{
  "SPDXID" : "SPDXRef-DOCUMENT",
  "spdxVersion" : "SPDX-2.2",
  "creationInfo" : {
    "created" : "2026-04-16T16:41:43Z",
    "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ],
    "licenseListVersion" : "3.20"
  },
  "name" : "opcua-device-gateway-v1023.1.4",
  "dataLicense" : "CC0-1.0",
  "hasExtractedLicensingInfos" : [ {
    "licenseId" : "LicenseRef-Cumulocity-Commercial-Supplier-Agreement",
    "extractedText" : "This component has been licensed under a commercial license agreement to Cumulocity GmbH and its affiliates and subsidiaries.",
    "name" : "Cumulocity Commercial Supplier Agreement"
  }, {
    "licenseId" : "LicenseRef-Cumulocity-License",
    "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.",
    "name" : "Cumulocity GmbH License"
  }, {
    "licenseId" : "LicenseRef-Public-Domain",
    "extractedText" : "This product is released into the Public Domain and therefore has no license.",
    "name" : "Public Domain"
  } ],
  "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-opcua-device-gateway-v1023.1.4-e90a2e90-3f2a-4a37-8b45-a85616df206a",
  "packages" : [ {
    "SPDXID" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH",
    "downloadLocation" : "https://www.cumulocity.com",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/cumulocity/opcua-device-gateway@1023.1.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.cumulocity.com",
    "licenseConcluded" : "LicenseRef-Cumulocity-License",
    "licenseDeclared" : "LicenseRef-Cumulocity-License",
    "licenseInfoFromFiles" : [ ],
    "name" : "opcua-device-gateway",
    "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)",
    "versionInfo" : "1023.1.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.nsn.cumulocity.dependencies/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.18",
    "copyrightText" : "Copyright (c) 1999-2010, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.18/logback-classic-1.5.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0yA6fka_SqNsLHYNf7NpSqnoc-RSzmG4PdCeMZbqGA8/logback-classic-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-classic",
    "versionInfo" : "1.5.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.18",
    "copyrightText" : "Copyright (c) 1999-2002, QOS.ch",
    "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.18/logback-core-1.5.18.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eAqpjXnaPojYOADWB-IhGc4KPEI1ubqT-YP8sletSoc/logback-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.18",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/ch.qos.logback/logback-core",
    "versionInfo" : "1.5.18"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.esotericsoftware-kryo-shaded-4.0.2",
    "copyrightText" : "Copyright 2011\nCopyright (c) 2016, Martin Grotzke\nCopyright (c) 2008, Nathan Sweet",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/esotericsoftware/kryo-shaded/4.0.2/kryo-shaded-4.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8Ugk95O-irMcRAA7385juxbWb6XGVXJ8uc7pU8fX9UY/kryo-shaded-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.esotericsoftware/kryo-shaded",
    "versionInfo" : "4.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.esotericsoftware-minlog-1.3.0",
    "copyrightText" : "Copyright (c) 2008, Nathan Sweet",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/esotericsoftware/minlog/1.3.0/minlog-1.3.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.esotericsoftware/minlog@1.3.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/38zKwwRsT7pKdoW-c6SvdZrjfpv8tNaNGPpYIVuG0fI/minlog-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/EsotericSoftware/minlog",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.esotericsoftware/minlog",
    "versionInfo" : "1.3.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.19.2",
    "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.19.2/jackson-annotations-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wkxidXgUle4L7HQLU-Al1X2h0-SbxK6Hi-g6o6Xc10g/jackson-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-annotations",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-annotations",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.19.2",
    "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.19.2/jackson-core-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PLPFosBDCvnJ1_H7fsSH659v_0bfGfOmBsCvKObrVmQ/jackson-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-core",
    "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-core",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.19.2",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.19.2/jackson-databind-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o34HcBY_rZxkbjHlrrhYEv942EjYWYz3xIKL41vFyQE/jackson-databind-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.core/jackson-databind",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.13.4",
    "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.13.4/jackson-datatype-joda-2.13.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.13.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RQROsbh-zmNs_QWtP43R9Junw5378wvxlP_1Z2RHHkM/jackson-datatype-joda-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-datatype-joda",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda",
    "versionInfo" : "2.13.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.19.2",
    "copyrightText" : "Copyright 2013 FasterXML.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.19.2/jackson-datatype-jsr310-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aS0R0jwN3a6A6eKFr_PgPRxNqQ_x42EZ3GyawR_nW-8/jackson-datatype-jsr310-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.10.2.1",
    "copyrightText" : "Copyright (c) 2012 2013 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.10.2.1/jackson-jaxrs-base-2.10.2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.10.2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RSMaYztTrX0k8OD39MUIx7zvM57E-U0FMCtLspS9Pho/jackson-jaxrs-base-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base",
    "versionInfo" : "2.10.2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.19.2",
    "copyrightText" : "Copyright (c) 2012 2013 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.19.2/jackson-jaxrs-json-provider-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NL9PRnAdzUPVqezmgmD7hD6CxsUHmk1HoJqZD95HGJo/jackson-jaxrs-json-provider-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-jaxrs-providers",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jakarta-xmlbind-annotations-2.19.2",
