan Broz; Milan Broz <mbroz@redhat.com> Karel Zak <kzak@redhat.com>; Miquel van Smoorenburg; Nicolai Langfeldt (janl@math.uio.no); Nicolai Langfeldt <janl@math.uio.no>; Nilgun Belma Buguner; Ondrej Oprala; Ondrej Oprala Karel Zak; Ondrej Oprala and Karel Zak; Padraig Brady; Pali Rohar; Paul Eggert <eggert@cs.ucla.edu>; Paul Eggert <eggert@twinsun.com>; Peter Breitenlohner, peb@mppmu.mpg.de; Peter Jones; Peter Jones <pjones@redhat.com> Jeremy Katz <katzj@redhat.com>; Peter Orbaek <poe@daimi.aau.dk>; Peter Rosin <peda@lysator.liu.se>; Philip Prindeville; Philipp Marek; Philipp Thomas; Qais Yousef; Rafal Milecki; Randolph Bentson, <bentson@grieg.seaslug.org>; Red Hat Software; Red Hat, Inc.; Regents of the University of California; Rich $alz <rsalz@bbn.com> and Jim Berets <jberets@bbn.com>; Richard Stallman; Rickard E. Faith; Rik Faith; Rik Faith and myself. Probably; Riku Voipio; Robert Love; Robert M. Love; Robert M. Love. Dies; Rolf Fokkens; Rosetta Contributors; Roy Peled; Roy Peled, the.roy.peled -at- gmail.com; SUSE Linux GmbH; SUSE Linux Products GmbH; Salvatore Valente; Salvatore Valente <svalente@mit.edu>; Sami Kerola; Santiago Vila Doncel; Scott James Remnant; Scott Telford <st@epcc.ed.ac.uk>; Seagate Technology; Shaun Tancheff <shaun.tancheff@seagate.com>; Silicon Graphics, Inc.; Stanislav Brabec; Steve Reid <steve@edmweb.com>; Steven M. Bellovin <smb@research.att.com>; TRANSLATORS Keep; Ted Ts'o; The Open Group; The Regents of the University of California; Theodore Ts'o; Theodore Ts'o (tytso@mit.edu); Theodore Ts'o <tytso@mit.edu>; Theodore Ts'o, <tytso@mit.edu>; Theodore Ts'o. Also; Theodore Y. Ts'o; Thorsten Kukuk; Thorsten Kukuk <kukuk@suse.de>; Tilman Schmidt; Tim Gardner; Timofey Titovets; Tom Tromey <tromey@cygnus.com>; Tony Asleson; Transmeta Corporation; Transmeta Corporation Adrian Bunk; UNIX System Laboratories, Inc.; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; University of California; Vaclav Dolezal; Victor A. Abell <abe@purdue.edu>; Vivek Goyal; Werner Almesberger; Werner Almesberger, Remy Card, Stephen Tweedie and Eric Youngdale; Werner Fink; Werner Fink <werner@suse.de>; Western Digital Corporation; Wietse Venema; Will Dyson <will_dyson@pobox.com>; X Consortium; a BSD-like; abandoned, Niels Kristian Bech Jensen; abe@purdue.edu Victor A. Abell; aeb@cwi.nl Andries E. Brouwer; awayzzz@digibel.org; bryanh@giraffe-data.com Bryan Henderson; c .MTO abe atpurdue.edu Victor A. Abell; c .MTO aeb atcwi.nl Andries E. Brouwer; c .MTO bryanh atgiraffe -data.com Bryan Henderson; c .MTO dbrownell atusers.sourceforge.net David Brownell; c .MTO jborden atbluehost.com Jason Borden; c .MTO joey atkitenet.net Joey Hess; c .MTO johannes atsipsolutions.net Johannes Berg; c .MTO linux atyoumustbejoking.demon.co.uk Darren Salt for the Debian project; c .MTO rogers atamadeus.wr.tek.com Roger Southwick; c .MTO tytso atmit.edu Theodore; c .MTO wietse atwzv.win.tue.nl W.Z. Venema; dbrownell@users.sourceforge.net David Brownell; faith@acm.org; faith@cs.unc.edu; janl@math.uio.no; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak; jborden@bluehost.com Jason Borden and kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; joey@kitenet.net Joey Hess; johannes@sipsolutions.net Johannes Berg and marcel@holtmann.org Marcel Holtmann; kerolasa@iki.fi Sami Kerola and kzak@redhat.com Karel Zak for the util-linux project; linux@youmustbejoking.demon.co; linux@youmustbejoking.demon.co.uk; mkudfiso Pali Rohar; msgstr Error; msgstr Interner Fehler; msgstr Nei; msgstr Nei Bu Cuo; msgstr Vnitrni; msgstr s'ha; nam; poe@daimi.aau; poe@daimi.aau.dk; poe@daimi.aau.dk Peter Orbaek; rewritten by Karel Zak; rewritten by Karel Zak c .MTO kzak atredhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak; rewritten by Karel Zak kzak@redhat.com Karel Zak msgstr jens@axboe.dk Jens Axboe; rewritten by c .MTO kzak atredhat.com Karel Zak , .MTO rgerhards atadiscon.com Rainer Gerhards; rewritten by kzak@redhat.com Karel Zak mailto rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rewritten by kzak@redhat.com Karel Zak rgerhards@adiscon.com Rainer Gerhards and kerolasa@iki.fi Sami Kerola; rogers@amadeus.wr.tek; rogers@amadeus.wr.tek.com Roger Southwick; schwab@issan.informatik.uni-dortmund; the Free Software Foundation; the Open Software Foundation (OSF) Distributed Computing Environment (DCE); the University of California, Berkeley; the University of California, Berkeley and its contributors; tytso@athena.mit.edu Theodore Ts'o; tytso@mit.edu Theodore Ts'o; util-linux's; various people faith@cs.unc.edu, martin@cs.unc.edu; wietse@wzv win.tue.nl W.Z. Venema; wietse@wzv.win.tue.nl W.Z. Venema; zhenwei pi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libuuid-2.37.4-21.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libuuid@2.37.4-21.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IUB6C6mfR99ibNK7R8jEZhcdMfk65kPcN1xbhvYljsM/util-linux-~-21.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://en.wikipedia.org/wiki/Util-linux",
    "licenseConcluded" : "(0BSD AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libuuid",
    "versionInfo" : "2.37.4-21.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libverto-0.3.2-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2011 Red Hat, Inc.\nCopyright (c) 2012-2015 Dan Nicholson <dbn.lists@gmail.com>\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2004 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libverto-0.3.2-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libverto@0.3.2-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Qo2g0LklrY10gBGAdJsm3JZIlz-NmXA6PaCC9M9Ly70/libverto-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/latchset/libverto",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libverto",
    "versionInfo" : "0.3.2-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxcb-1.13.1-9.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2001-2006 Bart Massey, Jamey Sharp, and Josh Triplett\nCopyright (c) 2001-2004 Bart Massey and Jamey Sharp\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2009 Jatin Golani\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/libxcb-1.13.1-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxcb@1.13.1-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2BxepafAs_vSybqZ4n2ONMLIYuEvblbcJNYH20-p-S0/libxcb-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://xcb.freedesktop.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxcb",
    "versionInfo" : "1.13.1-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxcrypt-4.4.18-3.el9-arch-x86-64",
    "copyrightText" : "Copyright Alexander Peslyak\nCopyright Alexander Peslyak, Bjorn Esser\nCopyright Alexey Degtyarev\nCopyright Andrew Collier FSF\nCopyright 2015 Bjorn Esser\nCopyright Bjorn Esser\nCopyright Colin Percival\nCopyright David Burren\nCopyright Francesco Salvestrini FSF\nCopyright Free Software Foundation, Inc.\nCopyright Guido U. Draheim, Maarten Bosmans FSF\nCopyright Juniper Networks, Inc.\nCopyright Kevin Cernekee FSF\nCopyright Maarten Bosmans FSF\nCopyright Michael Bretterklieber, Bjorn Esser\nCopyright Mike Frysinger FSF\nCopyright Philip Withnall FSF\nCopyright 2005, 2008, 2009 2011 SUSE LINUX Products GmbH, Germany\nCopyright Scott James Remnant, Dan Nicholson GPL\nCopyright Solar Designer, Colin Percival\nCopyright 2000-2011 Solar Designer, 2017 Zack Weinberg\nCopyright Steven G. Johnson, Daniel Richard G. GPL\nCopyright 2002, 2003, 2004 SuSE Linux AG, Germany\nCopyright Thorsten Kukuk, Bjorn Esser, Zack Weinberg LGPL\nCopyright Tim Toolan FSF\nCopyright Vitaly Chikunov, Bjorn Esser\nCopyright Zack Weinberg\nCopyright Zack Weinberg and Free Software Foundation, Inc\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libxcrypt-4.4.18-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxcrypt@4.4.18-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/m4HkP-jbPjs5G-tMNFTCec6pni87PC1MuZCJ0pUSpXQ/libxcrypt-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/besser82/libxcrypt",
    "licenseConcluded" : "(0BSD AND BSD-2-Clause AND BSD-3-Clause AND LGPL-2.0-or-later AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxcrypt",
    "versionInfo" : "4.4.18-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libxml2-2.9.13-11.el9-6-arch-x86-64",
    "copyrightText" : "Copyright' Copyright (c) 1999 http://www.w3.org/ W3C ( http://www.lcs.mit.edu/ MIT, http://www.inria.fr/ INRIA, http://www.keio.ac.jp/ Keio )\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2001, 2004 .br\nCopyright (c) 2000\nCopyright (c) 1999-2000 BP6.com\nCopyright (c) 1998 Bjorn Reese and Daniel Stenberg\nCopyright (c) 2000,2012 Bjorn Reese and Daniel Veillard\nCopyright (c) 2001 Bjorn Reese <breese@users.sourceforge.net>\nCopyright (c) 2010-2017 Christopher Swenson\nCopyright (c) 1998-2012 Daniel Veillard\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2000 Gary Pennington and Daniel Veillard\nCopyright (c) 2012 Google Inc.\nCopyright (c) 2002, 2003 John Fleck\nCopyright (c) 2012 Vojtech Fried\nCopyright (c) 1994-99 Wired Digital Inc.\nCopyright (c) 1994 X Consortium\nCopyright http://www.w3.org/Consortium/Legal/ipr-notice\n(c) Copyright Microsoft Cor\n(c) Copyright Microsoft Corporation, 1999\n(c) 2000 GameSquad.net\n(c) International Organization\n(c) 1999-2, 59 SAX.startElement(br) SAX.endElement(br)\n(c) 1999, 2000 WAP Forum Ltd.\ncopyright Netscape Communications, 1999 Dan Libby",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libxml2-2.9.13-11.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libxml2@2.9.13-11.el9_6?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Mka_W5uYFxZf9ojLtBLAQdAbHkey9qRQ7Y9y91xquJw/libxml2-~-11.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://xmlsoft.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libxml2",
    "versionInfo" : "2.9.13-11.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libyaml-0.2.5-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2017-2020 Ingy\nCopyright (c) 2006-2016 Kirill Simonov\nCopyright (c) 1994 X Consortium",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libyaml-0.2.5-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libyaml@0.2.5-7.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/L-3G_wDGKq7-PGfemsonol9y39KGVr_0xMsplewSkYA/libyaml-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/yaml/libyaml",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libyaml",
    "versionInfo" : "0.2.5-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-libzstd-1.5.5-1.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) Meta Platforms, Inc. and affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/libzstd-1.5.5-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/libzstd@1.5.5-1.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o0oZLQPUQ4XdKv_cIULnGcR3OeVG8E4VnQ89AgcrC4o/zstd-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/facebook/zstd",
    "licenseConcluded" : "(BSD-3-Clause AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/libzstd",
    "versionInfo" : "1.5.5-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lksctp-tools-1.0.19-3.el9-4-arch-x86-64",
    "copyrightText" : "Copyright 2001, D. Otis\nCopyright 2003 La Monte HP Yarroll <piggy@acm.org>\nCopyright 2001 Motorola, Cisco, Intel, Nokia, La Monte Yarroll\nCopyright 2002 Nokia, La Monte Yarroll, Intel\nCopyright (c) 1999 Cisco\nCopyright (c) 1999-2000 Cisco, Inc.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2003 Hewlett-Packard Development Company, L.P\nCopyright (c) 2011 IETF Trust\nCopyright (c) 2011 IETF Trust and the persons identified as the document authors\nCopyright (c) 2001 Intel Corp.\nCopyright (c) 2002 Intel Corporation\nCopyright (c) 2001 International Business Machines, Corp.\nCopyright (c) 2001 La Monte H.P. Yarroll\nCopyright (c) 1999-2000 Motorola\nCopyright (c) 1999-2001 Motorola, Inc.\nCopyright (c) 2001 Nokia\nCopyright (c) 2001 Nokia, Inc.\nCopyright (c) The IETF Trust (2007)\nCopyright (c) The IETF Trust (2007). Abstract\nCopyright (c) The Internet Society (2000)\n(c) Copyright Frank Filz IBM Corp. 2005\n(c) Copyright Fujitsu Ltd. 2008, 2009\n(c) Copyright Hewlett-Packard Company 2004\n(c) Copyright 2007 Hewlett-Packard Development Company, L.P.\n(c) Copyright IBM Corp. 2001, 2003\n(c) Copyright REDHAT Corp. 2018\n(c) Copyright Sridhar Samudrala IBM Corp. 2004, 2005\n(c) Copyright Xin Long REDHAT Corp. 2018\n(c) 2002 Intel Corporation Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>\n(c) 2002 Intel Corporation Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com> Sridhar Samudrala <sri@us.ibm.com>\ncopyrighted by the Free Software Foundation\n\nAuthors: Cisco; Cisco, Inc.; D. Otis; Francois-Xavier Kowalski; Frank Filz IBM Corp.; Fred Douglis <douglis@research.att.com>; Free Software Foundation, Inc.; Fujitsu Ltd.; Hewlett-Packard Company; Hewlett-Packard Development Company, L.P.; IANA. Four; IBM Corp.; IETF Trust; IETF Trust and the persons identified as the document authors; Intel Corp.; Intel Corporation; Intel Corporation Inaky Perez-Gonzalez; Intel Corporation Inaky Perez-Gonzalez Sridhar Samudrala; International Business Machines, Corp.; La Monte H.P. Yarroll; La Monte H.P. Yarroll <piggy@acm.org>; La Monte HP Yarroll; La~Monte H.P. Yarroll; Matthew Ward, CS Department, Worcester Polytechnic Institute; Motorola; Motorola, Cisco, Intel, Nokia, La Monte Yarroll; Motorola, Inc.; Nokia; Nokia, Inc.; Nokia, La Monte Yarroll, Intel; REDHAT Corp.; Sridhar Samudrala IBM Corp.; The IETF Trust; The IETF Trust Abstract; The Internet Society; Xin Long REDHAT Corp.; lksctp-developers@lists.sourceforget.net; the Free Software Foundation; yfj@stanford.edu",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lksctp-tools-1.0.19-3.el9_4.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lksctp-tools@1.0.19-3.el9_4?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zirVUDydWYjDZfzkdrD-eyLSs3A-04gbmMU_zJnpwTo/lksctp-tools-~-3.el9_4.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://lksctp.sourceforge.net",
    "licenseConcluded" : "(LGPL-2.0-only AND MIT AND GPL-2.0-or-later AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lksctp-tools",
    "versionInfo" : "1.0.19-3.el9_4"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lua-libs-5.4.4-4.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1994 2022 Lua.org, PUC-Rio\nCopyright (c) 1994-2013 Lua.org, PUC-Rio\nCopyright (c) 2020 2022 Lua.org, PUC-Rio. Freely\nCopyright (c) 1994-2022 Lua.org, PUC-Rio $$LuaAuthors R. Ierusalimschy, L. H. de Figueiredo, W. Celes\nCopyright (c) 2015 Tom Callaway <spot@fedoraproject.org>\n\nAuthors: Lua.org, PUC-Rio; Lua.org, PUC-Rio $$LuaAuthors R. Ierusalimschy, L. H. de Figueiredo, W. Celes; Lua.org, PUC-Rio. Freely; Tom Callaway; a http://www.lua.org/authors.html' team at http://www.puc-rio.br",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lua-libs-5.4.4-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lua-libs@5.4.4-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6DzTXXK3eDqSfeAExQv5RDRSb99B4yLG8Osdjm7gG7w/lua-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.lua.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lua-libs",
    "versionInfo" : "5.4.4-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lua-posix-35.0-8.el9-arch-x86-64",
    "copyrightText" : "Copyright Natanael Copa <natanael.copa@gmail.com> 2008-2010 Clean\nCopyright Reuben Thomas <rrt@sc3d.org> 2010-2011\nCopyright (c) 2013-2020 Gary V. Vaughan\nCopyright (c) 2008-2010 Natanael Copa <natanael.copa@gmail.com>\nCopyright (c) 2010-2013 Reuben Thomas <rrt@sc3d.org>\nCopyright (c) 2006-2020 luaposix authors\n\nAuthors: Gary V. Vaughan; Leo Razoumov <slonik.az@gmail.com>; Natanael Copa; Natanael Copa Clean; Reuben Thomas; luaposix authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/lua-posix-35.0-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I9b2QlHSLFAh0ZXZtwAe7OxaJk4eIExnoS-dCoCqdEM/lua-posix-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lua-posix@35.0-8.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://luaforge.net/projects/luaposix/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lua-posix",
    "versionInfo" : "35.0-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lua-5.4.4-4.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1994 2022 Lua.org, PUC-Rio\nCopyright (c) 1994-2013 Lua.org, PUC-Rio\nCopyright (c) 2020 2022 Lua.org, PUC-Rio. Freely\nCopyright (c) 2015 Tom Callaway <spot@fedoraproject.org>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/l/lua-5.4.4-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6DzTXXK3eDqSfeAExQv5RDRSb99B4yLG8Osdjm7gG7w/lua-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lua@5.4.4-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.lua.org/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lua",
    "versionInfo" : "5.4.4-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-lz4-libs-1.9.3-5.el9-arch-x86-64",
    "copyrightText" : "Copyright Kyle Harper\nCopyright Takayuki Matsuoka\nCopyright (c) 2015, Louis P. Santillan <lpsantil@gmail.com>\nCopyright (c) Przemyslaw Skibinski 2016-present\nCopyright (c) 2011-2016, Yann Collet\nCopyright (c) 2011-2020 Yann Collet\nCopyright (c) Yann Collet 2011-present\nCopyright (c) 2014, lpsantil\nCopyright (c) 2016-present, Facebook, Inc.\nCopyright (c) 2016-present, Przemyslaw Skibinski\nCopyright (c) 2016-present, Przemyslaw Skibinski, Yann Collet\nCopyright (c) 2011-present, Yann Collet\nCopyright (c) 2018-present lzutao <taolzu(at)gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/l/lz4-libs-1.9.3-5.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/lz4-libs@1.9.3-5.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OOY6Ndo2TS-H4LJ3vcZblUY_oc-xxT-z2f9JsQvcf8Y/lz4-~-5.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://lz4.github.io/lz4/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/lz4-libs",
    "versionInfo" : "1.9.3-5.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-lib-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2018 Google, Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2001-2022 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2004-2017 QOS.ch\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-lib-3.8.5-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-lib@3.8.5-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XEGvuYGIacFGCMxrLhAVpwDrgxA9MPQnDRDK5IeNnrw/maven-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-lib",