    "copyrightText" : "Copyright (c), Data Geekery GmbH, contact@datageekery.com\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2016 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jakarta-xmlbind-annotations/2.19.2/jackson-module-jakarta-xmlbind-annotations-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CeiXYqR7K-sO35d0-u4lYwMnowJyKTjEMfkahw34u3k/jackson-module-jakarta-xmlbind-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-base",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.19.2",
    "copyrightText" : "Copyright (c), Data Geekery GmbH, contact@datageekery.com\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2016 http://fasterxml.com/ FasterXML",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.19.2/jackson-module-jaxb-annotations-2.19.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.19.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fY43CuY3-d2v8L_e01qqeuatcLJ2ONlVaHajPeYV7kA/jackson-module-jaxb-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/FasterXML/jackson-modules-base",
    "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations",
    "versionInfo" : "2.19.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.fatboyindustrial.gson-jodatime-serialisers-gson-jodatime-serialisers-1.6.0",
    "copyrightText" : "Copyright 2013-2014 Greg Kopff",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/fatboyindustrial/gson-jodatime-serialisers/gson-jodatime-serialisers/1.6.0/gson-jodatime-serialisers-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Ska73IZQJ31t3e5mAoLVfoqfp_ECvblIDyZSLeMqIY8/gson-jodatime-serialisers-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.fatboyindustrial.gson-jodatime-serialisers/gson-jodatime-serialisers@1.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/gkopff/gson-jodatime-serialisers",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.fatboyindustrial.gson-jodatime-serialisers/gson-jodatime-serialisers",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.jnr-jffi-1.3.12",
    "copyrightText" : "Copyright (c) 2007, 2008 Wayne Meissner",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/jnr/jffi/1.3.12/jffi-1.3.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d9TfZ1LnIRziLNGGUcc-mdcTv7OOqtYFrvBruHP0wPo/jffi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.jnr/jffi@1.3.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jnr/jffi",
    "licenseConcluded" : "(LGPL-3.0-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.jnr/jffi",
    "versionInfo" : "1.3.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.jnr-jffi-1.3.12-classifier-native",
    "copyrightText" : "Copyright (c) 2007, 2008 Wayne Meissner",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/jnr/jffi/1.3.12/jffi-1.3.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d9TfZ1LnIRziLNGGUcc-mdcTv7OOqtYFrvBruHP0wPo/jffi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.jnr/jffi@1.3.12?classifier=native",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jnr/jffi",
    "licenseConcluded" : "(LGPL-3.0-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.jnr/jffi",
    "versionInfo" : "1.3.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.jnr-jnr-a64asm-1.0.0",
    "copyrightText" : "Copyright (c) 2018 Ossdev07",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/jnr/jnr-a64asm/1.0.0/jnr-a64asm-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/FiokNpIAbeLuD8UMqsWorOJ6H_kYvozljc1Z8dZMJ6Q/jnr-a64asm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.jnr/jnr-a64asm",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.jnr-jnr-constants-0.10.4",
    "copyrightText" : "NONE",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/jnr/jnr-constants/0.10.4/jnr-constants-0.10.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OU7sGN5jQuFoywy8SDGXQhQNq5l2PilcPaMagyV632w/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.jnr/jnr-constants@0.10.4",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jnr/jnr-constants",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.jnr/jnr-constants",
    "versionInfo" : "0.10.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.jnr-jnr-ffi-2.2.15",
    "copyrightText" : "Copyright 2010 The Miyamoto Team\nCopyright (c) 2006 - Javolution (http://javolution.org/)\nCopyright (c) 2021 Justin Hibbits\nCopyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) 2007 The Guava Authors\nCopyright (c) 2008-2010 Wayne Meissner\n\nAuthors: Bob Lee; Javolution; Justin Hibbits; Oracle and/or its affiliates; The Guava Authors; The Miyamoto Team; Wayne Meissner",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/jnr/jnr-ffi/2.2.15/jnr-ffi-2.2.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/t9U_RIZ5w4r1l-kxqMJ6oC5TLko1BMk-03HNyiI-Mtk/jnr-ffi-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.jnr/jnr-ffi@2.2.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jnr/jnr-ffi",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.jnr/jnr-ffi",
    "versionInfo" : "2.2.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.github.jnr-jnr-x86asm-1.0.2",
    "copyrightText" : "Copyright (c) 2008-2009, Petr Kobalicek <kobalicek.petr@gmail.com>\nCopyright (c) 2010 Wayne Meissner",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/github/jnr/jnr-x86asm/1.0.2/jnr-x86asm-1.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iKZOXSanVUERY6zk4hV8dYhne5VTJ5kPfWpCs-JFdEI/jnr-x86asm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jnr/jnr-x86asm",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.github.jnr/jnr-x86asm",
    "versionInfo" : "1.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1",
    "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.13.1/gson-2.13.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.13.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A_YJEqCXCoORGISt1zFe9oOoA9uSxQNVmTl22V2OiKo/gson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.gson/gson",
    "versionInfo" : "2.13.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8",
    "copyrightText" : "Copyright (c) 2008, Sven Helmberger",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://code.google.com/p/svenson/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.code.svenson/svenson",
    "versionInfo" : "1.5.8"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.38.0",
    "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.38.0/error_prone_annotations-2.38.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bKiooZIM_qZT3oclXjLy8RHmGcdTptuTwmmohYe72rk/error_prone_annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.errorprone/error_prone_annotations",
    "versionInfo" : "2.38.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3",
    "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/failureaccess",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre",
    "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/guava",
    "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/guava",
    "versionInfo" : "33.4.8-jre"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava",
    "copyrightText" : "Copyright (C) 2007 The Guava Authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.guava/listenablefuture",
    "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0",
    "copyrightText" : "Copyright 2012 Google Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/google/j2objc/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/com.google.j2objc/j2objc-annotations",
    "versionInfo" : "3.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0",
    "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-beanutils",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-beanutils/commons-beanutils",
    "versionInfo" : "1.11.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15",
    "copyrightText" : "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2004-2006 Intel Corportation\nCopyright (c) 2008 Alexander Beider & Stephen P. Morse\nCopyright 2002-2020 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ixaigc-CIpOk1obS2CfOggbfsdbSMtK8RxZPzy_A9Gc/commons-codec-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-codec/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-codec/commons-codec",
    "versionInfo" : "1.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2",
    "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/collections/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-collections/commons-collections",
    "versionInfo" : "3.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0",
    "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-io/commons-io@2.20.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NlO8kR0Jl5QXiVtvjDRvRkRZKDcpxujTSIzpdY_P8yI/commons-io-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-io/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-io/commons-io",
    "versionInfo" : "2.20.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6",
    "copyrightText" : "Copyright 2001-2011 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-lang/commons-lang@2.6",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xcmxx2ur1Z8EXrIzeYGnDv6NHJiK8KdtV-k6BBn2-9w/commons-lang-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-lang/commons-lang",
    "versionInfo" : "2.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2",
    "copyrightText" : "Copyright 2003-2014 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.2/commons-logging-1.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEsO0wEV22BXvwXMcYIR6zdrwvnRai3_dErN8ue7Qxs/commons-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://commons.apache.org/proper/commons-logging/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/commons-logging/commons-logging",
    "versionInfo" : "1.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.3",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.15.3/micrometer-commons-1.15.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.15.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WS1WZ5ZjM4GHTKebwUZXJovNIbeZ8PiSpRg7ZWDQvm0/micrometer-commons-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-commons",
    "versionInfo" : "1.15.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.3",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.15.3/micrometer-core-1.15.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.15.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sta_DcFtEd-XYhNBh4l-Vaw51i-mxhlCCPrS12EZPVI/micrometer-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-core",
    "versionInfo" : "1.15.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.3",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.15.3/micrometer-jakarta9-1.15.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4-j0-UpmoBCPneGLHe3seMyb0w-cBwbKIBr2x0S8m6k/micrometer-jakarta9-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.15.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-jakarta9",
    "versionInfo" : "1.15.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.3",
    "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.15.3/micrometer-observation-1.15.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uOs3RTeb3uMKLOO43Xpjg5d3NzhSv8z_i0mau7zUy70/micrometer-observation-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.15.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/micrometer-metrics/micrometer",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.micrometer/micrometer-observation",
    "versionInfo" : "1.15.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vavr-vavr-match-0.10.3",
    "copyrightText" : "Copyright 2014-2020 Vavr, http://vavr.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vavr/vavr-match/0.10.3/vavr-match-0.10.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vavr/vavr-match@0.10.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/olahHteWCNzp73n_k_woIXyAy5a_13JeBmIBohU7_58/vavr-match-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://vavr.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vavr/vavr-match",
    "versionInfo" : "0.10.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-io.vavr-vavr-0.10.3",
    "copyrightText" : "Copyright 2014-2017 Vavr, http://vavr.io",
    "downloadLocation" : "https://repo1.maven.org/maven2/io/vavr/vavr/0.10.3/vavr-0.10.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/HpBGQLIm5ReihJLPmfBHVdjSfPHcRdRtdiVUj6UAFBA/vavr-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/io.vavr/vavr@0.10.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://vavr.io",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/io.vavr/vavr",
    "versionInfo" : "0.10.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1CMH1-0fwpXMh12KbPGj4IeTF6BCjS2_qs-uVluiHQE/jakarta.activation-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/jakartaee/jaf-api",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.activation/jakarta.activation-api",