    "versionInfo" : "3.8.5-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-openjdk21-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2018 Google, Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2004-2017 QOS.ch\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-openjdk21-3.8.5-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-openjdk21@3.8.5-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XEGvuYGIacFGCMxrLhAVpwDrgxA9MPQnDRDK5IeNnrw/maven-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-openjdk21",
    "versionInfo" : "3.8.5-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-resolver-1.7.3-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2008 The Apache Software Foundation\nCopyright 2010-2021 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-resolver-1.7.3-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-resolver@1.7.3-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eunum1Ifb2ESkl5_agPXm51xIDkzPW7074O4uPIbFlo/maven-resolver-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/resolver/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-resolver",
    "versionInfo" : "1.7.3-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-shared-utils-3.3.4-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-shared-utils-3.3.4-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-shared-utils@3.3.4-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iRWzqPewMbNeyQKjJhRhX5ufd6uI0upx-IUPDngTqQQ/maven-shared-utils-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/shared/maven-shared-utils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-shared-utils",
    "versionInfo" : "3.3.4-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-wagon-3.5.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2003-2021 The Apache Software Foundation\nCopyright 2006-2008 The Apache Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-wagon-3.5.1-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven-wagon@3.5.1-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g3vcRdlps3b9CzAAAvkYQpGyYk-Q5VGKJVqwqlTK7dc/maven-wagon-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/wagon",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven-wagon",
    "versionInfo" : "3.5.1-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-maven-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2006-2018 Google, Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2004-2017 QOS.ch\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/maven-3.8.5-6.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/maven@3.8.5-6.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XEGvuYGIacFGCMxrLhAVpwDrgxA9MPQnDRDK5IeNnrw/maven-~-6.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://maven.apache.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/maven",
    "versionInfo" : "3.8.5-6.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-microdnf-3.9.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 2020-2021 Daniel Hams X-Command-Syntax\nCopyright 2016 Igor Gnatenko X-Command-Syntax\nCopyright 2017 Jaroslav Rohel X-Command-Syntax\nCopyright 2021 Neal Gompa X-Command-Syntax\nCopyright 2010-2016 Richard Hughes, Colin Walters, Igor Gnatenko X-Command-Syntax\nCopyright (c) 2016 Colin Walters <walters@verbum.org>\nCopyright (c) 2020-2021 Daniel Hams X-Command-Syntax\nCopyright (c) 2020-2021 Daniel Hams <daniel.hams@gmail.com>\nCopyright (c) 2022 Emil Renner Berthing\nCopyright (c) 2022 Emil Renner Berthing X-Command-Syntax\nCopyright (c) 2022 Emil Renner Berthing <esmil@mailme.dk>\nCopyright (c) 2016 Igor Gnatenko X-Command-Syntax\nCopyright (c) 2016 Igor Gnatenko <ignatenko@redhat.com>\nCopyright (c) 2017 Jaroslav Rohel X-Command-Syntax\nCopyright (c) 2017 Jaroslav Rohel <jrohel@redhat.com>\nCopyright (c) 2021 Neal Gompa X-Command-Syntax\nCopyright (c) 2021 Neal Gompa <ngompa13@gmail.com>\nCopyright (c) 2019 Red Hat, Inc.\nCopyright (c) 2019 Red Hat, Inc. X-Command-Syntax\nCopyright (c) 2010-2016 Richard Hughes, Colin Walters, Igor Gnatenko X-Command-Syntax\nCopyright (c) 2010-2015 Richard Hughes <richard@hughsie.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/m/microdnf-3.9.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UvGzFfnC0BDLjUZ0pVNxqaAqU0onTeeekwtDcY6-PaQ/microdnf-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/microdnf",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/microdnf",
    "versionInfo" : "3.9.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-mkfontscale-1.2.1-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright 1993, 1994, 1998 The Open Group\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2008, Oracle and/or its affiliates\nCopyright (c) 2015 Thomas Klausner\nCopyright (c) 1994 X Consortium\nCopyright (c) 2002-2008 by Juliusz Chroboczek\nCopyright (c) 2015 by Thomas Klausner",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/m/mkfontscale-1.2.1-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/GfpksaD66iM81TWieqXUgKq_0Mqa2NDKrP2dsYwF9Wc/mkfontscale-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/mkfontscale@1.2.1-3.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.x.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/mkfontscale",
    "versionInfo" : "1.2.1-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-mpfr-4.1.0-7.el9-arch-x86-64",
    "copyrightText" : "Copyright 2000-2020 Free Software Foundation, Inc.\nCopyright 2002-2020 Free Software Foundation, Inc.\nCopyright 2008-2020 Free Software Foundation, Inc.\nCopyright 2020 Free Software Foundation, Inc.\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright $y. $z Free Software Foundation\ncopyright 2004 line\ncopyright to FSF\ncopyright to Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/m/mpfr-4.1.0-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZhjeGTlLT2ghGsXIBSUNSBM92vz65QjKQMJm-sovEgI/mpfr-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/mpfr@4.1.0-7.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.mpfr.org/",
    "licenseConcluded" : "LGPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/mpfr",
    "versionInfo" : "4.1.0-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ncurses-base-6.2-10.20210508.el9-arch-noarch",
    "copyrightText" : "AttrOf (c), GetPair (c)\nCopyright 1998-2012,2018 Free Software Foundation, Inc.\nCopyright 1980,1991,1992,1993 The Regents of the University of California\nCopyright 2018-2020,2021 Thomas E. Dickey\nCopyright 1994 X Consortium\nCopyright 2001 by Pradeep Padala\nCopyright 1996-2020,2021 by Thomas E. Dickey\nCopyright (c) 1989 BULL SA\nCopyright (c) 1980, 1991, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Pradeep Padala\nEugene V. Melaragno <aldomel@ix.netcom.com> 2000\nThomas E. Dickey <dickey@clark.net> 1996\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com>\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Juergen Pfeifer\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Sven Verdoolaege\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Thomas E. Dickey\n(c) CMD Coding Method Delimiter E CNL Cursor Next\ncopyright 1997 by Joey Hess",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/ncurses-base-6.2-10.20210508.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KybE_GrPyZFp64vtU-cVoFyI9Om2xUqfbdQCrTJUh5E/ncurses-~-~.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ncurses-base@6.2-10.20210508.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://invisible-island.net/ncurses/ncurses.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ncurses-base",
    "versionInfo" : "6.2-10.20210508.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ncurses-libs-6.2-10.20210508.el9-arch-x86-64",
    "copyrightText" : "AttrOf (c), GetPair (c)\nCopyright 1998-2002,2003 Free Software Foundation, Inc.\nCopyright 1980,1991,1992,1993 The Regents of the University of California\nCopyright 2018-2020,2021 Thomas E. Dickey\nCopyright 1994 X Consortium\nCopyright 2001 by Pradeep Padala\nCopyright 1996-2020,2021 by Thomas E. Dickey\nCopyright (c) 1989 BULL SA\nCopyright (c) 1980, 1991, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 2001 by Pradeep Padala\nEugene V. Melaragno <aldomel@ix.netcom.com> 2000\nThomas E. Dickey <dickey@clark.net> 1996\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com>\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Juergen Pfeifer\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Sven Verdoolaege\nZeyd M. Ben-Halim <zmbenhal@netcom.com> 1992,1995 and Eric S. Raymond <esr@snark.thyrsus.com> and Thomas E. Dickey\n(c) CMD Coding Method Delimiter E CNL Cursor Next\ncopyright 1997 by Joey Hess",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/ncurses-libs-6.2-10.20210508.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ncurses-libs@6.2-10.20210508.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KybE_GrPyZFp64vtU-cVoFyI9Om2xUqfbdQCrTJUh5E/ncurses-~-~.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://invisible-island.net/ncurses/ncurses.html",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ncurses-libs",
    "versionInfo" : "6.2-10.20210508.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nettle-3.10.1-1.el9-arch-x86-64",
    "copyrightText" : "Copyright 2001-2003, 2005, 2006\nCopyright 2009-2012 Aleksey Kravchenko <rhash.admin@gmail.com>\nCopyright 2012-2013 Andrew M.\nCopyright 2019 Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nCopyright 1991, 1996, 1999, 2000, 2007 Free Software Foundation, Inc.\nCopyright 2000-2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright, Next Conventions, Prev Introduction\nCopyright 2002, 2013 Niels Moller\nCopyright 2013 Nikos Mavrogiannopoulos\nCopyright, Prev Top\nCopyright, Previous Top\nCopyright (c) 2021 Amitay Isaacs, IBM Corporation\nCopyright (c) 2021 Amitay Isaacs & Martin Schwenke, IBM Corporation\nCopyright (c) 2015 Amos Jeffries, Niels Moller\nCopyright (c) 2011 Andres Mejia\nCopyright (c) 2017 Daiki Ueno\nCopyright (c) 2002 Dan Egnor, Niels Moller\nCopyright (c) 1992 Dana L. How\nCopyright (c) 2011 Daniel Kahn Gillmor\nCopyright (c) 2020 Dmitry Baryshkov\nCopyright (c) 2015 Dmitry Eremin-Solenikov\nCopyright (c) 2015 Dmity Eremin-Solenikov\nCopyright (c) 2024 Eric Richter, IBM Corporation\nCopyright (c) 2014 Exegin Technologies Limited\nCopyright (c) 1998, 2001 FSF, Ray Dassen, Niels Moller\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2023- IBM Inc.\nCopyright (c) 1999 J.H.M. Dassen (Ray) <jdassen@wi.LeidenUniv.nl>\nCopyright (c) Jeremy Allison 2012\nCopyright (c) 2006, 2012 Jeronimo Pellegrini, Niels Moller\nCopyright (c) 2017 Jia Zhang\nCopyright (c) 2013 Joachim Strombergon\nCopyright (c) 2013 Joachim Strombergson\nCopyright (c) 2011 Katholieke Universiteit Leuven\nCopyright (c) 2020 Mamone Tarsha\nCopyright (c) 2021, 2022 Mamone Tarsha, Niels Moller\nCopyright (c) 2021 Martin Schwenke & Alastair D'Silva, IBM Corporation\nCopyright (c) 2021 Martin Schwenke, Amitay Isaacs & Alastair D'Silva, IBM Corporation\nCopyright (c) 2021 Martin Schwenke & Amitay Isaacs, IBM Corporation\nCopyright (c) Michael Adam 2012\nCopyright (c) 2021 Michael Weiser\nCopyright (c) 2006,2007 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright (c) 2021 Nicolas Mora\nCopyright (c) 2021 Nicolas Mora 2021 Niels Moller\nCopyright (c) 2000-2002, 2004, 2005, 2011, 2012, 2016, 2020 Niels Moller\nCopyright (c) 2003 Niels Moller, Andreas Sigfridsson\nCopyright (c) 2002 Niels Moller, Dan Egnor\nCopyright (c) 2002, 2009, 2014 Niels Moller, Magnus Holmgren\nCopyright (c) 2003 Niels Moller, Marcus Comstedt\nCopyright (c) 2001, 2012 Niels Moller, Nikos Mavrogiannopoulos\nCopyright (c) 2020 Niels Moller and Mamone Tarsha\nCopyright (c) 2020 Niels Moller and Torbjorn Granlund\nCopyright (c) 2012 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Nikos Mavrogiannopoulos, Niels Moller\nCopyright (c) 2003 Nikos Mavroyanopoulos\nCopyright (c) 2014 Owen Kirby\nCopyright (c) 2001, 2004 Peter Gutmann, Andrew Kuchling, Niels Moller\nCopyright (c) 2000, 2001, 2002 Rafael R. Sevilla, Niels Moller\nCopyright (c) 2013 Red Hat\nCopyright (c) 2015 Red Hat, Inc.\nCopyright (c) 1998 Ross Anderson, Eli Biham, Lars Knudsen\nCopyright (c) 1999 Ruud de Rooij <ruud@debian.org>\nCopyright (c) 2004 Simon Josefsson\nCopyright (c) 2012 Simon Josefsson, Niels Moller\nCopyright (c) 1998-2015 Solar Designer\nCopyright (c) Stefan Metzmacher 2012\nCopyright (c) 2020 Stephen R. van den Berg\nCopyright (c) 2021 Tianjia Zhang <tianjia.zhang@linux.alibaba.com>\nCopyright (c) 1994 X Consortium\nCopyright (c) 2022 Zoltan Fridrich\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/nettle-3.10.1-1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nettle@3.10.1-1.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e7hDnnShV_6aL6iU5WLtH5jQRg_HkPSAAXP_I00RHBg/nettle-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.lysator.liu.se/~nisse/nettle/",
    "licenseConcluded" : "(GPL-2.0-or-later AND LGPL-3.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nettle",
    "versionInfo" : "3.10.1-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-npth-1.6-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2016 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 2002, 2003, 2004, 2011 g10 Code GmbH\nCopyright 2011, 2012 g10 Code GmbH",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/npth-1.6-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/npth@1.6-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RVGrpEKn0s9je0lEdrVu8ALrKVENkP3oLarF3eVBMOs/npth-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=npth.git",
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/npth",
    "versionInfo" : "1.6-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nspr-4.35.0-17.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nspr-4.35.0-17.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nspr@4.35.0-17.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/nspr/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nspr",
    "versionInfo" : "4.35.0-17.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-softokn-freebl-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-softokn-freebl-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-softokn-freebl@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-softokn-freebl",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-softokn-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-softokn-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-softokn@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-softokn",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-sysinit-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-sysinit-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-sysinit@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-sysinit",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-util-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-util-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss-util@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss-util",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-nss-3.101.0-10.el9-2-arch-x86-64",
    "copyrightText" : "Chris Seawood <cls@seawood.org> 2001-04-05\nCopyright 1992-2020 Free Software Foundation, Inc.\nCopyright 2008, Google Inc.\nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 2005 Microsystems, Inc.\nCopyright 2013 Mozilla Contributors\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1987, 1988 by the Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 2006, CRYPTOGAMS\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2022-2023 HACL Contributors\nCopyright (c) 2016-2020 INRIA, CMU and Microsoft Corporation\nCopyright (c) INRIA and Microsoft Corporation\nCopyright (c) 2012, Intel Corp.\nCopyright (c) 1995-1996 Jean-loup Gailly\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-1996 Jean-loup Gailly and Mark Adler\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 1998 Michael J. Fromberger\nCopyright (c) 2001-2003 Netscape\nCopyright (c) 2021, Niels Moller and Mamone Tarsha\nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 1994-1999 RSA Security Inc.\nCopyright (c) 2010, Red Hat, Inc.\nCopyright (c) 1987, 1988 Student Information Processing Board of the Massachusetts Institute of Technology\nCopyright (c) 1999-2000 Sun Microsystems Inc.\nCopyright (c) 1983, 1990, 1993 The Regents of the University of California\nCopyright (c) 2004 by Internet Systems Consortium, Inc.\nCopyright (c) 1991, 2000, 2001 by Lucent Technologies\nCopyright (c) 2015-2016 the fiat-crypto authors\nPortions Copyright (c) 1993 by Digital Equipment Corporation\nPortions Copyright (c) 1996-1999 by Internet Software Consortium\n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net\n(c) It's OK\n(c) 1995-2022 Jean-loup Gailly and Mark Adler\n(c) Kasim 2005\n(c) OfLeft, (c)\n(c) involved with missile technology\n\nAuthors: 2005,O WISeKey,C CH Not Valid; 2005,O WISeKey,C CH Serial; <appro@openssl.org>; A.M. Kuchling <amk@amk.ca>; Andy Polyakov; CONTENT Steve; CRYPTOGAMS; Chris Seawood; Digital Equipment Corporation; Elio Maldonado; Elio Maldonado <emaldona@redhat.com> , Deon Lackey <dlackey@redhat.com>; Elio Maldonado emaldona@redhat.com; Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Entrust, Inc; Entrust, Inc. - for; Entrust.net; Eric A. Young and Tim J. Hudson; Free Software Foundation, Inc.; Gerhardus Geldenhuis; Gerhardus Geldenhuis gerhardus.geldenhuis@gmail.com Elio Maldonado emaldona@redhat.com , Deon Lackey dlackey@redhat.com; Gilles Vollant <info@winimage.com>; Google Inc.; Google Test; Greg Rubin; HACL Contributors; INRIA and Microsoft Corporation; INRIA, CMU and Microsoft Corporation; Intel Corp.; Internet Software Consortium; Internet Systems Consortium, Inc.; It's OK; Jamie Zawinski <jwz@netscape.com>; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Julien Pierre; Kasim; Katsuhiko Momoi; Kipp E.B. Hickman; L. Peter Deutsch; Leonid Broukhis; Lisa Repka; Lucent Technologies; Mark Adler; Mark Smith (mcs@netscape.com); Michael J. Fromberger; Michael Rendell; Microsystems, Inc.; Mozilla Contributors; NSSCKMDToken- OpenSession; Netscape; Niels Moller and Mamone Tarsha; OfLeft; Paul Marquess <pmqs@cpan.org>; Peter Lim (lim@mullian.oz); RSA Security Inc.; Red Hat, Inc.; Shay Gueron and Vlad Krasnov Intel Corporation, Israel Development Centre, Haifa, Israel; Student Information Processing Board of the Massachusetts Institute of Technology; Sun Microsystems Inc.; Sun Microsystems, Inc.; The Regents of the University of California; Tim Taubert <ttaubert@mozilla.com>; Wan-Teh Chang; a group of engineers; gzip. Files; involved with missile technology; section Generator DocBook XSL Stylesheets; the Mozilla.org projects; the RenameCtx; the Review Board development team who; the Student Information Processing Board of the Massachusetts Institute of Technology; the fiat-crypto authors; wan@google.com",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/n/nss-3.101.0-10.el9_2.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NQ3vS2B9OhNQ6VtP9whNaRFBH82O_FqYiP6P1wmOZYY/nss-~-10.el9_2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/nss@3.101.0-10.el9_2?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.mozilla.org/projects/security/pki/nss/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/nss",
    "versionInfo" : "3.101.0-10.el9_2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openldap-2.6.8-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1997, 1998, 1999 Computing Research Labs, New Mexico State University\nCopyright 2014 David Coutadeur, Paris\nCopyright 2011 Devin J. Pohly\nCopyright 2007 Emmanuel Dreyfus\nCopyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2006 Hans Leidekker\nCopyright 2003-2004 Hewlett-Packard Company\nCopyright 1999, Howard Chu\nCopyright 2011-2021 Howard Chu, Symas Corp.\nCopyright 2007 Howard Chu <hyc@symas.com>\nCopyright 2004 IBM Corporation\nCopyright 2009 Jonathan Clarke\nCopyright 2009 Jonathan Clarke <jonathan@phillipoux.net>\nCopyright 1999, Juan C. Gomez\nCopyright 1991-1996 Karl Lehenbauer and Mark Diekhans\nCopyright 2007 Michael Steinmann, Calivia\nCopyright Notice' K.3. University of Michigan\nCopyright 2017 Ondrej Kuznik, Symas Corp.\nCopyright 2011 PADL Software Pty Ltd.\nCopyright 2009 Peter Marschall\nCopyright 2000, Pierangelo Masarati\nCopyright 2000-2001 Pierangelo Masarati <ando@sys-net.it>\nCopyright 1992-1996, Regents of the https://www.umich.edu/ University of Michigan\nCopyright 1999-2021 SYMAS Corporation\nCopyright 2004 Sang Seok Lim, IBM\nCopyright 2004 Sang Seok Lim, IBM Corp.\nCopyright 2016-2017 Symas Corp.\nCopyright 2018 Tamim Ziai\nCopyright 1999, The Internet Society\nCopyright 1998-2024 The OpenLDAP Foundation\nCopyright 1999-2003 The OpenLDAP Foundation, Redwood City, California, USA.\nCopyright 1998-2013, The https://www.openldap.org/foundation/ OpenLDAP Foundation\nCopyright 2003 by Howard Chu\nCopyright 2008 by Howard Chu, Symas Corp.\nCopyright (c) 2000-2001, Aaron D. Gifford\nCopyright (c) 2006, 2007, 2009, 2010, 2011, 2012, 2013 Arthur de Jong\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2009 IETF Trust and the persons identified as the document authors\nCopyright (c) 1997, 1998, 1999 Kungliga Tekniska H xf6gskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2009, 2010 Martin Hedenfalk <martin@bzero.se>\nCopyright (c) 1998-1999 NeoSoft, Inc.\nCopyright (c) 1999, 2000 Novell, Inc.\nCopyright (c) 2000 Pierangelo Masarati, <ando@sys-net.it>\nCopyright (c) 1994-2008 Ralf S. Engelschall <rse@engelschall.com>\nCopyright (c) 1989 Regents of the University of California\nCopyright (c) 1990, 1994 Regents of the University of Michigan\nCopyright (c) 1994-1995 Sun Microsystems, Inc.\nCopyright (c) The IETF Trust (2007)\nCopyright (c) The IETF Trust (2007). Abstract\nCopyright (c) The Internet Society (1997-1999)\nCopyright (c) The Internet Society (2000).a\nCopyright (c) 1983, 1988, 1993 The Regents of the University of California\nCopyright (c) 2006 West Consulting\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009 by Emily Backes, Symas Corp.\nCopyrights Copyright 1998-2024 The OpenLDAP Foundation\nPortions Copyright 1998 A. Hartgers\nPortions Copyright 1999 Dmitry Kovalev\nPortions Copyright 2008 Emmanuel Dreyfus\nPortions Copyright 2002, F5 Networks, Inc\nPortions Copyright 2007-2011 Gavin Henry\nPortions Copyright 1998-2003 Hallvard B. Furuseth\nPortions Copyright 2004 Hewlett-Packard Company\nPortions Copyright 1999-2003 Howard Chu\nPortions Copyright 2004-2005 Howard Chu, Symas Corp.\nPortions Copyright 2004-2005 Howard Chu, Symas Corporation\nPortions Copyright 1999-2008 Howard Y.H. Chu\nPortions Copyright IBM Corp. 1997,2002,2003\nPortions Copyright 2001-2006 IBM Corporation\nPortions Copyright 1999 John C. Quillan\nPortions Copyright 2000, John E. Schimmel\nPortions Copyright 1999, Juan C. Gomez\nPortions Copyright 1998-2013 Kurt D. Zeilenga\nPortions Copyright 1999 Lars Uffmann\nPortions Copyright 2004 Mark Adamson\nPortions Copyright 2000 Mark Adamson, Carnegie Mellon\nPortions Copyright 2007 Michal Szulczynski\nPortions Copyright 1998-2006 Net Boolean Incorporated\nPortions Copyright 2017-2021 Ondrej Kuznik, Symas Corporation\nPortions Copyright 1999 PM Lashley\nPortions Copyright 2002 Pierangelo Mararati\nPortions Copyright 2000-2003 Pierangelo Masarati\nPortions Copyright 2008 Pierangelo Masarati, SysNet\nPortions Copyright 2005 Pierangelo Masarati <ando@sys-net.it>\nPortions Copyright 1992-1996 Regents of the University of Michigan\nPortions Copyright 2007-2011 Suretec Systems Limited\nPortions Copyright 2007-2011 Suretec Systems Ltd.\nPortions Copyright 1999-2008 Symas Corporation\nPortions Copyright 2005-2006 SysNet\nPortions Copyright 2013 Ted C. Cheng, Symas Corp.\nPortions Copyright 1991-2004, The Internet Society\nPortions Copyright 2015 by Howard Chu, Symas Corp.\nPortions Copyright 2003-2008 by Howard Chu, Symas Corporation\nPortions Copyright 2003 by IBM Corporation\nPortions Copyright 2016-2017 by Michael Stroder <michael@stroeder.com>\nPortions Copyright 2018 by Ondrej Kuznik, Symas Corp.\nPortions Copyright 2013 by Ted C. Cheng, Symas Corp.\nPortions Copyright (c) DAASI International GmbH, Tamim Ziai\nPortions Copyright (c) 2013 IETF Trust and the persons identified as the document authors\nPortions Copyright (c) 2007 Michal Szulczynski\nPortions Copyright (c) 1999, 2000 Novell, Inc.\nPortions Copyright (c) 2022 Ondrej Kuznik, Symas Corporation\nPortions Copyright (c) 1987 Regents of the University of California\nPortions Copyright (c) 1992-1996 Regents of the University of Michigan\nPortions Copyright (c) The Internet Society (1997-2003)\nPortions Copyright (c) 1994 The Regents of the University of Michigan\nPortions Copyright (c) Virginia Tech, David Hawes\nPortions Copyright (c) 2005 by Howard Chu, Symas Corp.\nPortions Copyright (c) 1996, 1998 by Internet Software Consortium\nPortions Copyright 2002 myinternet Limited\nPortions (c) Copyright PADL Software Pty Ltd. 1999\n(c) Copyright PADL Software Pty Ltd. 2003\n(c) Copyright 1996-1998, TimesTen Performance Software\n(c) Copyright 2011-2024, https://www.OpenLDAP.org/foundation/ OpenLDAP Foundation, info@OpenLDAP.org info@OpenLDAP.org\n(c) 2011 Devin J. Pohly\n(c), (bv)- bv_len\n(c), (bv)- bv_len (dst)- bv_len (dst)- bv_val\n\nAuthors: (bv)- bv_len; (bv)- bv_len (dst)- bv_len (dst)- bv_val; <Kurt.Zeilenga@Isode.COM>; <Kurt@OpenLDAP.org>; <jimse@novell.com>; A. Hartgers; AT&T; Aaron D. Gifford; Aaron Gifford; Alexandre Oliva <oliva@dcc.unicamp.br>; Apurva Kumar; Arthur de Jong; BR SysNet; Bart Hartgers; Brian Candler; Colin Plumb; Computing Research Labs, New Mexico State University; DAASI International GmbH, Tamim Ziai; Dave Storey; David Coutadeur, Paris; David Hawes of Virginia Tech; Devin J. Pohly; Devin J. Pohly <djpohly@gmail.com>; Dmitry Kovalev; Emily Backes; Emily Backes at Symas Corp.; Emily Backes, Symas Corp.; Emmanuel Dreyfus; Eric Allman; Eric Stokes; F5 Networks, Inc; Fran,cois Pinard; Free Software Foundation, Inc.; Gary A. Parker; Gary V. Vaughan; Gavin Henry; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; HAMANO Tsukasa <hamano@osstech.co.jp>; Hallvard B. Furuseth; Hallvard Furuseth; Hans Leidekker; Hewlett-Packard Company; Howard Chu; Howard Chu and Emily Backes; Howard Chu of Symas Corporation; Howard Chu, Symas Corp.; Howard Chu, Symas Corporation; Howard Y.H. Chu; IBM Corp.; IBM Corporation; IETF Trust and the persons identified as the document authors; Ian Clatworthy; Internet Software Consortium; Jan Safranek <jsafrane@redhat.com>; Jan Vcelak <jvcelak@redhat.com>; Jane Doe; Jeff Costlow; Jeff Turner; Jeffery Layton <jlayton@redhat.com>; Jim Kingdon; John C. Quillan; John E. Schimmel; Jonathan Clarke; Jong Hyuk Choi; Jong-Hyuk Choi; Juan C. Gomez; Karl Lehenbauer; Karl Lehenbauer and Mark Diekhans; Karl Lehenbauer, of NeoSoft, Inc.; Kungliga Tekniska H xf6gskolan (Royal Institute of Technology, Stockholm, Sweden); Kurt D. Zeilenga; Kurt Zeilenga; Lars Uffmann; Lawrence Philips; Luke Howard; Luke Howard of PADL Software; Mark Adamson; Mark Adamson, Carnegie Mellon; Martin Hedenfalk; Matus Honek <mhonek@redhat.com>; Michael Steinmann, Calivia; Michael Stroder; Michal Szulczynski; Neil Dunbar <neil.dunbar@hp.com> Emmanuel Dreyfus <manu@netbsd.org>; NeoSoft Inc.; NeoSoft, Inc.; Net Boolean Incorporated; Notice' K.3. University of Michigan; Novell, Inc.; Ondrej Kuznik; Ondrej Kuznik and Howard Chu of Symas Corporation; Ondrej Kuznik, Symas Corp.; Ondrej Kuznik, Symas Corporation; OpenLDAP Foundation; PADL Software Pty Ltd.; PADL Software and Sun Microsystems; PM Lashley; Peter Marschall; Peter Marschall <peter@adpm.de>; Pierangelo Mararati; Pierangelo Masarati; Pierangelo Masarati <ando@OpenLDAP.org>; Pierangelo Masarati, SysNet; Poul-Henning Kamp; Ralf S. Engelschall; Randy Kunkee (kunkee@OpenLDAP.org); Regents of the University of California; Regents of the University of Michigan; Rewritten by Howard Chu; Sang Seok Lim; Sang Seok Lim, IBM; Sang Seok Lim, IBM Corp.; Scott James Remnant; Steve Reid; Sun Microsystems, Inc.; Suretec Systems Limited; Suretec Systems Ltd.; Symas Corp.; Symas Corporation; SysNet; Tamim Ziai; Tamim Ziai of DAASI International GmbH; Tatu Ylonen <ylo@cs.hut.fi>; Ted C. Cheng, Symas Corp.; The IETF Trust; The IETF Trust Abstract; The Internet Society; The Internet Society (2000).a; The OpenLDAP Foundation; The OpenLDAP Foundation, Redwood City, California, USA; The OpenLDAP Project (http://www.openldap.org/); The OpenLDAP Project <http://www.openldap.org/>; The Regents of the University of California; The Regents of the University of Michigan; Tim Howes, Mark Smith, and Gordon Good; TimesTen Performance Software; Tom Tromey <tromey@cygnus.com>; UR http://www.openldap.org; Virginia Tech, David Hawes; West Consulting; Word (thewrittenword.com) and Stanford University (stanford.edu); X Consortium; authors_docs WHERE authors_docs.doc_id; authors_docs WHERE authors_docs.pers_id; authors_docs.pers_id persons.id INSERT INTO authors_docs; authors_docs.pers_id persons.id,'INSERT INTO authors_docs; ebackes@symas.com; hand. Glue; myinternet Limited; per company; rewritten by Kurt D. Zeilenga; thanks Ben Campbell, Phillip Hallam-Baker, and Ted Hardie; thanks the IETF LDAP community; the Emmanuel Dreyfus; the Howard Chu; the Internet Assigned; the OpenLDAP Project. The Project; the University of California, Berkeley; the University of California, Berkeley and its contributors; the University of Michigan; the W3C Internationalization Working Group; the project",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openldap-2.6.8-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sIuW_wyOiOAct0WkS9CT-Yh8dmNCChuC0vEr3GkRzfA/openldap-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openldap@2.6.8-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openldap.org/",
    "licenseConcluded" : "OLDAP-2.8",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openldap",
    "versionInfo" : "2.6.8-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-so-3.0.7-6.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2021- IBM Inc.\nCopyright 1999-2021 The OpenSSL Project Authors\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1998-2022 The OpenSSL Project\nCopyright 20xx-20yy The OpenSSL Project Authors\n\nAuthors: 20xx-20yy The OpenSSL Project Authors; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke; Andy Polyakov <appro@openssl.org>; Danny Tsen <dtsen@us.ibm.com>; Dmitry Belyavsky and Hubert Kario; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; IBM Inc.; The OpenSSL Project; The OpenSSL Project Authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openssl-fips-provider-so-3.0.7-6.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nzLLRbcCP0lGQQQ9IoeKZX_SgyDDHlcQ4L92aAwRLh0/openssl-fips-provider-~-6.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openssl-fips-provider-so@3.0.7-6.el9_5?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openssl-fips-provider-so",
    "versionInfo" : "3.0.7-6.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-3.0.7-6.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2021- IBM Inc.\nCopyright 1999-2021 The OpenSSL Project Authors\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1998-2022 The OpenSSL Project\nCopyright 20xx-20yy The OpenSSL Project Authors\n\nAuthors: 20xx-20yy The OpenSSL Project Authors; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke; Andy Polyakov <appro@openssl.org>; Danny Tsen <dtsen@us.ibm.com>; Dmitry Belyavsky and Hubert Kario; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; IBM Inc.; The OpenSSL Project; The OpenSSL Project Authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openssl-fips-provider-3.0.7-6.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openssl-fips-provider@3.0.7-6.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nzLLRbcCP0lGQQQ9IoeKZX_SgyDDHlcQ4L92aAwRLh0/openssl-fips-provider-~-6.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openssl-fips-provider",
    "versionInfo" : "3.0.7-6.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-openssl-libs-3.2.2-6.el9-5.1-arch-x86-64-epoch-1",
    "copyrightText" : "Copyright 2004-2014, Akamai Technologies\nCopyright 2017 BaishanCloud\nCopyright 2014 Cryptography Research, Inc.\nCopyright 2011 Google Inc.\nCopyright IBM Corp. 2018\nCopyright 2021- IBM Inc.\nCopyright 2013 M. J. Dominus\nCopyright 2006 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright 2005 Nokia\nCopyright Patrick Powell 1995\nCopyright 2019 Red Hat, Inc.\nCopyright 2017 Ribose Inc.\nCopyright 2012, Samuel Neves <sneves@dei.uc.pt>\nCopyright Siemens AG 2015-2019\nCopyright 1998-2020 The OpenSSL Project Authors\nCopyright 2016 VMS Software, Inc.\nCopyright 1998-$YEAR The OpenSSL Authors\nCopyright (c) 2007\nCopyright (c) 2008 Andy Polyakov <appro@openssl.org>\nCopyright (c) 2023, Christoph Mullner <christoph.muellner@vrull.eu>\nCopyright (c) 2015 CloudFlare, Inc.\nCopyright (c) 2012-2014 Daniel J. Bernstein\nCopyright (c) 2004, EdelKey Project\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1989 Free Software Foundation, Inc.\nCopyright (c) 2022, Hongren (Zenithal) Zheng <i@zenithal.me>\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2012-2016 Jean-Philippe Aumasson\nCopyright (c) 2004 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2017 National Security Research Institute\nCopyright (c) 2006, Network Resonance, Inc.\nCopyright (c) 2019, Oracle and/or its affiliates\nCopyright (c) 2011, RTFM, Inc.\nCopyright (c) 2004, Richard Levitte <richard@levitte.org>\nCopyright (c) 1998-2024 The OpenSSL Project Authors\nCopyright (c) 2002 The OpenTSA Project\nCopyright (c) 2013-2014 Timo Teras <timo.teras@gmail.com>\nCopyright (c) 2013 by Mark Jason Dominus <mjd@cpan.org>\nCopyright 20xx-20yy The OpenSSL Project Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: 1995-$YEAR The OpenSSL Project Authors; 1998-$YEAR The OpenSSL Authors; 1998-$YEAR The OpenSSL Project Authors; 1999-$YEAR The OpenSSL Project Authors; 2000-$YEAR The OpenSSL Project Authors; 2020-$YEAR The OpenSSL Project Authors; 20xx-20yy The OpenSSL Project Authors; <appro@openssl.org>; <zhuchen@loongson.cn>; Akamai Technologies; Amitay Isaacs <amitay@ozlabs.org> , Martin Schwenke <martin@meltin.net> & Alastair D'Silva <alastair@d-silva.org> for the OpenSSL project; Amitay Isaacs <amitay@ozlabs.org> and Martin Schwenke <martin@meltin.net> for the OpenSSL project; Andy Polyakov; Andy Polyakov <appro@openssl.org>; Antoon Bosselaers; BaishanCloud; Ben Avison <bavison@riscosopen.org>; Christoph Mullner; Christophe Renou and Peter Sylvester, for the EdelKey project; CloudFlare, Inc.; Cryptography Research, Inc.; Daniel J. Bernstein; Danny Tsen <dtsen@us.ibm.com>; David S. Miller and Andy Polyakov; EdelKey Project; Emilia Kasper and Peter Schwabe; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; Eric Rescorla <ekr@rtfm.com>; Fangming Fang <fangming.fang@arm.com>; Free Software Foundation, Inc.; Google Inc.; Hongren (Zenithal) Zheng; IBM Corp.; IBM Inc.; Intel Corporation; Jean-Philippe Aumasson; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); M. J. Dominus; Marc Bevand; Mark Jason Dominus; Mark Jason Dominus (MJD); Mark Jason Dominus, Plover Systems; Michael Schout <mschout@cpan.org>; Mike Hamburg; Min Zhou <zhoumin@loongson.cn>; NTT (Nippon Telegraph and Telephone Corporation); National Security Research Institute; Netscape Communications; Network Resonance, Inc.; Nokia; Oracle and/or its affiliates; Patrick Powell; Patrick Powell <papowell@astart.com>; Patrick Steuer <patrick.steuer@de.ibm.com>; Paulo Barreto; RTFM, Inc.; Red Hat, Inc.; Ribose Inc.; Richard Levitte; Rohan McLure <rmclure@linux.ibm.com>; Rohan McLure <rohan.mclure@linux.ibm.com>; Samuel Lee <Samuel.Lee@arm.com>; Samuel Neves; Sergey Kirillov and Andrey Matyukov; Sergey Kirillov and Andrey Matyukov Intel Corporation; Shay Gueron; Siemens AG; The OpenSSL Project Authors; The OpenTSA Project; Timo Teras; VMS Software, Inc.; Vincent Rijmen; Xiaokang Qian <xiaokang.qian@arm.com>; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/o/openssl-libs-3.2.2-6.el9_5.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64&epoch=1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CelooRCB7w3qBMOhuT7dXj8RvLaPtEIwtF7DXVwTHEw/openssl-~-6.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.openssl.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/openssl-libs",