    "versionInfo" : "2.1.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1",
    "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://projects.eclipse.org/projects/ee4j.ca",
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.annotation/jakarta.annotation-api",
    "versionInfo" : "2.1.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1",
    "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/injection-api",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.inject/jakarta.inject-api",
    "versionInfo" : "2.0.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2",
    "copyrightText" : "Copyright (c) 2019,2020 Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA-vINKxODilOfJFhMZt7frREieCkTHGattM2ePqCWw/sources",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.validation/jakarta.validation-api",
    "versionInfo" : "3.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0",
    "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api",
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api",
    "versionInfo" : "3.1.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.2",
    "copyrightText" : "Copyright (c) 2005, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2023 Oracle and/or its affiliates\nCopyright (c) 2018, 2024 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/xml/bind/jakarta.xml.bind-api/4.0.2/jakarta.xml.bind-api-4.0.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gR_vQ_XB02AVgXg9k_H2k_H-9Ta1oI8alegC4JjYke8/jakarta.xml.bind-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/jakarta.xml.bind/jakarta.xml.bind-api",
    "versionInfo" : "4.0.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.validation-validation-api-2.0.1.Final",
    "copyrightText" : "All content is the property of the respective authors or their employers. For more information regarding authorship of content, please consult the listed source code repository logs.\nSee https://github.com/jakartaee/validation\n\nAuthors: Dhanji R. Prasanna; Emmanuel Bernard; Gavin King; Gerhard Petracek; Guillaume Smet; Gunnar Morling; Hardy Ferentschik; Kevin Pollet; Sebastian Thomschke",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/validation/validation-api/2.0.1.Final/validation-api-2.0.1.Final.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.validation/validation-api@2.0.1.Final",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aIpnxTXaNLLbt28gR2E5XhaTwOe4jqJhEeAmpbaI5U8/validation-api-~.Final-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://beanvalidation.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.validation/validation-api",
    "versionInfo" : "2.0.1.Final"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.2.12",
    "copyrightText" : "Copyright (c) 2004-2011 Oracle\nCopyright (c) 1997-2013 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/javax/xml/bind/jaxb-api/2.2.12/jaxb-api-2.2.12.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sbx9qg2e7osbgzbXQd-nRGjE0wAMWAdFhIfNSJ0EGv4/jaxb-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.12",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jaxb.java.net/",
    "licenseConcluded" : "CDDL-1.1",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/javax.xml.bind/jaxb-api",
    "versionInfo" : "2.2.12"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14",
    "copyrightText" : "Copyright 2001-2005 Stephen Colebourne",
    "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://www.joda.org/joda-time/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/joda-time/joda-time",
    "versionInfo" : "2.10.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.5.0",
    "copyrightText" : "Copyright 2002-2004 Apache Software Foundation\nCopyright 2010 Digital Rapids Corp.\nCopyright 2014 Martin Steiger\nCopyright (c) 2015 Adam Marcionek\nCopyright (c) 2015 Andreas PAX L u00FCck\nCopyright (c) 2010 Daniel Doubrovkine\nCopyright (c) 2010, 2013 Daniel Doubrovkine, Markus Karg\nCopyright (c) 2017 Daniel Widdis\nCopyright (c) 2011 Denis Tulskiy\nCopyright (c) 2014 Dr David H. Akehurst (itemis)\nCopyright (c) 2010 EugineLev\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2015 Goldstein Lyor\nCopyright (c) 2019 Keve Muller\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2015 Michael Freeman\nCopyright (c) 2016 Minoru Sakamoto\nCopyright (c) 2007 Olivier Chafik\nCopyright (c) 2013 Ralf Hamberger, Markus Karg\nCopyright (c) 2014 Reinhard Pointner\nCopyright (c) 2018 Roshan Muralidharan\nCopyright (c) 2010 Timothy Wall\nCopyright (c) 2007, 2013 Timothy Wall, Markus Karg\nCopyright (c) 2012 Tobias Wolf\nCopyright (c) 2018 Vaclav Haisman\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.5.0/jna-platform-5.5.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EdYC0j0jYyVcFZ8IQmugrJ9hSIY6zQAEnqcyy3YZeT0/jna-platform-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna-platform@5.5.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna-platform",
    "versionInfo" : "5.5.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.10.0",
    "copyrightText" : "Copyright 2007 Timothy Wall\nCopyright 2008-2018 Timothy Wall OriginalFilename jnidispatch.dll\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2017 Matthias Blasing\nCopyright (c) 2007 Timothy Wall\nCopyright (c) 2007 Wayne Meissner\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.10.0/jna-5.10.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sGEKceZkkxNpjiQwLda6VSbkGH90yyfXdwbf5Z6HG-4/jna-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.java.dev.jna/jna@5.10.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/java-native-access/jna",
    "licenseConcluded" : "(LGPL-2.1-only AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.java.dev.jna/jna",
    "versionInfo" : "5.10.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.jodah-expiringmap-0.5.9",
    "copyrightText" : "Copyright 2009-2016 Jonathan Halterman",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/jodah/expiringmap/0.5.9/expiringmap-0.5.9.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/H_976r3tF_Frmx8_AjRSKdI9fdFVs1NS67BnecaKeEs/expiringmap-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.jodah/expiringmap@0.5.9",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://github.com/jhalterman/expiringmap/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.jodah/expiringmap",
    "versionInfo" : "0.5.9"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-net.openhft-posix-2.26ea2",