    "versionInfo" : "3.2.2-6.el9_5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-p11-kit-trust-0.25.3-3.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2006 Andreas Jellinghaus\nCopyright 1992-2022 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2017, 2021-2023 Red Hat, Inc.\nCopyright (c) 2020 Amazon.com, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Collabora Ltd\nCopyright (c) 1990, 1993 Copyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2003 Internet Software Consortium\nCopyright (c) 2004, 2005, 2007, 2011 Internet Systems Consortium, Inc.\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 2013 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Red Hat Inc\nCopyright (c) 2012 Stef Walter\nCopyright (c) 2004 Stefan Walter\nCopyright (c) 2002-2004 Tim J. Robbins\nCopyright (c) 2000-2002, 2007, 2010 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996, 1998 by Internet Software Consortium\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) 1995 by International Business Machines, Inc.\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus\ncopyright 1997-2017 Simon Tatham\n\nAuthors: Adam Sampson <ats@offog.org>; Adam Williamson <awilliam@redhat.com>; Albert Chin-A-Young <china@thewrittenword.com>; Alexander Bokovoy <abokovoy@redhat.com>; Alexander Sosedkin <asosedkin@redhat.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alon Bar-Lev <alon.barlev@gmail.com>; Alvin Chen <sonoma001@gmail.com>; Amazon.com, Inc.; Anders Kaseorg <andersk@mit.edu>; Anderson Toshiyuki Sasaki <ansasaki@redhat.com>; Andreas Jellinghaus; Andreas Metzler <ametzler@bebt.de>; Andreas Metzler <ametzler@debian.org>; Andreas Metzler <ametzler@downhill.at.eu.org>; Antoine Jacoutot <ajacoutot@gnome.org>; Antoine Jacoutot <ajacoutot@openbsd.org>; Balazs Ur <balazs@urbalazs.hu>; Baruch Siach <baruch@tkos.co.il>; Benjamin Herrenschmidt <benh@kernel.crashing.org>; Bootstrap Authors; Bruno Haible <bruno@clisp.org>; Claes Nasten <pekdon@gmail.com>; Clemens Lang <cllang@redhat.com>; Colin Plumb; Colin Walters <walters@verbum.org>; Collabora Ltd; Daiki Ueno; Daiki Ueno <dueno@redhat.com>; Daiki Ueno <ueno@gnu.org>; Dan Winship <danw@gnome.org>; Daniel Black <danielgb@au.ibm.com>; Daniel Engberg <daniel.engberg.lists@pyret.net>; David Cook <divergentdave@gmail.com>; David Halls <dahalls@gmail.com>; David Korczynski <david@adalogics.com>; David Woodhouse <David.Woodhouse@intel.com>; David Woodhouse <dwmw2@infradead.org>; David Woodhouse <dwmw@amazon.co.uk>; Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>; Doan Tran Cong Danh <congdanhqx@gmail.com>; Dr. Volker Zell <dr.volker.zell@oracle.com>; Eli Schwartz <eschwartz@archlinux.org>; Emmanuel Dreyfus <manu@netbsd.org>; Erdem Meydanli <meydanli@amazon.com>; Fabian Groffen <grobian@gentoo.org>; Florian Weimer <fweimer@redhat.com>; Fran,cois Pinard; Frederik Boster <frederik@boster.de>; Free Software Foundation, Inc.; Free Software Foundation. Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gustavo Zacarias <gustavo@zacarias.com.ar>; Harald Hoyer <harald@redhat.com>; Ingo Franzki <ifranzki@linux.ibm.com>; International Business Machines, Inc.; Internet Software Consortium; Internet Systems Consortium, Inc.; Issam E. Maghni <issam.e.maghni@mailbox.org>; Jakub Jelen <jjelen@redhat.com>; Jan Alexander Steffens; John Hein <dkeabg7vp4@snkmail.com>; Justin King-Lacroix <justinkl@google.com>; Kai Engert <kaie@kuix.de>; Kai Takahashi <www.carrotsoft@gmail.com>; Kalev Lember <kalevlember@gmail.com>; LGTM Migrator <lgtm-migrator@users.noreply.github.com>; Laszlo Ersek <lersek@redhat.com>; Leonardo Brondani Schenkel <leo@tradeshift.com>; Leonardo Brondani Schenkel <leonardo.schenkel@gmail.com>; Lew Palm <l.palm@m-privacy.de>; Lubomir Rintel <lkundrak@v3.sk>; Ludovic Rousseau <ludovic.rousseau@gmail.com>; Mantas Mikulenas <grawity@gmail.com>; Michael Cronenworth <mcronenworth@pdxinc.com>; Michael Cronenworth <mike@cchtml.com>; Mike Barcroft; Milan Crha <mcrha@redhat.com>; Nathan Barrett-Morrison <nathan.morrison@timesys.com>; Nathaniel McCallum <npmccallum@redhat.com>; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos <nmav@gnutls.org>; Nikos Mavrogiannopoulos <nmav@redhat.com>; Pankaj <pankaj.s01@samsung.com>; Pankaj Sharma <pankaj.cscience@gmail.com>; Pascal Ernster <bugs.freedesktop.org@hardfalcon.net>; Pascal Terjan <pterjan@google.com>; Pavel A; Pavel A <pavel.aronsky@daynix.com>; Pino Toscano <pino@debian.org>; Raphael Medaer <raphael@medaer.me>; Red Hat Inc; Red Hat, Inc; Redhat Inc.; Rob McMahon <Rob.McMahon@warwick.ac.uk>; Robert Milasan <rmilasan@suse.com>; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus; Roman Bogorodskiy <bogorodskiy@gmail.com>; Rosen Penev <rosenp@gmail.com>; Scott James Remnant; Simon Haggett <simon.haggett@gmail.com>; Simon Josefsson <simon@josefsson.org>; Simon Tatham; Stanislav Brabec <sbrabec@suse.com>; Stef Waler <stefw@collabora.co.uk>; Stef Walter; Stef Walter <stef@thewalter.net>; Stef Walter <stef@thewalter.net> , Daiki Ueno; Stef Walter <stef@thewalter.net> , Daiki Ueno, Anderson Sasaki; Stef Walter <stef@thewalter.net> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@collabora.co.uk>; Stef Walter <stefw@collabora.co.uk> , Daiki Ueno; Stef Walter <stefw@collabora.co.uk> Laszlo Ersek <lersek@redhat.com>; Stef Walter <stefw@gnome.org>; Stef Walter <stefw@gnome.org> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@redhat.com>; Stef Walter <stefw@redhat.com> Jakub Jelen <jjelen@redhat.com>; Stefan Walter; Stefano Garzarella <sgarzare@redhat.com>; Steve Reid <steve@edmweb.com>; Tavian Barnes <tavianator@tavianator.com>; The Regents of the University of California; Tim J. Robbins; Timo Jyrinki <timo.jyrinki@iki.fi>; Todd C. Miller; Tom Sutcliffe <tomsci@me.com>; Tom Tromey <tromey@cygnus.com>; Tomas Tomecek <ttomecek@redhat.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Vincent JARDIN <vjardin@free.fr>; X Consortium; X Ruoyao <xry111@mengyan1223.wang>; Xi Ruoyao <xry111@xry111.site>; Yuri Chornoivan <yurchor@ukr.net>; Zoltan Fridrich <zfridric@redhat.com>; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno <dueno@redhat.com>; g10 Code GmbH; manphiz@gmail.com <manphiz@gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/p11-kit-trust-0.25.3-3.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/p11-kit-trust@0.25.3-3.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zQcHjj479zVlxNSr8OuRDFzTxubzMlMeH7HwH6MQmEQ/p11-kit-~-3.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://p11-glue.freedesktop.org/p11-kit.html",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/p11-kit-trust",
    "versionInfo" : "0.25.3-3.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-p11-kit-0.25.3-3.el9-5-arch-x86-64",
    "copyrightText" : "Copyright 2006 Andreas Jellinghaus\nCopyright 1992-2022 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2017, 2021-2023 Red Hat, Inc.\nCopyright (c) 2020 Amazon.com, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Collabora Ltd\nCopyright (c) 1990, 1993 Copyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2003 Internet Software Consortium\nCopyright (c) 2004, 2005, 2007, 2011 Internet Systems Consortium, Inc.\nCopyright (c) 2001 Mike Barcroft <mike@FreeBSD.org>\nCopyright (c) 2013 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Red Hat Inc\nCopyright (c) 2012 Stef Walter\nCopyright (c) 2004 Stefan Walter\nCopyright (c) 2002-2004 Tim J. Robbins\nCopyright (c) 2000-2002, 2007, 2010 Todd C. Miller <Todd.Miller@courtesan.com>\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996, 1998 by Internet Software Consortium\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) 1995 by International Business Machines, Inc.\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus\ncopyright 1997-2017 Simon Tatham\n\nAuthors: Adam Sampson <ats@offog.org>; Adam Williamson <awilliam@redhat.com>; Albert Chin-A-Young <china@thewrittenword.com>; Alexander Bokovoy <abokovoy@redhat.com>; Alexander Sosedkin <asosedkin@redhat.com>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alon Bar-Lev <alon.barlev@gmail.com>; Alvin Chen <sonoma001@gmail.com>; Amazon.com, Inc.; Anders Kaseorg <andersk@mit.edu>; Anderson Toshiyuki Sasaki <ansasaki@redhat.com>; Andreas Jellinghaus; Andreas Metzler <ametzler@bebt.de>; Andreas Metzler <ametzler@debian.org>; Andreas Metzler <ametzler@downhill.at.eu.org>; Antoine Jacoutot <ajacoutot@gnome.org>; Antoine Jacoutot <ajacoutot@openbsd.org>; Balazs Ur <balazs@urbalazs.hu>; Baruch Siach <baruch@tkos.co.il>; Benjamin Herrenschmidt <benh@kernel.crashing.org>; Bootstrap Authors; Bruno Haible <bruno@clisp.org>; Claes Nasten <pekdon@gmail.com>; Clemens Lang <cllang@redhat.com>; Colin Plumb; Colin Walters <walters@verbum.org>; Collabora Ltd; Daiki Ueno; Daiki Ueno <dueno@redhat.com>; Daiki Ueno <ueno@gnu.org>; Dan Winship <danw@gnome.org>; Daniel Black <danielgb@au.ibm.com>; Daniel Engberg <daniel.engberg.lists@pyret.net>; David Cook <divergentdave@gmail.com>; David Halls <dahalls@gmail.com>; David Korczynski <david@adalogics.com>; David Woodhouse <David.Woodhouse@intel.com>; David Woodhouse <dwmw2@infradead.org>; David Woodhouse <dwmw@amazon.co.uk>; Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>; Doan Tran Cong Danh <congdanhqx@gmail.com>; Dr. Volker Zell <dr.volker.zell@oracle.com>; Eli Schwartz <eschwartz@archlinux.org>; Emmanuel Dreyfus <manu@netbsd.org>; Erdem Meydanli <meydanli@amazon.com>; Fabian Groffen <grobian@gentoo.org>; Florian Weimer <fweimer@redhat.com>; Fran,cois Pinard; Frederik Boster <frederik@boster.de>; Free Software Foundation, Inc.; Free Software Foundation. Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Gustavo Zacarias <gustavo@zacarias.com.ar>; Harald Hoyer <harald@redhat.com>; Ingo Franzki <ifranzki@linux.ibm.com>; International Business Machines, Inc.; Internet Software Consortium; Internet Systems Consortium, Inc.; Issam E. Maghni <issam.e.maghni@mailbox.org>; Jakub Jelen <jjelen@redhat.com>; Jan Alexander Steffens; John Hein <dkeabg7vp4@snkmail.com>; Justin King-Lacroix <justinkl@google.com>; Kai Engert <kaie@kuix.de>; Kai Takahashi <www.carrotsoft@gmail.com>; Kalev Lember <kalevlember@gmail.com>; LGTM Migrator <lgtm-migrator@users.noreply.github.com>; Laszlo Ersek <lersek@redhat.com>; Leonardo Brondani Schenkel <leo@tradeshift.com>; Leonardo Brondani Schenkel <leonardo.schenkel@gmail.com>; Lew Palm <l.palm@m-privacy.de>; Lubomir Rintel <lkundrak@v3.sk>; Ludovic Rousseau <ludovic.rousseau@gmail.com>; Mantas Mikulenas <grawity@gmail.com>; Michael Cronenworth <mcronenworth@pdxinc.com>; Michael Cronenworth <mike@cchtml.com>; Mike Barcroft; Milan Crha <mcrha@redhat.com>; Nathan Barrett-Morrison <nathan.morrison@timesys.com>; Nathaniel McCallum <npmccallum@redhat.com>; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos <nmav@gnutls.org>; Nikos Mavrogiannopoulos <nmav@redhat.com>; Pankaj <pankaj.s01@samsung.com>; Pankaj Sharma <pankaj.cscience@gmail.com>; Pascal Ernster <bugs.freedesktop.org@hardfalcon.net>; Pascal Terjan <pterjan@google.com>; Pavel A; Pavel A <pavel.aronsky@daynix.com>; Pino Toscano <pino@debian.org>; Raphael Medaer <raphael@medaer.me>; Red Hat Inc; Red Hat, Inc; Redhat Inc.; Rob McMahon <Rob.McMahon@warwick.ac.uk>; Robert Milasan <rmilasan@suse.com>; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus; Roman Bogorodskiy <bogorodskiy@gmail.com>; Rosen Penev <rosenp@gmail.com>; Scott James Remnant; Simon Haggett <simon.haggett@gmail.com>; Simon Josefsson <simon@josefsson.org>; Simon Tatham; Stanislav Brabec <sbrabec@suse.com>; Stef Waler <stefw@collabora.co.uk>; Stef Walter; Stef Walter <stef@thewalter.net>; Stef Walter <stef@thewalter.net> , Daiki Ueno; Stef Walter <stef@thewalter.net> , Daiki Ueno, Anderson Sasaki; Stef Walter <stef@thewalter.net> Generator DocBook XSL Stylesheets; Stef Walter <stef@thewalter.net> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@collabora.co.uk>; Stef Walter <stefw@collabora.co.uk> , Daiki Ueno; Stef Walter <stefw@collabora.co.uk> Laszlo Ersek <lersek@redhat.com>; Stef Walter <stefw@gnome.org>; Stef Walter <stefw@gnome.org> Jakub Jelen <jjelen@redhat.com>; Stef Walter <stefw@redhat.com>; Stef Walter <stefw@redhat.com> Jakub Jelen <jjelen@redhat.com>; Stefan Walter; Stefano Garzarella <sgarzare@redhat.com>; Steve Reid <steve@edmweb.com>; Tavian Barnes <tavianator@tavianator.com>; The Regents of the University of California; Tim J. Robbins; Timo Jyrinki <timo.jyrinki@iki.fi>; Todd C. Miller; Tom Sutcliffe <tomsci@me.com>; Tom Tromey <tromey@cygnus.com>; Tomas Tomecek <ttomecek@redhat.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; Vincent JARDIN <vjardin@free.fr>; X Consortium; X Ruoyao <xry111@mengyan1223.wang>; Xi Ruoyao <xry111@xry111.site>; Yuri Chornoivan <yurchor@ukr.net>; Zoltan Fridrich <zfridric@redhat.com>; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno; Zoltan Fridrich <zfridric@redhat.com> , Daiki Ueno <dueno@redhat.com>; g10 Code GmbH; manphiz@gmail.com <manphiz@gmail.com>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/p11-kit-0.25.3-3.el9_5.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/p11-kit@0.25.3-3.el9_5?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zQcHjj479zVlxNSr8OuRDFzTxubzMlMeH7HwH6MQmEQ/p11-kit-~-3.el9_5.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://p11-glue.freedesktop.org/p11-kit.html",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/p11-kit",
    "versionInfo" : "0.25.3-3.el9_5"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-pcre2-syntax-10.40-6.el9-arch-noarch",
    "copyrightText" : "Copyright 1992-2021 Free Software Foundation, Inc.\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1997-2022 University of Cambridge\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009-2022 Zoltan Herczeg\nCopyright (c) 2010-2022 Zoltan Herczeg\n(c) 1/I Capture group\n(c) 2/I Capture group\n\nAuthors: 1/I Capture group; 2/I Capture group; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Christian Ehrlicher <Ch.Ehrlicher@gmx.de>; Daniel Richard G.; Daniel Richard G. <skunk@iSKUNK.ORG>; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Henry Spencer; Mark Baker; Peter Rosin <peda@lysator.liu.se>; Philip Hazel; Scott James Remnant; Steven G. Johnson; Tom Tromey <tromey@cygnus.com>; University of Cambridge; X Consortium; Zoltan Herczeg",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre2-syntax-10.40-6.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rrWzoCVx3hMa7oRQBruSpgOoC8QFah8GVKIY1kYQAbQ/pcre2-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/pcre2-syntax",
    "versionInfo" : "10.40-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-pcre2-10.40-6.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2021 Free Software Foundation, Inc.\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1997-2022 University of Cambridge\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009-2022 Zoltan Herczeg\nCopyright (c) 2010-2022 Zoltan Herczeg\n(c) 1/I Capture group\n(c) 2/I Capture group\n\nAuthors: 1/I Capture group; 2/I Capture group; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Christian Ehrlicher <Ch.Ehrlicher@gmx.de>; Daniel Richard G.; Daniel Richard G. <skunk@iSKUNK.ORG>; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Henry Spencer; Mark Baker; Peter Rosin <peda@lysator.liu.se>; Philip Hazel; Scott James Remnant; Steven G. Johnson; Tom Tromey <tromey@cygnus.com>; University of Cambridge; X Consortium; Zoltan Herczeg",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre2-10.40-6.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rrWzoCVx3hMa7oRQBruSpgOoC8QFah8GVKIY1kYQAbQ/pcre2-~-6.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/pcre2",
    "versionInfo" : "10.40-6.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-pcre-8.44-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright 2013-2013 Tilera Corporation(jiwang@tilera.com)\nCopyright Zoltan Herczeg (hzmester@freemail.hu)\nCopyright 2003 and onwards Google Inc.\nCopyright (c) 2010-2012\nCopyright (c) 2001, Alexander Tokarev\nCopyright (c) 2004-2018 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007-2012, Google Inc.\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 1997-2020 University of Cambridge\nCopyright (c) 1994 X Consortium\nCopyright (c) 2009-2020 Zoltan Herczeg\nCopyright (c) 2010-2020 Zoltan Herczeg\n(c) 2001 Alexander Tokarev <dwalin@dwalin.ru>\n(c) 2001 Peter S. Voronov\n\nAuthors: Alexander Tokarev; Alexandre Oliva <oliva@dcc.unicamp.br>; Bootstrap Authors; Christian Ehrlicher <Ch.Ehrlicher@gmx.de>; Daniel Richard G.; Daniel Richard G. <skunk@iSKUNK.ORG>; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Greg J. Badros; Henry Spencer; Mark Baker; Peter Rosin <peda@lysator.liu.se>; Peter S. Voronov; Philip Hazel; Sanjay Ghemawat; Scott James Remnant; Sergei Golubchik <vuvova@gmail.com>; Steven G. Johnson; Tilera Corporation(jiwang@tilera.com); Tom Tromey <tromey@cygnus.com>; University of Cambridge; X Consortium; Zoltan Herczeg; as a recurse into group; onwards Google Inc.; wilsonh@google.com (Wilson Hsieh)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre-8.44-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/pcre@8.44-4.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4pi_uEjEtgmCfhwQYp9ptc2nt9d51Zsa1gpFSEny7y8/pcre-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.pcre.org/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/pcre",
    "versionInfo" : "8.44-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-cipher-2.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2008 Sonatype, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-cipher-2.0-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pMs3WgYxqpLRbBqH5w1nQDE1_vetgH9cYw1KQdL9TgA/plexus-cipher-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-cipher@2.0-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-cipher",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-cipher",
    "versionInfo" : "2.0-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-classworlds-2.6.0-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2006 The Codehaus Foundation\nCopyright 2002 (c) The Codehaus\nCopyright 2002 (c) The Werken Company",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-classworlds-2.6.0-13.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pjZC-mTqVTefut3pgZcBXvesSxGtJROISFpCsfhtWSc/plexus-classworlds-~-13.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-classworlds@2.6.0-13.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-classworlds",
    "licenseConcluded" : "(Apache-2.0 AND Plexus)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-classworlds",
    "versionInfo" : "2.6.0-13.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-containers-component-annotations-2.1.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2005 The Apache Software Foundation\nCopyright 2004-2006 Vincent Massol\nCopyright (c) 2004-2005, Codehaus.org\nCopyright (c) 2003 Extreme! Lab, Indiana University\nCopyright (c) 2004-5, The Codehaus\nCopyright (c) 2005, The Codehaus\nCopyright (c) 2003 The Trustees of Indiana University\nCopyright (c) 2006-2007 the original author or authors\n\nAuthors: Andrew Williams; Benjamin Bentmann; Codehaus Foundation; Codehaus.org; Dain Sundstrom; Eugene Kuleshov; Extreme! Lab, Indiana University; Jason van Zyl; Kenney Westerhof; Kristian Rosenvold; The Apache Software Foundation; The Codehaus; The Trustees of Indiana University; Vincent Massol; brett@apache.org Brett Porter; brett@codehaus.org Brett Porter; can check out the project; dan@envoisolutions.com Dan Diephouse; http://www.extreme.indiana.edu/~aslom/ Aleksander Slominski; jason@maven.org Jason van Zyl; kenney@apache.org Kenney Westerhof; kenney@codehaus.org Kenney Westerhof; kenney@neonics.com Kenney Westerhof; michal.maczka@dimatics.com Michal Maczka; michal@codehaus.org Michal Maczka; mmaczka@interia.pl' Michal Maczka; rahul.thakur.xdev@gmail.com Rahul Thakur; the Indiana University Extreme! Lab; the original author or authors",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-containers-component-annotations-2.1.1-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UwamCNNbik1Tt69owghrkKeym0jVfeEwaRGW1lk-Vh0/plexus-containers-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-containers-component-annotations@2.1.1-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-containers",
    "licenseConcluded" : "(Apache-2.0 AND MIT AND xpp)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-containers-component-annotations",
    "versionInfo" : "2.1.1-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-interpolation-1.26-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 Codehaus Foundation\nCopyright 2001-2004 The Apache Software Foundation\nCopyright 2007 The Codehaus Foundation\nCopyright (c) 2001-2003 The Apache Software Foundation\nCopyright (c) 2004, The Codehaus",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-interpolation-1.26-13.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0s0GVK3U3GFFaXL7ocRu4DAFCTazs8AoPJY0dy4wUKk/plexus-interpolation-~-13.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-interpolation@1.26-13.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-interpolation",
    "licenseConcluded" : "(Apache-1.1 AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-interpolation",
    "versionInfo" : "1.26-13.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-sec-dispatcher-2.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright (c) 2008 Sonatype, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-sec-dispatcher-2.0-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-sec-dispatcher@2.0-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wbTXBDrau-bQwEwkn_tQkovblN3aoca1rRSa_dJt-e0/plexus-sec-dispatcher-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-sec-dispatcher",
    "versionInfo" : "2.0-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-plexus-utils-3.3.0-11.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2004 Sun Microsystems, Inc.\nCopyright The Apache Software Foundation\nCopyright The Codehaus Foundation\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c) 2006, Javolution (http://javolution.org)\nCopyright (c) 2002 John Casey\nCopyright (c) 2000-2002 The Apache Software Foundation\nCopyright (c) 2003 The Trustees of Indiana University\nCopyright (c) 2001-2003, ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL 60661 USA",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/plexus-utils-3.3.0-11.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/plexus-utils@3.3.0-11.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/N32ec9wnfedHwJX8_HZwMtenm5Lazm6WUCrpTVkVqus/plexus-utils-~-11.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://codehaus-plexus.github.io/plexus-utils/",
    "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Apache-1.1 AND Apache-2.0 AND xpp AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/plexus-utils",
    "versionInfo" : "3.3.0-11.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-popt-1.18-8.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2008 Felipe Castro\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. Gabor Kelemen <kelemeng@gnome.hu> , 2007\nCopyright (c) 2007 Free Software Foundation, Inc. Leandro Lucarella <luca@linuxmendoza.org.ar> , 2007\nCopyright (c) 2008 Free Software Foundation, Inc. Seksan Poltree <seksan.poltree@gmail.com> , 2008\nCopyright (c) 2005 Free Software Foundation, Inc. Wei-Lun Chao <chaoweilun@pcmail.com.tw> , 2005\nCopyright (c) 2003 Free Software Foundation, Inc. Yukihiro Nakai <ynakai@redhat.com> , 2003\nCopyright (c) 1999 Free Software Foundation, Inc. Yuri Syrota <rasta@renome.rovno.ua> , 1999\nCopyright (c) 1998 Red Hat Software\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998 by Addison Wesley Longman, Inc.\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 2008 popt\n(c) 1998-2000 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/popt-1.18-8.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/popt@1.18-8.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ddq1l4nuewynPwiilvZoIS-JTl5QKxPq-mDX2zKPUl8/popt-~-8.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/rpm-software-management/popt/",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/popt",
    "versionInfo" : "1.18-8.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-publicsuffix-list-20210518-3.el9-arch-noarch",
    "copyrightText" : "Copyright © 2007–22 Mozilla Foundation.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/p/publicsuffix-list-20210518-3.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/publicsuffix-list@20210518-3.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gOYrSaRhZMLfSO-wuC0DhJmhRIg_JUEO-agVStRnrqc/publicsuffix-list-20210518-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://publicsuffix.org/",
    "licenseConcluded" : "MPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/publicsuffix-list",
    "versionInfo" : "20210518-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-libs-3.9.21-2.el9-6.1-arch-x86-64",
    "copyrightText" : "Copyright 2008 Armin Ronacher\nCopyright 1995-1997, Automatrix, Inc.\nCopyright 1999, Bioreason, Inc.\nCopyright 2009 Brian Quinlan\nCopyright Disney Enterprises, Inc.\nCopyright 2004-2005 Elemental Security, Inc.\nCopyright 2006 Georg Brandl\nCopyright 2006 Google, Inc.\nCopyright 2000, Mojam Media, Inc.\nCopyright 1991-1995, Stichting Mathematisch Centrum\nCopyright 2008 by Armin Ronacher\nCopyright 1994 by Lance Ellinghouse Cathedral City, California Republic, United States of America\nCopyright 1996 by Sam Rushing\nCopyright 2000 by Timothy O'Malley <timo@alum.mit.edu>\nCopyright 2001-2019 by Vinay Sajip\nCopyright 1995-1996 by Virginia Polytechnic Institute & State University, Blacksburg, Virginia, USA, and Fred L. Drake, Jr., Reston, Virginia\nCopyright (c) 2000 Bastian Kleineidam\nCopyright (c) 2000 BeOpen.com\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) 2004-2005 Gerhard Haring <gh@ghaering.de>\nCopyright (c) 2005-2010 Gregory P. Smith (greg@krypto.org)\nCopyright (c) 1999-2001 Gregory P. Ward\nCopyright (c) 2002 Lars Gustaebel <lars@gustaebel.de>\nCopyright (c) 2000 Luke Kenneth Casson Leighton <lkcl@samba.org>\nCopyright (c) 1999-2000, Marc-Andre Lemburg mal@lemburg.com\nCopyright (c) 2005, 2006 Martin von Lowis\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023 Python Software Foundation\nCopyright (c) 2006-2008, R Oudkerk\nCopyright (c) 1991-1995 Stichting Mathematisch Centrum\nCopyright (c) 1991-1995 Stichting Mathematisch Centrum, Amsterdam\nCopyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands\nCopyright (c) 2001-2019 Vinay Sajip\nCopyright (c) 1999-2002 by Fredrik Lundh\nCopyright (c) 2003-2005 by Peter Astrand <astrand@lysator.liu.se>\nCopyright (c) 1997-2001 by Secret Labs AB.\nCopyright (c) 2000-2010, eGenix.com Software GmbH info@egenix.com\nPortions copyright 1991-1995 by Stichting Mathematisch Centrum, Amsterdam, The Netherlands\n(c) Copyright CNRI\n(c) Copyright 2000 Guido van Rossum. Codec\n(c) 2005 Ian Bicking and contributors\n(c) Implicit lookup Bypassing\nportions copyright 2001, Autonomous Zones Industries, Inc.\n\nAuthors: AT&T; Andre Roberge; Andreas Zeidler <az@kreativkombinat.de>; Andrew Dalke; Andrew Svetlov <andrew.svetlov@gmail.com>; Anthony Baxter; Anthony Baxter <anthony@interlink.com.au>; Armin Ronacher; Automatrix, Inc.; Autonomous Zones Industries, Inc.; Barry Warsaw; Barry Warsaw <barry@python.org>; Barry Warsaw, Thomas Wouters, Anthony Baxter; Bastian Kleineidam; Bastian Kleineidam <calvin@cs.uni-sb.de>; Baxter, Wouters and Warsaw; BeOpen.com; Ben Gertzfield; Ben Gertzfield, Barry Warsaw; Benjamin Peterson; Bill Janssen; Bioreason, Inc.; Bob Ippolito <bob@redivi.com>; Brian Quinlan; Brian Quinlan (brian@sweetapp.com); CNRI; Carey Evans <c.evans@clear.net.nz>; Christian Heimes; Collin Winter; Collin Winter, Nick Edds; Corporation for National Research Initiatives; David Ascher <david_ascher@brown.edu>; Davide Di Blasi <davidedb@gmail.com>; Disney Enterprises, Inc.; Donn Cave <donn@u.washington.edu>; Elemental Security, Inc.; Eric Price and Facundo Batista and Raymond Hettinger; Eric S. Raymond <esr@thyrsus.com>; Ezio Melotti; Fred L. Drake, Jr. fdrake@acm.org; Fredrik Lundh; Fredrik Lundh <fredrik@pythonware.com>; Georg Brandl; George Boutsioukis <gboutsioukis@gmail.com>; Gerhard H; Gerhard Haering <gerhard@bigfoot.de>; Gerhard Haring; Gerhard Haring <gh@ghaering.de>; Google Inc.; Google, Inc.; Greg Ward <gward@python.net>; Gregory P. Smith; Gregory P. Ward; Guido van Rossum <guido@python.org>; Guido van Rossum. Codec; Hye-Shik Chang <perky@FreeBSD.org>; Ian Bicking and contributors; Implicit lookup Bypassing; Jack Diederich; Jack Jansen and Fredrik Lundh; Jacques Frechet, Collin Winter; James Roskind; Jeffrey Yasskin; Ka-Ping Yee <ping@lfw.org>; Ka-Ping Yee <ping@zesty.ca>; Keith Dart; Lance Ellinghouse; Lance Ellinghouse Cathedral City, California Republic, United States of America; Lars Gust; Lars Gustaebel; Lars Wirzenius <liw@iki.fi>; Luke Kenneth Casson Leighton; Marc-Andre Lemburg; Marc-Andre Lemburg (mal@lemburg.com); Marc-Andre Lemburg <mal@egenix.com>; Marc-Andre Lemburg, mal@lemburg.com; Mark Hammond (mhammond@skippinet.com.au); Martin v. Lowis; Martin von Loewis; Martin von Lowis; Michael Felt <aixtools@felt.demon.nl>; Mojam Media, Inc.; Nadeem Vawda <nadeem.vawda@gmail.com>; Nick Coghlan; Nick Coghlan , Raymond Hettinger , and Lukasz Langa; Nick Edds; Paul Kippes <kippesp@gmail.com>; Perry Stoll; Peter Astrand; Piers Lauder; Piers Lauder <piers@cs.su.oz.au>; Python Software Foundation; R Oudkerk; Rick Holbert <holbert.13@osu.edu>; Sam Rushing; Sam Rushing <rushing@nightmare.com>; Secret Labs AB; Sjoerd Mullender (sjoerd@acm.org); Skip Montanaro; Steen Lumholt; Steven J. Bethard <steven.bethard@gmail.com>; Stichting Mathematisch Centrum; Stichting Mathematisch Centrum Amsterdam, The Netherlands; Stichting Mathematisch Centrum, Amsterdam; Stichting Mathematisch Centrum, Amsterdam, The Netherlands; The Dragon De Monsyne <dragondm@integral.org>; Tim Peters (tim@python.org); Timothy O'Malley; Timothy O'Malley <timo@alum.mit.edu>; Tino Lange <Tino.Lange@isg.de>; Tomas Lindroos <skitta@abo.fi>; Victor Stinner; Vinay Sajip; Vinay Sajip <vinay_sajip@red-dove.com>; Virginia Polytechnic Institute & State University, Blacksburg, Virginia, USA, and Fred L. Drake, Jr., Reston, Virginia; Zooko O'Whielacronx http://zooko.com zooko@zooko.com; a Parser; different Executors; eGenix.com Software GmbH; s Author-email; the Jython developers; the Jython developers (www.jython.org)",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-libs-3.9.21-2.el9_6.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-libs@3.9.21-2.el9_6.1?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BXG8_RKf9sKc7aHtYFRTLwMkdWsC46I2X0wEmA0IQh8/python~-~-2.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.python.org/",
    "licenseConcluded" : "Python-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-libs",
    "versionInfo" : "3.9.21-2.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-pip-wheel-21.3.1-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2017 Elisey Zanko\nCopyright 2015 Eric Larson\nCopyright 2016 Etienne Bersac\nCopyright 2012 Facebook\nCopyright Jonathan Hartley 2013\nCopyright 2016 Joshua Harlow\nCopyright 2016 Julien Danjou\nCopyright 2020 Kenneth Reitz\nCopyright 2015,2016,2017 Nir Cohen\nCopyright 2013-2014 Ray\nCopyright 2012 by Simon Sapin\nCopyright (c) 2010 ActiveState Software Inc.\nCopyright (c) 2008-2020 Andrey Petrov and contributors\nCopyright (c) 2010-2020 Benjamin Peterson\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) Donald Stufft and individual contributors\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2012 Georgios Verigakis <verigak@gmail.com>\nCopyright (c) 2008-2011 INADA Naoki <songofacandy@gmail.com>\nCopyright (c) 2006-2013 James Graham and other contributors\nCopyright (c) 2016 Jason R Coombs <jaraco@jaraco.com>\nCopyright (c) 2010 Jonathan Hartley\nCopyright (c) 2013-2021, Kim Davies\nCopyright (c) 2002 Lars Gustaebel <lars@gustaebel.de>\nCopyright (c) 2003-2019 Paul T. McGuire\nCopyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation\nCopyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands\nCopyright (c) 2021 Taneli Hukkinen\nCopyright (c) 2012 The Python Software Foundation\nCopyright (c) 2008-2021 The pip developers\nCopyright (c) 2008-2020 The pip developers see AUTHORS.txt <https://github.com/pypa/pip/blob/main/AUTHORS.txt>\nCopyright (c) 2017 Thomas Kluyver\nCopyright (c) 2018, Tzu-ping Chung <uranusjr@gmail.com>\nCopyright (c) 2012-2015 Vinay Sajip\nCopyright (c) 2015-2016 Will Bond <will@wbond.net>\nCopyright (c) 2012 by Simon Sapin\nCopyright (c) 1998 the Initial Developer\n(c) 2006 Entrust, Inc.\n(c) 2006 Entrust, Inc. Label Entrust Root Certification\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net Limited\n(c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial\ncopyright (c) 2012 by Kenneth Reitz\ncopyrighted by the Free Software Foundation\n\nAuthors: ActiveState Software Inc.; Andrey Petrov (andrey.petrov@shazow.net); Andrey Petrov and contributors; Author-email Maintainer Maintainer-email; Benjamin Peterson; Benjamin Peterson <benjamin@python.org>; Corporation for National Research Initiatives; Donald Stufft and individual contributors; Elisey Zanko; Entrust, Inc.; Entrust, Inc. - for; Entrust, Inc. Label Entrust Root Certification; Entrust.net Limited; Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial; Eric Larson; Etienne Bersac; Facebook; Free Software Foundation, Inc.; Georg Brandl Author-email georg@python.org; Georgios Verigakis; INADA Naoki; James Graham and other contributors; Jason R Coombs; Jonathan Hartley; Joshua Harlow; Julien Danjou; Kenneth Reitz; Kim Davies; Lars Gust; Lars Gustaebel; Nir Cohen; Paul T. McGuire; Python Software Foundation; Ray; Simon Sapin; Stichting Mathematisch Centrum Amsterdam, The Netherlands; Taneli Hukkinen; The Python Software Foundation; The pip developers; The pip developers see AUTHORS.txt; Thomas Kluyver; Tzu-ping Chung; Vinay Sajip; Will Bond; prepare-release''. Regenerate; responds, the no-response <https://github.com/apps/no-response>; the Free Software Foundation; the Initial Developer; the PackageFinder",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-pip-wheel-21.3.1-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1wmer9lF_adXdE1g_KnvUd8lP1Ma6MAgcKuTs547pv4/python-pip-~-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-pip-wheel@21.3.1-1.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pip.pypa.io/",
    "licenseConcluded" : "(LGPL-2.0-only AND BSD-2-Clause AND BSD-3-Clause AND MPL-2.0 AND Apache-2.0 AND ISC AND MIT AND Python-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-pip-wheel",
    "versionInfo" : "21.3.1-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-setuptools-wheel-53.0.0-13.el9-6.1-arch-noarch",
    "copyrightText" : "Copyright Jason R. Coombs\nCopyright 1995-2005 Mark Adler\nCopyright (c) 2005-2010 ActiveState Software Inc.\nCopyright (c) 2013 Eddy Petrisor\nCopyright (c) 2005, 2006 Martin von Lowis\nCopyright (c) 2003-2018 Paul T. McGuire\nCopyright 2014-2019 s",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-setuptools-wheel-53.0.0-13.el9_6.1.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1KgIpl2p4gDUlK2aRyKOJePFHdySO0zDrWMIYrrNx_Y/python-setuptools-~-13.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3-setuptools-wheel@53.0.0-13.el9_6.1?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pypi.python.org/pypi/setuptools",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3-setuptools-wheel",
    "versionInfo" : "53.0.0-13.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-python3-3.9.21-2.el9-6.1-arch-x86-64",
    "copyrightText" : "Copyright (c) 2000 BeOpen.com\nCopyright (c) 1995-2001 Corporation for National Research Initiatives\nCopyright (c) 2001-2023 Python Software Foundation\nCopyright (c) 1991-1995 Stichting Mathematisch Centrum",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/python3-3.9.21-2.el9_6.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BXG8_RKf9sKc7aHtYFRTLwMkdWsC46I2X0wEmA0IQh8/python~-~-2.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/python3@3.9.21-2.el9_6.1?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.python.org/",
    "licenseConcluded" : "Python-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/python3",
    "versionInfo" : "3.9.21-2.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-readline-8.1-4.el9-arch-x86-64",