    "copyrightText" : "Copyright 2016 higherfrequencytrading.com",
    "downloadLocation" : "https://repo1.maven.org/maven2/net/openhft/posix/2.26ea2/posix-2.26ea2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4FSa1JGswNf72FxpaCk6qM3EIMb4CiUj8RzmNA4Jbeo/posix-~ea2-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/net.openhft/posix@2.26ea2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/net.openhft/posix",
    "versionInfo" : "2.26ea2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0",
    "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://commons.apache.org/proper/commons-lang/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.commons/commons-lang3",
    "versionInfo" : "3.17.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14",
    "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-client-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpclient",
    "versionInfo" : "4.5.14"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-nio-4.4.4",
    "copyrightText" : "Copyright 2005-2015 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore-nio/4.4.4/httpcore-nio-4.4.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5VU6eFFyRB8HqTWDpORQ28hHud1dtzU8QPOnaQLsMqM/httpcore-nio-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore-nio",
    "versionInfo" : "4.4.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.4",
    "copyrightText" : "Copyright 2005-2015 The Apache Software Foundation\nCopyright (c) 2005 Brian Goetz and Tim Peierls",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.4/httpcore-4.4.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yp1Ex8lHfMcAfKeAjf3YB9eWc9AbkK_k1ColvS6i13Q/httpcore-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hc.apache.org/httpcomponents-core-ga",
    "licenseConcluded" : "(Apache-2.0 AND CC-BY-2.5)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.httpcomponents/httpcore",
    "versionInfo" : "4.4.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-api",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3",
    "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j",
    "versionInfo" : "2.24.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk15to18-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk15to18/1.78/bcpkix-jdk15to18-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WFE2k5FQTHz6eQPdZ3VBBX_zq5lfECsxr7zQOvJBhlY/r1rv78.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk15to18@1.78",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcpkix-jdk15to18",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk15to18-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk15to18/1.78/bcprov-jdk15to18-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WFE2k5FQTHz6eQPdZ3VBBX_zq5lfECsxr7zQOvJBhlY/r1rv78.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcprov-jdk15to18",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk15to18-1.78",
    "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk15to18/1.78/bcutil-jdk15to18-1.78.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WFE2k5FQTHz6eQPdZ3VBBX_zq5lfECsxr7zQOvJBhlY/r1rv78.tar.gz",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk15to18@1.78",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.bouncycastle/bcutil-jdk15to18",
    "versionInfo" : "1.78"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/bayeux-api",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-client",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10",
    "copyrightText" : "Copyright (c) 2008-2016 the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.cometd.java/cometd-java-common",
    "versionInfo" : "3.0.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.25/jetty-util-ajax-12.0.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MlBdgH06sFwFG34mdFmktMfqBaBZVME3axZ1TNJ5fec/jetty-util-ajax-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util-ajax",
    "versionInfo" : "12.0.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25",
    "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ],
    "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.25/jetty-util-12.0.25.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.25",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fyRe10si-Sp2CYEl8KFav6V6nFhhnN6Ii1XfzmRPsYw/jetty-util-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.jetty/jetty-util",
    "versionInfo" : "12.0.25"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.paho-org.eclipse.paho.client.mqttv3-1.2.1",
    "copyrightText" : "Copyright (c) 2017 BMW Car IT GmbH.\nCopyright (c) 2014 IBM Corp.\nCopyright (c) 2009, 2018 IBM Corp and others\n(c) 2008 VeriSign, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/paho/org.eclipse.paho.client.mqttv3/1.2.1/org.eclipse.paho.client.mqttv3-1.2.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3@1.2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oxfFnDW5UFcw1DGQrUjV9wCGtIqLOkUGMw4B5WXZ4G4/org.eclipse.paho.client.mqttv3-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3",
    "versionInfo" : "1.2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6",
    "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-api",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-locator",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6",
    "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/hk2-utils",
    "versionInfo" : "3.0.6"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3",
    "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "EPL-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.hk2/osgi-resource-locator",