    "copyrightText" : "Copyright 1985, 1986, 1988, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015\nCopyright 1988-2020 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright 2004 Per Bothner <per@bothner.com>\nCopyright 2019 Radical Eye Software\nCopyright 1989-2020 by the Free Software Foundation, Inc.\nCopyright 1991 by the Massachusetts Institute of Technology\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) Damian Ivereigh 2000\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. http://fsf.org/ http://fsf.org\nCopyright (c) 1999-2001 Geoff Wing <gcw@pobox.com>\nCopyright (c) 2000-2007 Hans Lub hlub@knoware.nl\nCopyright (c) 1999 Jeff Solomon\nCopyright (c) 1993-2000 Juergen Weigert (jnweiger@immd4.informatik.uni-erlangen.de) Michael Schroeder (mlschroe@immd4.informatik.uni-erlangen.de)\nCopyright (c) 1987 Oliver Laumann\nCopyright (c) 2004, 1999 Per Bothner\nCopyright (c) 1989-2020 by the Free Software Foundation, Inc.\nCopyright (c) 1989-2020 by the Free Software Foundation, Inc. .SH DESCRIPTION Many\nCopyright (c) (c) 2003-2004 Harold Levy\nCopyright <http://www.ams.org>\n(c) 2000-2007 Hans Lub\n(c) 2001 by Dimitris Vyzovitis vyzo@media.mit.edu\n(c) m(haracters.)275 1983",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/readline-8.1-4.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_NEj8WUfFK2fiTFN4MhFCPfimZSCuJFca_PbiSqunkM/readline-~-4.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/readline@8.1-4.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tiswww.case.edu/php/chet/readline/rltop.html",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/readline",
    "versionInfo" : "8.1-4.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-redhat-release-9.6-0.1.el9-arch-x86-64",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019 Red Hat, Inc.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/redhat-release-9.6-0.1.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/O_RcFtmJv1Vo9RKlSChZBVXQArMlhedLc4ooco0KDgU/redhat-release-~-~.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/redhat-release@9.6-0.1.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(LicenseRef-RedHat-UBI-EULA AND GPL-2.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/redhat-release",
    "versionInfo" : "9.6-0.1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rootfiles-8.1-34.el9-arch-noarch",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rootfiles-8.1-34.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nKEBYS-vUCUSs6G1EF4Ra8Hr2CA6yXfJk5eCh_gS2EA/rootfiles-~-34.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rootfiles@8.1-34.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rootfiles",
    "versionInfo" : "8.1-34.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rpm-libs-4.16.1.3-37.el9-arch-x86-64",
    "copyrightText" : "RPM is Copyright (c) 1998 by Red Hat Software, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rpm-libs-4.16.1.3-37.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rpm-libs@4.16.1.3-37.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2Gl3GdvR6ZpoErWN0Ltc24SvVaUN87R3QjTeH-ePly4/rpm-~-37.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.rpm.org/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rpm-libs",
    "versionInfo" : "4.16.1.3-37.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rpm-4.16.1.3-37.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-2002 - Red Hat, Inc.\nCopyright 1998-2002 - Red Hat, Inc. Kunde\nCopyright 1998-2002 Red Hat, Inc. Nie\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991 Free Software Foundation, Inc.\nCopyright (c) 1998 - 2002 Red Hat, Inc.\nCopyright (c) 1998-2002 - Red Hat, Inc. Could\nCopyright (c) 1998-2002 - Red Hat, Inc. Database\nCopyright (c) 1998-2002 - Red Hat, Inc. Database opties Interne\nCopyright (c) 1998-2002 - Red Hat, Inc. Database options Internal\nCopyright (c) 1998-2002 - Red Hat, Inc. Impossibile regolarizzare l'hostname\nCopyright (c) 1998-2002 - Red Hat, Inc. Nemohu\nCopyright (c) 1998-2002 - Red Hat, Inc. Nie\nCopyright (c) 1998-2002 - Red Hat, Inc. Rechnername\nCopyright (c) 2003 System Design and Research Institute Co.,Ltd.\nCopyright (c) 1998-2002 gant Red Hat, Inc. N'hell\n(c) 1998-2002\n(c) 1998-2002 - Red Hat, Inc.\n(c) 1998-2002 - Red Hat, Inc Opsi\n(c) 1998-2002 - exec s seek\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rpm-4.16.1.3-37.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rpm@4.16.1.3-37.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2Gl3GdvR6ZpoErWN0Ltc24SvVaUN87R3QjTeH-ePly4/rpm-~-37.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.rpm.org/",
    "licenseConcluded" : "GPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rpm",
    "versionInfo" : "4.16.1.3-37.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-rsync-3.2.5-3.el9-arch-x86-64",
    "copyrightText" : "Copyright 1992-2020 Free Software Foundation, Inc.\nCopyright 1995-2013 Jean-loup Gailly and Mark Adler\nCopyright 1995-2013 Mark Adler\nCopyright Patrick Powell 1995\nCopyright (c) 1996\nCopyright (c) 1992-1995 Andrew Tridgell\nCopyright (c) 1992-2001 Andrew Tridgell <tridge@samba.org>\nCopyright (c) 2004 Chris Shoemaker\nCopyright (c) 2001-2003 Christophe Devine\nCopyright (c) Cronosys, LLC 2004\nCopyright (c) 1992-1996, 1998-2012 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1996-2001 Internet Software Consortium\nCopyright (c) 1995-2005 Jean-loup Gailly\nCopyright (c) 1995-2013 Jean-loup Gailly and Mark Adler\nCopyright (c) Jeremy Allison 2000\nCopyright (c) 2020 Jorrit Jongma\nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 2002 Martin Pool\nCopyright (c) 2000-2001 Martin Pool <mbp@samba.org>\nCopyright (c) 1996 Paul Mackerras\nCopyright (c) 2003-2007, PostgreSQL Global Development Group\nCopyright (c) 2004 Red Hat, Inc.\nCopyright (c) 1998 Red Hat Software\nCopyright (c) 2013 Roman Donchenko\nCopyright (c) 2002 Scott Howard\nCopyright (c) 2002-2008 Wayne Davison\nCopyright (c) 1999 Weiss\nCopyright (c) 1996-2022 by Andrew Tridgell, Wayne Davison, and others. Web site https://rsync.samba.org\nCopyright (c) 2002 by Brad Hards <bradh@frogmouth.net>\nCopyright (c) 2001 by Martin Pool\nCopyright (c) 2001, 2002 by Martin Pool <mbp@samba.org>\nPortions Copyright (c) 1996-2005, The PostgreSQL Global Development Group\nPortions Copyright (c) 1994, The Regents of the University of California\n(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 1998-2000 Red Hat, Inc.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/r/rsync-3.2.5-3.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/rsync@3.2.5-3.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7j1mY-afIqynK7jTI6dw5LpTf9n-qzE-QdZumN4gJa8/rsync-~-3.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://rsync.samba.org/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/rsync",
    "versionInfo" : "3.2.5-3.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-sed-4.8-9.el9-arch-x86-64",
    "copyrightText" : "A. (c) B. (c)\nAutorska prava (c) Zaduzhbina\nC. @copyright D. (c)\nCopyright 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software Foundation, Inc.\nCopyright 1991, 99 Free Software Foundation, Inc.\nCopyright 87, 1991, 1992 Free Software Foundation, Inc.\nCopyright 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End\nCopyright 1987, 1988, 1991, 1992 Free Software Foundation, Inc. End More\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\nCopyright (c) 1990-2005, 2007-2009 Acme, Inc.\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\nCopyright (c) 89 Free Software Foundation, Inc.\nCopyright (c) 2004 Free Software Foundation, Inc. Acest\nCopyright (c) 2001 Free Software Foundation, Inc. Eli Zaretskii <eliz@is.elta.co.il> , 2001\nCopyright (c) 2020 Free Software Foundation, Inc. Gael Queri <gael@lautre.net> , 1998. Frederic Marchal <fmarchal@perso.be> , 2020 Gael Queri J'ai\nCopyright (c) 2001, 2019 Free Software Foundation, Inc. Jong-Hoon Ryu <redhat4u@netian.com> , 2001. Seong-ho Cho <darkcircle.0426@gmail.com> , 2019\nCopyright (c) 2001 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2020\nCopyright (c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\nCopyright (c) 2002, 2007, 2008 Free Software Foundation, Inc. Wang Li <charles@linux.net.cn> , 2002\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>\nCopyright (c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\nCopyright (c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright d Free Software Foundation, Inc.\n(c) Free Software Foundation, Inc\n(c) Idruma Eleutherou Logismikou, Inc.\n(c) Ozgur Yazilim Vakfi",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/sed-4.8-9.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/sed@4.8-9.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3JEIl-AKGOuiCSoLfYIPhT67ULnGZjBErGVb9cpRp8/sed-~-9.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://sed.sourceforge.net/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/sed",
    "versionInfo" : "4.8-9.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-setup-2.13.7-10.el9-arch-noarch",
    "copyrightText" : "Ville Skytta <ville.skytta@iki.fi> 2016",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/setup-2.13.7-10.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/setup@2.13.7-10.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DUU5txqUmo4AGTOn3OHYFmRDsBPsMa0ZD-RSjU4W57E/setup-~-10.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://pagure.io/setup/",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/setup",
    "versionInfo" : "2.13.7-10.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-shadow-utils-4.9-12.el9-arch-x86-64-epoch-2",
    "copyrightText" : "Copyright 1989 - 1990, Julianne Frances Haugh\nCopyright 1991, Julianne Frances Haugh Hungarian\nCopyright 1991, Julianne Frances Haugh Todos\nCopyright 1991 - 1993, Julianne Frances Haugh and Chip Rosenthal\nCopyright 1992, Phillip Street and Julianne Frances Haugh\nCopyright 1996, Rafal Maszkowski <rzm@pdi.net>\nCopyright (c) 1989 Carnegie Mellon University\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1996 HANATAKA Shinya\nCopyright (c) 1990 - 1994, Julianne Frances Haugh\nCopyright (c) 1997 Kazuyoshi Furutaka\nCopyright (c) 2001 Maki KURODA\nCopyright (c) 1996 - 2000, Marek Michalkiewicz\nCopyright (c) 1996 Michael H. Jackson\nCopyright (c) 2007 - 2011, Nicolas Francois\nCopyright (c) 1983, 1991 The Regents of the University of California\nCopyright (c) 2000 - 2006, Tomasz Kloczko\nCopyright (c) 2001 Yuichi SATO\nCopyright (c) 1993 and The Australian National University\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/shadow-utils-4.9-12.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_1Vy3RK-xpX81iG0oQ4l4ftxJH_FfZWEbr8cssvUidA/shadow-utils-~-12.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/shadow-utils@4.9-12.el9?arch=x86_64&epoch=2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/shadow-maint/shadow",
    "licenseConcluded" : "(BSD-4-Clause-UC AND BSD-3-Clause AND GPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/shadow-utils",
    "versionInfo" : "4.9-12.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-sisu-0.3.5-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 2001-2006 The Codehaus Foundation\nCopyright The Codehaus Foundation\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2006, Javolution (http://javolution.org)\nCopyright (c) 2010, 2013 Sonatype, Inc.\nCopyright (c) 2010, 2015 Sonatype, Inc. and others Bundle-DocURL http://www.eclipse.org/sisu Bundle-License http://www.eclipse.org/legal/epl-v10.html\nCopyright (c) 2008, 2014 Stuart McCulloch\nCopyright (c) 2014 Takari, Inc.\nCopyright (c) 2001-2003, ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL 60661 USA",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/s/sisu-0.3.5-3.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vdLlQsjrHBGsDynqiiuoV7GFRvOs4o_sArdLyR9011g/sisu-~-3.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/sisu@0.3.5-3.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&epoch=1&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://eclipse.org/sisu/",
    "licenseConcluded" : "(EPL-1.0 AND BSD-2-Clause AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/sisu",
    "versionInfo" : "0.3.5-3.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd",
    "copyrightText" : "Copyright 1999-2005 The Apache Software Foundation\nCopyright (c) 2000-2009, JPackage Project\nCopyright (c) 2004-2007 QOS.ch\nCopyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2013 QOS.ch\nCopyright (c) 2004-2017 QOS.ch\nCopyright (c) 2004-2017 http://www.qos.ch/> QOS.ch",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/s/slf4j-1.7.32-5.module+el9.4.0+21292+f76c4bf2.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/_uIIY3rMEEU5n6EVxvtp8r2LGrT0tp2jkkscsQTw-80/slf4j-~-5.module%2Bel~%2B21292%2Bf76c4bf2.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/slf4j@1.7.32-5.module%2Bel9.4.0%2B21292%2Bf76c4bf2?arch=noarch&modularitylabel=maven%3A3.8%3A9040020240209162542%3A470dcefd",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org/",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/slf4j",
    "versionInfo" : "1.7.32-5.module+el9.4.0+21292+f76c4bf2"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-sqlite-libs-3.34.1-8.el9-6-arch-x86-64",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/sqlite-libs-3.34.1-8.el9_6.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2kOEXxwnNLTNbXQWI-SM79WRxxRnuVBMq34kPqMcSX0/sqlite-~-8.el9_6.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/sqlite-libs@3.34.1-8.el9_6?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.sqlite.org/",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/sqlite-libs",
    "versionInfo" : "3.34.1-8.el9_6"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-systemd-libs-252-51.el9-6.1-arch-x86-64",
    "copyrightText" : "Copyright 2008 Colin McCabe <colin@cozybit.com>\nCopyright 2008 Ian Kent <raven@themaw.net>\nCopyright 2015-2017 Intel Deutschland GmbH\nCopyright 2001 Jeff Garzik <jgarzik@pobox.com>\nCopyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>\nCopyright 2008 Jouni Malinen <jouni.malinen@atheros.com>\nCopyright 2008 Luis Carlos Cobo <luisca@cozybit.com>\nCopyright 2008, 2009 Luis R. Rodriguez <lrodriguez@atheros.com>\nCopyright 2008 Michael Buesch <m@bues.ch>\nCopyright 2008 Michael Wu <flamingice@sourmilk.net>\nCopyright 2018 Neal Gompa\nCopyright 2008 Red Hat, Inc.\nCopyright 2014 The Chromium OS Authors\nCopyright (c) 2000-2002 Alan Cox <alan@redhat.com>\nCopyright (c) 2008 Alan Jenkins <alan.christopher.jenkins@googlemail.com>\nCopyright (c) 2009 Alan Jenkins <alan-jenkins@tuffmail.co.uk>\nCopyright (c) 2016, 2022 Alexander Shopov <ash@kambanaria.org>\nCopyright (c) 2016, 2022 Alexander Shopov <ash@kambanaria.org> Alexander Shopov <ash@kambanaria.org> , 2016, 2022\nCopyright (c) 2014 Axis Communications AB.\nCopyright (c) 2016 BISDN GmbH.\nCopyright (c) 2012 B. Poettering Contact fsprg@point-at-infinity.org\nCopyright (c) 2020 Bastien Nocera <hadess@hadess.net>\nCopyright (c) 2015 Boyuan Yang\nCopyright (c) 2010 Brandon Philips\nCopyright (c) 2010-2017 Canonical\nCopyright (c) 2009 Canonical Ltd.\nCopyright (c) 2014 Carlos Garnacho <carlosg@gnome.org>\nCopyright (c) 2004 Chris Friesen <chris_friesen@sympatico.ca>\nCopyright (c) 2015 Chris Morgan\nCopyright (c) 2013-2019 Daniele Medri\nCopyright (c) 1998 David S. Miller (davem@redhat.com)\nCopyright (c) 2009-2010 David Zeuthen <zeuthen@gmail.com>\nCopyright (c) 2018 Dell Inc.\nCopyright (c) 2014 Didier Roche\nCopyright (c) 2016 Djalal Harouni\nCopyright (c) 2017 Felipe Sateler\nCopyright (c) 2009 Filippo Argiolas <filippo.argiolas@gmail.com>\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2016 Gabor Kelemen\nCopyright (c) 2003 Greg Kroah-Hartman <greg@kroah.com>\nCopyright (c) 2012 Holger Hans Peter Freyther\nCopyright (c) IBM Corp. 2003\nCopyright (c) 2013 Intel Corporation\nCopyright (c) 2012 <James.Bottomley@HansenPartnership.com> https://github.com/mjg59/efitools\nCopyright (c) 2015-2017 Jason A. Donenfeld <Jason@zx2c4.com>\nCopyright (c) 2014 Jason St. John\nCopyright (c) 2002-2020 Jean Delvare <jdelvare@suse.de>\nCopyright (c) 2015 Jeff Huang\nCopyright (c) 2014 Josh Triplett\nCopyright (c) 2012 Josh Triplett <josh@joshtriplett.org>\nCopyright (c) 2016 Julian Orth\nCopyright (c) 2011 Karel Zak <kzak@redhat.com>\nCopyright (c) 2010 Maarten Lankhorst\nCopyright (c) 2017 Max Resch <resch.max@gmail.com>\nCopyright (c) 1999-2000 Maxim Krasnyansky <max_mk@yahoo.com>\nCopyright (c) 2010 - Maxim Levitsky\nCopyright (c) 2016 Michael Karcher\nCopyright (c) 2016 Michal Soltys <soltys@ziu.info>\nCopyright (c) 1995-2004 Miquel van Smoorenburg\nCopyright (c) 2018 Neal Gompa\nCopyright (c) 2007 Oracle\nCopyright (c) 2019 Oracle and/or its affiliates\nCopyright (c) 2011-2014 PLUMgrid, http://plumgrid.com\nCopyright (c) 2010 ProFUSION embedded systems\nCopyright (c) 2015 Rafael Ferreira\nCopyright (c) 2010 Ran Benita\nCopyright (c) 2000 Red Hat, Inc.\nCopyright (c) 2012 Roberto Sassu - Politecnico di Torino, Italy TORSEC group - http://security.polito.it\nCopyright (c) SUSE\nCopyright (c) 2005 SUSE Linux Products GmbH\nCopyright (c) 2015 Sabrina Dubroca <sd@queasysnail.net>\nCopyright (c) 2009 Scott James Remnant <scott@netsplit.com>\nCopyright (c) 2013-2017 Sergey Ptashnick\nCopyright (c) 2013 Simon Peeters\nCopyright (c) 2001 - 2003 Sistina Software (UK) Limited\nCopyright (c) 2013-2016 Sylvain Plantefeve\nCopyright (c) 1999 Tom Tromey\nCopyright (c) 2019 VMware, Inc.\nCopyright (c) 2014 Vinay Kulkarni\nCopyright (c) 2014 Vinay Kulkarni <kulkarniv@vmware.com>\nCopyright (c) 2015 Werner Fink\nCopyright (c) 2009 Wolfgang Grandegger <wg@grandegger.com>\nCopyright (c) 2016 Zeal Jagannatha\nCopyright (c) 2002-2022, and GNU\nPortions Copyright 2002 Intel eli.kupermann@intel.com, christopher.leech@intel.com\nPortions Copyright 2001 Sun Microsystems (thockin@sun.com)\nPortions Copyright (c) 2004 David Zeuthen, <david@fubar.dk>\nPortions Copyright (c) Sun Microsystems 2008\n(c) @@ -2015,22\n(c) B.A.T.M.A.N. contributors\n(c) Copyright 1995 Simon Guru Aleph-Null Janes NCM Network and Communications Management, Inc.