    "versionInfo" : "1.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.11/jersey-apache-connector-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SQGAvKCLb_YeIGpdm5DjRAFzHDlA3HXaKH0uoJhOIE/jersey-apache-connector-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.11/jersey-client-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFjkdmYyZIHDOWs70Y5lX-e5ktE_v-nP68lBbE6IWc0/jersey-client-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-client",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.11/jersey-common-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3lGNO9mwu28Bux_-Nu4u-Z-oHnHcwzF4DrIghQIHeY/jersey-common-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.core/jersey-common",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.ext-jersey-entity-filtering-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2013, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Andy Pemberton (pembertona at gmail.com); Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/ext/jersey-entity-filtering/3.1.11/jersey-entity-filtering-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3-IUPpycu2GtI25lUMwbMrnkiOCULPw2R-c3Zb4SV_4/jersey-entity-filtering-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.ext/jersey-entity-filtering",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.11/jersey-hk2-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TebQJATQdwGRUPpC7VduvmcqQ2dc1hXux_4MMMU9sA0/jersey-hk2-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.inject/jersey-hk2",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-json-jackson-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2023 FasterXML, LLC.\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Red Hat, Inc.; Shigeru Chiba; Stepan Kopriva; Tatu Saloranta; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-json-jackson/3.1.11/jersey-media-json-jackson-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@3.1.11",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TOw8JY7nV5mwmIEgUnodUVYjZL47EC4wfdXvOWUrNPY/jersey-media-json-jackson-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-json-jackson",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11",
    "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.11/jersey-media-multipart-3.1.11.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l7JeW-thtrqp3-KRhvIyVi8fupF-HoJOx5jPiVp5Bv8/jersey-media-multipart-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart",
    "versionInfo" : "3.1.11"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://hdrhistogram.github.io/HdrHistogram/",
    "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.hdrhistogram/HdrHistogram",
    "versionInfo" : "2.2.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0",
    "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/TooTallNate/Java-WebSocket",
    "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.java-websocket/Java-WebSocket",
    "versionInfo" : "1.6.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.26.0-GA",
    "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.26.0-GA/javassist-3.26.0-GA.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/07Sb8f3zE6FTrWQcnjadVeSj1bGtrlXxf8_8B_ZK-q0/javassist-~-GA-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.javassist/javassist@3.26.0-GA",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.javassist.org/",
    "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.javassist/javassist",
    "versionInfo" : "3.26.0-GA"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0",
    "copyrightText" : "Copyright 2018-2020 The JSpecify",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://jspecify.org/",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jspecify/jspecify",
    "versionInfo" : "1.0.0"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15",
    "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.jvnet.mimepull/mimepull",
    "versionInfo" : "1.9.15"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3",
    "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://latencyutils.github.io/LatencyUtils/",
    "licenseConcluded" : "CC0-1.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.latencyutils/LatencyUtils",
    "versionInfo" : "2.0.3"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.objenesis-objenesis-2.5.1",
    "copyrightText" : "Copyright 2006-2017 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2003,2004 The Apache Software Foundation\nCopyright 2006-2017 the original author or authors\n\nAuthors: Henri Tremblay; Ian Parkinson (Google Inc.); Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Leonardo Mesquita; Piotr Qertoip Wlodarek; The Apache Software Foundation; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/objenesis/objenesis/2.5.1/objenesis-2.5.1.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.objenesis/objenesis@2.5.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1lEOhQLSMJJ05RLl8cfOnoqp9FphoAyvNnh0JiGLi1k/objenesis-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://objenesis.org",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.objenesis/objenesis",
    "versionInfo" : "2.5.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.2",
    "copyrightText" : "Copyright (c) 2000-2011 INRIA, France Telecom",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/ow2/asm/asm/9.2/asm-9.2.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.ow2.asm/asm@9.2",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vZ8l6OY6AAD1Q4nudzyF_TTPhRa25-7GdIFSpI0eiw4/asm-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://asm.ow2.io/",
    "licenseConcluded" : "BSD-3-Clause",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.ow2.asm/asm",
    "versionInfo" : "9.2"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.rocksdb-rocksdbjni-10.2.1",
    "copyrightText" : "Copyright 2013 Facebook\nCopyright 2013 Facebook, Inc.\nCopyright 2016 Ferry Toth, Exalon Delft BV\nCopyright 2003 Google Inc.\nCopyright 2014 The LevelDB Authors\nCopyright (c) 2015 Anton Blanchard <anton@au.ibm.com> , IBM\nCopyright (c) 2018, Arm Limited and affiliates\nCopyright (c) 2012 Facebook\nCopyright (c) 2013, Facebook, Inc.\nCopyright (c) Facebook, Inc. and its affiliates\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\nCopyright (c) 2019 Intel Corporation\nCopyright (c) 2015, 2017 International Business Machines Corp.\nCopyright (c) 2022 Meta Platforms, Inc.\nCopyright (c) Meta Platforms, Inc. and affiliates\nCopyright (c) 2007,2008,2009,2010,2011,2012,2013,2014 Ole Tange and Free Software Foundation, Inc\nCopyright (c) 2006, 2015, Percona and/or its affiliates\nCopyright (c) 2015, Red Hat, Inc.\nCopyright (c) 2011 The LevelDB Authors\nCopyright (c) 2014, Vlad Balan (vlad.gm@gmail.com)\nCopyright (c) 2012-2016, Yann Collet\nCopyright (c) 2011-present, Facebook, Inc.\nCopyright (c) 2019-present, Yann Collet\nCopyright (c) 2011 the original author or authors\nPortions Copyright (c) 2011-present, Facebook, Inc.\ncopyrighted by the Free Software Foundation\n(c) 2004-present, Facebook\n(c) 2004-present, Facebook Inc.\n\nAuthors: Anton Blanchard , IBM; Arm Limited and affiliates; Dave Watson <davejwatson@fb.com>; Deon Nicholas (dnicholas@fb.com); Facebook; Facebook Database Engineering Team; Facebook Inc.; Facebook, Inc.; Facebook, Inc. and its affiliates; Ferry Toth, Exalon Delft BV; Free Software Foundation, Inc.; Google Inc.; Google Test; Intel Corporation; International Business Machines Corp.; Jeffrey Dean <jeff@google.com> Sanjay Ghemawat <sanjay@google.com>; Meta Platforms, Inc.; Meta Platforms, Inc. and affiliates; O. Tange; Ole Tange and Free Software Foundation, Inc; Percona and/or its affiliates; Peter C. Dillinger; Red Hat, Inc.; The LevelDB Authors; Vlad Balan; Yann Collet; an OptimisticTransaction; the Facebook Database Engineering Team; the Free Software Foundation; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/rocksdb/rocksdbjni-jmh/1.0-SNAPSHOT/rocksdbjni-jmh-1.0-SNAPSHOT.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.rocksdb/rocksdbjni@10.2.1",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LBh4GSNMzZVLt2j2pIWAockHEoejvbYfpgsJoE4A_1s/v~.zip",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://rocksdb.org/",