\n(c) Copyright 1999, Thomas Davis, tadavis@lbl.gov\ncopyrighted by the Free Software Foundation\n(c) systemd, 2022 https://github.com/systemd/systemd/tree/main/docs\n\nAuthors: <James.Bottomley@HansenPartnership.com> https://github.com/mjg59/efitools; Alan Cox; Alan Jenkins; Albert Pool, Martin Mares, and other volunteers from the PCI ID Project at https://pci-ids.ucw.cz; Alexander Shopov; Alexander Shopov Alexander Shopov; Auke Kok <auke-jan.h.kok@intel.com>; Austin Appleby; Axis Communications AB.; B. Poettering Contact; B.A.T.M.A.N. contributors; BISDN GmbH.; Bastien Nocera; Boyuan Yang; Brandon Philips; Canonical; Canonical Ltd.; Carlos Garnacho; Chris Friesen; Chris Morgan; Colin McCabe; Daniele Medri; Dave Young <hidave.darkstar@gmail.com>; David S. Miller; David Zeuthen; Dell Inc.; Didier Roche; Djalal Harouni; Felipe Sateler; Filippo Argiolas; Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Donald Becker, <becker@super.org> Alan Cox, <alan@lxorguk.ukuu.org.uk>; Free Software Foundation, Inc.; GNU; Gabor Kelemen; Greg Kroah-Hartman; Hannes Reinecke <hare@suse.de>; Holger Hans Peter Freyther; IBM Corp.; Ian Kent; Intel; Intel Corporation; Intel Deutschland GmbH; James Chapman <jchapman@katalix.com>; Jason A. Donenfeld; Jason St. John; Jean Delvare; Jeff Garzik; Jeff Huang; Johannes Berg; Joonas Lahtinen <joonas.lahtinen@linux.intel.com>; Josh Triplett; Jouni Malinen; Julian Orth; Karel Zak; Lennart Poettering; Lennert Buytenhek <buytenh@gnu.org>; Luis Carlos Cobo; Luis R. Rodriguez; Maarten Lankhorst; Max Resch; Maxim Krasnyansky; Maxim Levitsky; Michael Buesch; Michael Karcher; Michael Wu; Michal Soltys; Miloslav Trmac <mitr@redhat.com>; Miquel van Smoorenburg; Nathaniel Chen <nathaniel.chen@intel.com>; Neal Gompa; Oracle; Oracle and/or its affiliates; Original taken from the GNU Project; PLUMgrid; Patrick Mansfield <patmans@us.ibm.com>; Pedro Roque <roque@di.fc.ul.pt>; ProFUSION embedded systems; Rafael Ferreira; Ran Benita; Red Hat, Inc.; Roberto Sassu - Politecnico di Torino, Italy TORSEC group; Ross Biro Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> Corey Minyard; SUSE; SUSE Linux Products GmbH; Sabrina Dubroca; Scott James Remnant; Sergey Ptashnick; Simon Guru Aleph-Null Janes NCM Network and Communications Management, Inc.; Simon Peeters; Sistina Software (UK) Limited; Stephen J. Gowdy <linux.usb.ids@gmail.com>; Sun Microsystems; Sylvain Plantefeve; The Chromium OS Authors; Thomas Davis; Tom Tromey; VMware, Inc.; Vinay Kulkarni; Werner Fink; Wolfgang Grandegger; Zeal Jagannatha; bpf_attr.test.cpu; systemd; systemd-update-done. Its; the ChromiumOS project; the Free Software Foundation; the project; the systemd project; update-man-rules.py; with an appropriate primary group",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/systemd-libs-252-51.el9_6.1.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OTWy74pf2HH21wwAb8LmfxMtJDQA88ScfkGMw-sDdvs/systemd-252-51.el9_~.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/systemd-libs@252-51.el9_6.1?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://systemd.io",
    "licenseConcluded" : "(MIT AND LGPL-2.0-or-later)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/systemd-libs",
    "versionInfo" : "252-51.el9_6.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-tar-1.34-7.el9-arch-x86-64-epoch-2",
    "copyrightText" : "Copyright 2004-2006, 2013, 2019 Free Software Foundation\nCopyright 1990-2021 Free Software Foundation, Inc.\nCopyright 2000-2021 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2005, 2006, 2009\nCopyright (c) 1992, 1994-1997, 1999-2001, 2003-2017, 2021 Free Software Foundation, Inc.\nCopyright (c) 2018 Free Software Foundation, Inc. Antonio Jose Coutinho <ajc@di.uminho.pt> Pedro Albuquerque <palbuquerque73@gmail.com> , 2018, 2019\nCopyright (c) 2002 Free Software Foundation, Inc. Hasbullah Bin Pit <sebol@ikhlas.com> , 2002\nCopyright (c) 2002 Free Software Foundation, Inc. Jacobo Tarrio Barreiro <jtarrio@iname.com> , 2002\nCopyright (c) 1997 Free Software Foundation, Inc. Martin Lacko <lacko@host.sk> , 2001\nCopyright (c) 2006 Free Software Foundation, Inc. Mikel Olasagasti <hey_neken@mundurat.net> , 2006. Piarres Beobide <pi@beobide.net> , 2006\nCopyright (c) 2003, 2004 Free Software Foundation, Inc. Mpalaskas Euaggelos (Balaskas Euaggelos) <ebalaskas@cs.teiath.gr> , 2004. Simos Xenitellis <simos74@gmx.net> , 2004\nCopyright (c) 2001 Free Software Foundation, Inc. Toomas Soome <tsoome@me.com> , 2019\nCopyright (c) 2001 Free Software Foundation, Inc. Ulrich Drepper <drepper@gnu.ai.mit.edu> , 1995? Karl Eichwalder <ke@ke.central.de> , 1996 Christian Kirsch <ck@held.mind.de> , 1996, 2001 Michael Piefel <piefel@informatik.hu-berlin.de> , 2003, 2006, 2007, 2008, 2009, 2010, 2011, 2013, 2014, 2016, 2018\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2009-2018 Sergey Poznyakoff\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright d Free Software Foundation, Inc.\n(c) 1988, 92, 93, 94, 95, 96, 97 Free Software ~ Foundation, Inc.\n(c) ISALPHA (c) ISDIGIT (c)\n(c) Internal macro Tests\ncopyrights for 2013",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/t/tar-1.34-7.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3ZLlENTVz3LbPrV76pcI7Ev8NsI3_O1hYhOiaIpdvDo/tar-~-7.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/tar@1.34-7.el9?arch=x86_64&epoch=2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.gnu.org/software/tar/",
    "licenseConcluded" : "GPL-3.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/tar",
    "versionInfo" : "1.34-7.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-ttmkfdir-3.0.9-65.el9-arch-x86-64",
    "copyrightText" : "(c) Joerg Pommnitz, 2000",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/t/ttmkfdir-3.0.9-65.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/ttmkfdir@3.0.9-65.el9?arch=x86_64",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jhGaVvXXIjWYw4KL123pDv1R3aHCUZzYQeS35Z9sDU0/ttmkfdir-~-65.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "LGPL-2.0-or-later",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/ttmkfdir",
    "versionInfo" : "3.0.9-65.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-tzdata-java-2025b-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2000-2004 Sun Microsystems, Inc.\nCopyright 1985, 1987, 1988 The Regents of the University of California\nCopyright (c) 2000, 2004, Oracle and/or its affiliates\nCopyright (c) 2024 Red Hat, Inc.\nCopyright (c) 2007-2012, Stephen Colebourne & Michael Nascimento Santos",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/t/tzdata-java-2025b-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/tzdata-java@2025b-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rLTtiGQDF7gj8ygNOBScyxdyDwXBBDDhAbUV8_YRkek/tzdata-2025b-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/tzdata-java",
    "versionInfo" : "2025b-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-tzdata-2025b-1.el9-arch-noarch",
    "copyrightText" : "Copyright 2000-2004 Sun Microsystems, Inc.\nCopyright 1985, 1987, 1988 The Regents of the University of California\nCopyright (c) 2000, 2004, Oracle and/or its affiliates\nCopyright (c) 2024 Red Hat, Inc.\nCopyright (c) 2007-2012, Stephen Colebourne & Michael Nascimento Santos",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/t/tzdata-2025b-1.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/tzdata@2025b-1.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rLTtiGQDF7gj8ygNOBScyxdyDwXBBDDhAbUV8_YRkek/tzdata-2025b-1.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.iana.org/time-zones",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/tzdata",
    "versionInfo" : "2025b-1.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-xml-common-0.6.3-58.el9-arch-noarch",
    "copyrightText" : "Copyright 2001 The Internet Society and W3C (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) 2007 Free Software Foundation, Inc. <https://fsf.org/>",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/x/xml-common-0.6.3-58.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/xml-common@0.6.3-58.el9?arch=noarch",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AVRNSpaPb2vLOoggpgaCB5uGyzMilk8gw463GNboDuY/sgml-common-~-58.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.w3.org/2003/entities/",
    "licenseConcluded" : "(W3C-19980720 AND GPL-3.0-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/xml-common",
    "versionInfo" : "0.6.3-58.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-xorg-x11-fonts-Type1-7.5-33.el9-arch-noarch",
    "copyrightText" : "Copyright 1987-1990 as an unpublished work by Bitstream Inc.\nCopyright 1990 as an unpublished work by Bitstream Inc.\nCopyright 1987-1990 as an unpublished work by Bitstream Inc., Cambridge, MA. Comment\nCopyright (c) 1989, 1991 Adobe Systems Incorporated\n(Copyright (c) 2000 XFree86, Inc.)\nFont Program Copyright 1990 as an unpublished work by Bitstream Inc., Cambridge, MA.",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/os/Packages/x/xorg-x11-fonts-Type1-7.5-33.el9.noarch.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7504Hi8rTKmj84fEPEIRpNoWAxVewfMVzy4m349mwok/xorg-x11-fonts-~-33.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/xorg-x11-fonts-Type1@7.5-33.el9?arch=noarch",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.x.org",
    "licenseConcluded" : "(Lucida-Bitmap-Fonts AND MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/xorg-x11-fonts-Type1",
    "versionInfo" : "7.5-33.el9"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-xz-libs-5.2.5-8.el9-0-arch-x86-64",
    "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2004-2018 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>\nCopyright (c) 1998, 2001, 2002, 2006, 2007 Free Software Foundation\nCopyright (c) 1987,88,89,90,91,92,93,94,95,96,98,99,2000,2001,2002,2003,2004,2006 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2014 Google Inc.\nCopyright (c) 1998, 1999, 2001 Henry Spencer\nCopyright (c) 1992, 1993 Jean-loup Gailly\nCopyright (c) 2015 Lasse Collin <lasse.collin@tukaani.org>\nCopyright (c) 2019 Marc Stevens <marc.stevens@cwi.nl>\nCopyright (c) Michael D. Brennan\nCopyright (c) 2005 Philipp Benner\nCopyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>\nCopyright (c) 2006 Timo Lindfors\nCopyright (c) 1995-2000 Ulrich Drepper <drepper@gnu.ai.mit.edu>\nCopyright (c) 1994 X Consortium\nCopyright (c) 1997-2007 by Dimitri van Heesch\n\nAuthors: Adrien Nader <adrien@notk.org>; Alexandre Oliva <oliva@dcc.unicamp.br>; Alexey Tourbin <alexey.tourbin@gmail.com>; Andre Noll <maan@tuebingen.mpg.de>; Andrew Dudman Lasse Collin; Antoine Coeur <antoine.coeur@ef.com>; Ben Boeckel <mathstuf@gmail.com>; Benno Schulenberg <bensberg@justemail.net>; Bootstrap Authors; Bruno Haible <bruno@clisp.org>; Charles Levert <charles@comm.polymtl.ca>; Daniel Richard G.; Dimitri van Heesch; Fran,cois Pinard; Free Software Foundation; Free Software Foundation, Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit <gord@gnu.ai.mit.edu>; Hauke Henningsen <sqrt@entless.org>; Henry Spencer; Igor Pavlov; Igor Pavlov Lasse Collin; Jean-loup Gailly; Jean-loup Gailly, Charles Levert, and Paul Eggert. Andrew Dudman; Jeff Bastian <jbastian@redhat.com>; Jonathan Nieder; Jonathan Nieder <jrnieder@gmail.com>; Jouk Jansen; Julien Marrec <julien.marrec@gmail.com>; Kevin Springle Wei Dai Igor Pavlov; Kevin Springle and Wei Dai; LZMA Utils; Lasse Collin; Lasse Collin <lasse.collin@tukaani.org>; Lasse Collin Joachim Henke; Marc Stevens; Martin Vath <vaeth@mathematik.uni-wuerzburg.de>; Michael D. Brennan; Paul Eggert; Pavel Raiskup <praiskup@redhat.com>; Per Bothner; Philipp Benner; Scott James Remnant; Steven G. Johnson; Timo Lindfors; Tom Tromey <tromey@cygnus.com>; Tran Ngoc Quan <vnwildman@gmail.com>; Ulrich Drepper; Ulrich Drepper <drepper@cygnus.com>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org>; Ulrich Drepper <drepper@cygnus.com> , Bruno Haible <haible@clisp.cons.org> , Macro; X Consortium; XZ Utils; XZ Utils THANKS Incomplete; the Free Software Foundation",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/x/xz-libs-5.2.5-8.el9_0.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/odi2nz6KCnZlrv4uE6nvSvARQvCih9mRShPghCInOug/xz-~-8.el9_0.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/xz-libs@5.2.5-8.el9_0?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://tukaani.org/xz/",
    "licenseConcluded" : "LicenseRef-Public-Domain",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/xz-libs",
    "versionInfo" : "5.2.5-8.el9_0"
  }, {
    "SPDXID" : "SPDXRef-pkg-rpm-redhat-zlib-1.2.11-40.el9-arch-x86-64",
    "copyrightText" : "Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll\nCopyright Jean-loup Gailly Osma Ahvenlampi <Osma.Ahvenlampi@hut.fi>\nCopyright 1995-2017 Jean-loup Gailly and Mark Adler\nCopyright 1995-2017 Mark Adler\nCopyright (c) 1997,99 Borland Corp.\nCopyright (c) 1997,99 Borland Corporation\nCopyright (c) 1998 Brian Raiter <breadbox@muppetlabs.com>\nCopyright (c) 2003 Chris Anderson <christop@charm.net>\nCopyright (c) 1997 Christian Michelsen Research AS Advanced Computing\nCopyright (c) 2003 Cosmin Truta\nCopyright (c) 2002-2003 Dmitriy Anisimkov\nCopyright (c) 2007-2008 Even Rouault\nCopyright (c) 1998-2005 Gilles Vollant\nCopyright (c) 1998 - 2010 Gilles Vollant, Even Rouault, Mathias Svensson\nCopyright (c) 1998-2010 Gilles Vollant (minizip) http://www.winimage.com/zLibDll/minizip.html\nCopyright (c) Henrik Ravn 2004\nCopyright (c) 1990-2000 Info-ZIP.\nCopyright (c) 1995-1998 Jean-loup Gailly\nCopyright (c) 1995-1996 Jean-loup Gailly, Brian Raiter and Gilles Vollant\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-2003 Jean-loup Gailly and Mark Adler\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 1996 L. Peter Deutsch and Jean-Loup Gailly\nCopyright (c) 1995-2003 Mark Adler\nCopyright (c) 2019 Matheus Castanho <msc@linux.ibm.com> , IBM\nCopyright (c) 2009-2010 Mathias Svensson http://result42.com\nCopyright (c) 1995-2006, 2010, 2011, 2016, 2019 Rogerio Alves\nCopyright (c) 2017 Rogerio Alves <rogealve@br.ibm.com> , IBM\nCopyright (c) 1998 by Andreas R. Kleinert\nCopyright (c) 1998 by Bob Dellaca\nCopyright (c) 2003 by Cosmin Truta\nCopyright (c) 1998-2010 - by Gilles Vollant\nCopyright (c) 2004 by Henrik Ravn\nCopyright (c) 1998,1999,2000 by Jacques Nomssi Nzali\nCopyright (c) 1995-2003 by Jean-loup Gailly\nCopyright (c) 2004, 2005 by Mark Adler\n(c) Copyright Henrik Ravn 2004\n(c) 1995-2017 Jean-loup Gailly & Mark Adler\n(c) 1995-2017 Jean-loup Gailly and Mark Adler",
    "downloadLocation" : "https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/z/zlib-1.2.11-40.el9.x86_64.rpm",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/p-c-979NyTUf5IArcqy8HNhFNGs5RGhbutZUZ5iWUo4/zlib-~-40.el9.src.rpm",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:rpm/redhat/zlib@1.2.11-40.el9?arch=x86_64",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.zlib.net/",
    "licenseConcluded" : "(BSL-1.0 AND Zlib)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "rpm/redhat/zlib",
    "versionInfo" : "1.2.11-40.el9"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-mqtt-service-3000.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-cups-libs-2.3.3op2-33.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-util-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-curl-minimal-7.76.1-31.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-agent-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-crypto-policies-scripts-20250128-1.git5269e22.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-softokn-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-1.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-crypto-policies-20250128-1.git5269e22.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-sysinit-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-common-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-copy-jdk-configs-4.0-3.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nspr-4.35.0-17.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-tracer-otel-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-coreutils-single-8.32-39.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-softokn-freebl-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ca-certificates-2024.2.69-v8.0.303-91.4.el9-4-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nettle-3.10.1-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-servlet-common-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-cdi-api-2.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-npth-1.6-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bash-5.1.8-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ncurses-base-6.2-10.20210508.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-dropwizard-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-bzip2-libs-1.0.8-10.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ncurses-libs-6.2-10.20210508.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-mpfr-4.1.0-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-fonts-filesystem-2.0.5-7.el9.1-arch-noarch-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.ws.rs-javax.ws.rs-api-2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-findutils-4.8.0-7.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-pcre2-10.40-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-fontconfig-2.14.0-2.el9-1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-pcre-8.44-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.inject-javax.inject-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-file-libs-5.39-16.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-p11-kit-0.25.3-3.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.validation-validation-api-1.1.0.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-filesystem-3.16-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-pcre2-syntax-10.40-6.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-2.3.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-dnf-data-4.14.0-25.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openssl-libs-3.2.2-6.el9-5.1-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.annotation-javax.annotation-api-1.3.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-expat-2.5.0-5.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-p11-kit-trust-0.25.3-3.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-dbus-libs-1.12.20-8.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-so-3.0.7-6.