    "licenseConcluded" : "(Zlib AND CC-BY-4.0 AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND LicenseRef-Public-Domain AND GPL-3.0-or-later WITH GCC-exception-3.1)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.rocksdb/rocksdbjni",
    "versionInfo" : "10.2.1"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17",
    "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "(Apache-2.0 AND MIT)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jcl-over-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fQc2eKipjY0kpA5RY8tMSF1CmGwn1uqL1jZo391dDj4/jul-to-slf4j-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/jul-to-slf4j",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17",
    "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "http://www.slf4j.org",
    "licenseConcluded" : "MIT",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.slf4j/slf4j-api",
    "versionInfo" : "2.0.17"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Wick Dynex; Yanming Zhou; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.5.5/spring-boot-actuator-autoconfigure-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jPFWsZiQXkrcl3xITk8-zi3R_0LcSlO1PeexMKs6boA/spring-boot-actuator-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.5.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Tommy Karlsson; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Xiong Tang; Young Jae; Yulin Qin; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.5.5/spring-boot-actuator-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QsxBqMclfXv8ccrgXIfmiPev4LYhljMWGgbodnbAkWI/spring-boot-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.5.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-actuator",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmitry Sulman; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Florian Lemaire; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Pedro Xavier Leite Cavadas; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.5.5/spring-boot-autoconfigure-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qUxv9VNEVfTcwfYuXEAs6QqkuJdL9xPisFNvAzcbtiU/spring-boot-autoconfigure-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-autoconfigure",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-actuator/3.5.5/spring-boot-starter-actuator-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wIZBda_rKCcShADZ6ljowgOlZRZpQuJUO8JSlssDxQA/spring-boot-starter-actuator-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.5.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-actuator",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter-logging/3.5.5/spring-boot-starter-logging-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uynRoQVW4hRq1_mDU1S6kTEkv6sylWw1ZTi3SJVKVA/spring-boot-starter-logging-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    }, {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.5",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter-logging",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-starter/3.5.5/spring-boot-starter-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-starter@3.5.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RzDiprMtF9xydd0l6TiGgJAV4MgcwU1tViqZyGT1pxI/spring-boot-starter-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot-starter",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.5",
    "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andrey Litvitski; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daeho Kwon; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.5.5/spring-boot-3.5.5.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.5.5",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OD5l40-5thpwSMrUZFOQdMgj6SyytF-1hnQd5uTik0s/spring-boot-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://spring.io/projects/spring-boot",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework.boot/spring-boot",
    "versionInfo" : "3.5.5"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.10",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.10/spring-aop-6.2.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mPOzxUcBBres1UG3DKWz_E7PrJ8BJVYYCfuamkPYwDo/spring-aop-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-aop",
    "versionInfo" : "6.2.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.10",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. </b> Therefore; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.10/spring-beans-6.2.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ullya-QAxYzpuSha5LJ6-l9jDfVAH8fTjn-8yKZavf8/spring-beans-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-beans",
    "versionInfo" : "6.2.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.10",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.10/spring-context-6.2.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/blXKopkYSOZLTgdWfFLO7veKhcHfbtz9iweuZnUBiE0/spring-context-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-context",
    "versionInfo" : "6.2.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.10",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.10/spring-core-6.2.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YcfXoNUYQKGRKqvtQRBhH3IOgGB9dBO97yQB8tPP8yA/spring-core-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-core",
    "versionInfo" : "6.2.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.10",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.10/spring-expression-6.2.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mIadfMD0AEuQKlaY9mwMYkeaCTpmttrZUVoBVFKNQ24/spring-expression-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-expression",
    "versionInfo" : "6.2.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.10",
    "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium <https://www.ow2.org/>\nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.10/spring-jcl-6.2.10.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.10",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ml9VZoWDpmofVMbIJZnhALyc1uzZlZ-EFG5r53eX9sc/spring-jcl-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://github.com/spring-projects/spring-framework",
    "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.springframework/spring-jcl",
    "versionInfo" : "6.2.10"
  }, {
    "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4",
    "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML",
    "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.4",
      "referenceType" : "purl"
    }, {
      "referenceCategory" : "OTHER",
      "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO38iEj-NCzAqI21sz6Ktwg7iVuQ5IRLxSB8qyAgRHA/snakeyaml-~-sources.jar",
      "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml",
    "licenseConcluded" : "Apache-2.0",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "maven/org.yaml/snakeyaml",
    "versionInfo" : "2.4"
  }, {
    "SPDXID" : "SPDXRef-pkg-generic-com.prosysopc.ua-prosys-opc-ua-java-sdk-client-4.11.0-41",
    "copyrightText" : "Prosys OPC UA Java SDK is copyright (c) by Prosys OPC Ltd, all rights reserved. This software and accompanying \ndocumentation are protected by international copyright law and also by International Treaty provisions. Any use of \nthis software in violation of copyright law or the terms of this agreement will be prosecuted to the best of our \nability. You acknowledge that all rights with respect to Prosys OPC UA Java SDK, including but not limited to, all \nof Prosys OPC Ltd's and/or its licensors' intellectual property rights therein, are and shall be, the exclusive \nproperty of Prosys OPC Ltd and/or its licensors. Nothing herein shall give you any right, title or interest in or \nto Prosys OPC UA Java SDK or any portion thereof. You will receive no licenses except as expressly granted in this \nAgreement. Prosys OPC Ltd does not grant you any expressed or implied rights to or under any patent, copyright, \ntrademark, or trade secret of Prosys OPC Ltd. You may not reverse engineer, decompile or disassemble the software.",
    "downloadLocation" : "NOASSERTION",
    "externalRefs" : [ {
      "referenceCategory" : "PACKAGE-MANAGER",
      "referenceLocator" : "pkg:generic/com.prosysopc.ua/prosys-opc-ua-java-sdk-client@4.11.0-41",
      "referenceType" : "purl"
    } ],
    "filesAnalyzed" : false,
    "homepage" : "https://prosysopc.com/",
    "licenseConcluded" : "LicenseRef-Cumulocity-Commercial-Supplier-Agreement",
    "licenseDeclared" : "NOASSERTION",
    "licenseInfoFromFiles" : [ ],
    "name" : "generic/com.prosysopc.ua/prosys-opc-ua-java-sdk-client",
    "supplier" : "Organization: ProSys OPC Ltd",
    "versionInfo" : "4.11.0-41"
  } ],
  "relationships" : [ {
    "spdxElementId" : "SPDXRef-DOCUMENT",
    "relationshipType" : "DESCRIBES",
    "relatedSpdxElement" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.prosysopc.ua-prosys-opc-ua-java-sdk-client-4.11.0-41"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-actuator-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.10.2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-logging-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-starter-3.5.5"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fatboyindustrial.gson-jodatime-serialisers-gson-jodatime-serialisers-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.jnr-jffi-1.3.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jakarta-xmlbind-annotations-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.jnr-jnr-constants-0.10.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.jnr-jffi-1.3.12-classifier-native"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.jnr-jnr-a64asm-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.jnr-jnr-ffi-2.2.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.jnr-jnr-x86asm-1.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.38.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-lang-commons-lang-2.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vavr-vavr-match-0.10.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-io.vavr-vavr-0.10.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.xml.bind-jaxb-api-2.2.12"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.xml.bind-jakarta.xml.bind-api-4.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-javax.validation-validation-api-2.0.1.Final"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.19.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.13.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-5.10.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.jodah-expiringmap-0.5.9"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.18"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.esotericsoftware-kryo-shaded-4.0.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.java.dev.jna-jna-platform-5.5.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-com.esotericsoftware-minlog-1.3.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-nio-4.4.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-net.openhft-posix-2.26ea2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.4"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk15to18-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk15to18-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk15to18-1.78"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.paho-org.eclipse.paho.client.mqttv3-1.2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.ext-jersey-entity-filtering-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-json-jackson-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.26.0-GA"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.ow2.asm-asm-9.2"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.rocksdb-rocksdbjni-10.2.1"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3"
  }, {
    "spdxElementId" : "SPDXRef-cumulocity-opcua-device-gateway-1023.1.4",
    "relationshipType" : "CONTAINS",
    "relatedSpdxElement" : "SPDXRef-pkg-maven-org.objenesis-objenesis-2.5.1"
  } ]
}