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-dejavu-sans-fonts-2.37-18.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openssl-fips-provider-3.0.7-6.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-nss-3.101.0-10.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-cyrus-sasl-lib-2.1.27-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-openldap-2.6.8-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lksctp-tools-1.0.19-3.el9-4-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lua-libs-5.4.4-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libyaml-0.2.5-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libzstd-1.5.5-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxcrypt-4.4.18-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxml2-2.9.13-11.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libverto-0.3.2-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libxcb-1.13.1-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libuuid-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lua-posix-35.0-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-audit-libs-3.1.5-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-microdnf-3.9.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-avahi-libs-0.8-22.el9-6.1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-mkfontscale-1.2.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-lang3-3.12.0-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-wagon-3.5.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-atinject-1.0.5-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-codec-1.15-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-resolver-1.7.3-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-io-2.11.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-shared-utils-3.3.4-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-alternatives-1.24-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-lib-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-apache-commons-cli-1.5.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-maven-openjdk21-3.8.5-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lua-5.4.4-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-alsa-lib-1.2.13-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-lz4-libs-1.9.3-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-basesystem-11-13.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jsr-305-3.0.2-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-xml-common-0.6.3-58.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.78.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-keyutils-libs-1.6.3-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-json-c-0.14-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-tzdata-java-2025b-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.78.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-json-glib-1.6.6-1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-tzdata-2025b-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.41"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-javapackages-filesystem-6.4.0-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-tar-1.34-7.el9-arch-x86-64-epoch-2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.asynchttpclient-async-http-client-netty-utils-2.12.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jcl-over-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-ttmkfdir-3.0.9-65.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.41"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-java-21-openjdk-headless-21.0.8.0.9-1.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-sqlite-libs-3.34.1-8.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.41"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-java-21-openjdk-21.0.8.0.9-1.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-systemd-libs-252-51.el9-6.1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jansi-2.4.0-7.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-x86-64-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-sisu-0.3.5-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-epoch-1-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-common-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-java-21-openjdk-devel-21.0.8.0.9-1.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-slf4j-1.7.32-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-shadow-utils-4.9-12.el9-arch-x86-64-epoch-2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty.toolchain-jetty-servlet-api-4.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXi-1.7.10-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-http-10.0.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.collections-eclipse-collections-api-11.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXcomposite-0.4.5-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.collections-eclipse-collections-11.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXext-1.3.4-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libX11-1.7.0-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXau-1.0.9-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.checkerframework-checker-qual-3.33.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-langpacks-en-3.0-16.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libX11-common-1.7.0-11.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.78.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-langpacks-core-en-3.0-16.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-zlib-1.2.11-40.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-langpacks-core-font-en-3.0-16.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-xorg-x11-fonts-Type1-7.5-33.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-krb5-libs-1.21.1-8.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-xz-libs-5.2.5-8.el9-0-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-cpu-affinity-4.16.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gnupg2-2.3.3-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-pip-wheel-21.3.1-1.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-compress-1.26.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gnutls-3.8.3-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-bookkeeper-common-allocator-4.16.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glibc-2.34-168.el9-6.20-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-publicsuffix-list-20210518-3.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.bookkeeper-circe-checksum-4.16.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gmp-6.2.0-13.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-libs-3.9.21-2.el9-6.1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-protobuf-1.11.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glibc-common-2.34-168.el9-6.20-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-utils-3.3.0-11.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.avro-avro-1.11.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glibc-minimal-langpack-2.34-168.el9-6.20-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-popt-1.18-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.openhft-zero-allocation-hashing-0.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gdbm-libs-1.23-1.el9-arch-x86-64-epoch-1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-interpolation-1.26-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.aeonbits.owner-owner-1.0.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-glib2-2.68.4-16.el9-6.2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-sec-dispatcher-2.0-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-freetype-2.10.4-10.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-classworlds-2.6.0-13.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jcip-jcip-annotations-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gawk-5.1.0-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-containers-component-annotations-2.1.1-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-plexus-cipher-2.0-3.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-api-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-jakarta-annotations-1.3.5-15.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-original-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-bouncy-castle-bc-3.1.1-classifier-pkg"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-httpcomponents-client-4.5.13-6.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-sed-4.8-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.pulsar-pulsar-client-admin-api-3.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-httpcomponents-core-4.4.13-8.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-setup-2.13.7-10.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-guava-31.0.1-5.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rpm-4.16.1.3-37.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-harfbuzz-2.7.4-10.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rsync-3.2.5-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-graphite2-1.3.14-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rootfiles-8.1-34.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-grep-3.6-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-rpm-libs-4.16.1.3-37.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-google-guice-4.2.3-10.modulePLUSel9.4.0PLUS21292PLUSf76c4bf2-arch-noarch-modularitylabel-maven-3.8-9040020240209162542-470dcefd"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-readline-8.1-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gpgme-1.15.1-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-redhat-release-9.6-0.1.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-setuptools-wheel-53.0.0-13.el9-6.1-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-gobject-introspection-1.68.0-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-python3-3.9.21-2.el9-6.1-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.18.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.rocksdb-rocksdbjni-8.3.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains-annotations-26.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.18.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-openAPI-1.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-utils-1.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-compress-1.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.18.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.xodus-xodus-environment-1.2.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jsonSchema-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.8.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-web-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.oshi-oshi-core-6.6.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.findbugs-jsr305-3.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-tomcat-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-32.0.1-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-json-3.4.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.18.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.3.1-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.inject-guice-5.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcap-ng-0.8.2-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcap-2.48-9.el9-2-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.protobuf-protobuf-java-3.19.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-10.0.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libblkid-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hivemq-hivemq-extension-sdk-4.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-9.2.18.v20160721"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libbrotli-1.0.9-7.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-2.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-servlet-10.0.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libassuan-2.5.5-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-9.2.18.v20160721"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libattr-2.5.1-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.activation-jakarta.activation-1.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-security-10.0.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libacl-2.3.1-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.activation-javax.activation-1.2.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-server-10.0.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libarchive-3.5.3-5.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hivemq-hivemq-extension-sdk-4.26.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXrender-0.9.10-16.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.hivemq-hivemq-extension-sdk-4.36.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-io-10.0.24"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libXtst-1.2.3-16.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcom-err-1.46.5-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.sun.xml.bind-jaxb-impl-2.3.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.typesafe.netty-netty-reactive-streams-2.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.yahoo.datasketches-memory-0.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libidn2-2.3.0-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jctools-jctools-core-4.0.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libgcrypt-1.10.0-11.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libgpg-error-1.42-5.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.yahoo.datasketches-sketches-core-0.8.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libfontenc-1.1.3-17.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libgcc-11.5.0-5.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.16.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libevent-2.1.12-8.el9-4-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libffi-3.4.2-8.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-configuration-commons-configuration-1.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libcurl-minimal-7.76.1-31.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.14.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libdnf-0.69.0-13.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jetbrains.kotlin-kotlin-stdlib-1.9.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.16"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.bucket4j-bucket4j-jdk17-core-8.15.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.15.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.airlift-aircompressor-0.20"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-github-hivemq-hivemq-community-edition-2025.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-github-hivemq-hivemq-prometheus-extension-4.0.13"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-github-hivemq-mqtt-cli-4.38.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-aopalliance-aopalliance-1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jmx-4.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-jvm-4.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.2.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-core-4.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.14.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.dropwizard.metrics-metrics-logback-4.2.30"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.github.microutils-kotlin-logging-1.4.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-native-io-uring-0.0.21.Final-classifier-linux-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-native-io-uring-0.0.21.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.14.7"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty.incubator-netty-incubator-transport-classes-io-uring-0.0.21.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-haproxy-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-classes-macos-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.107.Final-classifier-osx-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-native-macos-4.1.107.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-windows-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-boringssl-static-2.0.61.Final-classifier-osx-aarch-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.107.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-tcnative-classes-2.0.61.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.107.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.107.Final-classifier-linux-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-common-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.117.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-simpleclient-0.16.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libpng-1.6.37-12.el9-arch-x86-64-epoch-2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-librepo-1.14.5-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libnghttp2-1.43.0-6.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libpeas-1.30.0-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libmodulemd-2.13.0-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libmount-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libksba-1.5.1-7.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libselinux-3.6-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libreport-filesystem-2.15.2-6.el9-arch-noarch"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-librhsm-0.0.3-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libtasn1-4.16.0-9.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libtool-ltdl-2.4.6-46.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsolv-0.7.24-3.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libstdcPLUSPLUS-11.5.0-5.el9-5-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsigsegv-2.13-4.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsmartcols-2.37.4-21.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsemanage-3.6-5.el9-6-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libsepol-3.6-2.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libunistring-0.9.10-15.el9-arch-x86-64"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-mqtt-service-3000.0.3",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-rpm-redhat-libusbx-1.0.26-1.el9-arch-x86-64"
  } ]
}