{ "SPDXID" : "SPDXRef-DOCUMENT", "spdxVersion" : "SPDX-2.2", "creationInfo" : { "created" : "2026-03-30T13:57:12Z", "creators" : [ "Organization: Cumulocity GmbH (info@cumulocity.com)" ], "licenseListVersion" : "3.20" }, "name" : "sigfox-agent-v4.0.0", "dataLicense" : "CC0-1.0", "hasExtractedLicensingInfos" : [ { "licenseId" : "LicenseRef-Cumulocity-License", "extractedText" : "See https://cumulocity.com/docs/legal-notices for legal notices.", "name" : "Cumulocity GmbH License" }, { "licenseId" : "LicenseRef-GPL-2.0-with-oracle-classpath-exception", "extractedText" : "The GNU General Public License (GPL)\n\nVersion 2, June 1991\n\nCopyright (C) 1989, 1991 Free Software Foundation, Inc.\n59 Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nEveryone is permitted to copy and distribute verbatim copies of this license\ndocument, but changing it is not allowed.\n\nPreamble\n\nThe licenses for most software are designed to take away your freedom to share\nand change it. By contrast, the GNU General Public License is intended to\nguarantee your freedom to share and change free software--to make sure the\nsoftware is free for all its users. This General Public License applies to\nmost of the Free Software Foundation's software and to any other program whose\nauthors commit to using it. (Some other Free Software Foundation software is\ncovered by the GNU Library General Public License instead.) You can apply it to\nyour programs, too.\n\nWhen we speak of free software, we are referring to freedom, not price. Our\nGeneral Public Licenses are designed to make sure that you have the freedom to\ndistribute copies of free software (and charge for this service if you wish),\nthat you receive source code or can get it if you want it, that you can change\nthe software or use pieces of it in new free programs; and that you know you\ncan do these things.\n\nTo protect your rights, we need to make restrictions that forbid anyone to deny\nyou these rights or to ask you to surrender the rights. These restrictions\ntranslate to certain responsibilities for you if you distribute copies of the\nsoftware, or if you modify it.\n\nFor example, if you distribute copies of such a program, whether gratis or for\na fee, you must give the recipients all the rights that you have. You must\nmake sure that they, too, receive or can get the source code. And you must\nshow them these terms so they know their rights.\n\nWe protect your rights with two steps: (1) copyright the software, and (2)\noffer you this license which gives you legal permission to copy, distribute\nand/or modify the software.\n\nAlso, for each author's protection and ours, we want to make certain that\neveryone understands that there is no warranty for this free software. If the\nsoftware is modified by someone else and passed on, we want its recipients to\nknow that what they have is not the original, so that any problems introduced\nby others will not reflect on the original authors' reputations.\n\nFinally, any free program is threatened constantly by software patents. We\nwish to avoid the danger that redistributors of a free program will\nindividually obtain patent licenses, in effect making the program proprietary.\nTo prevent this, we have made it clear that any patent must be licensed for\neveryone's free use or not licensed at all.\n\nThe precise terms and conditions for copying, distribution and modification\nfollow.\n\nTERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\n\n0. This License applies to any program or other work which contains a notice\nplaced by the copyright holder saying it may be distributed under the terms of\nthis General Public License. The \"Program\", below, refers to any such program\nor work, and a \"work based on the Program\" means either the Program or any\nderivative work under copyright law: that is to say, a work containing the\nProgram or a portion of it, either verbatim or with modifications and/or\ntranslated into another language. (Hereinafter, translation is included\nwithout limitation in the term \"modification\".) Each licensee is addressed as\n\"you\".\n\nActivities other than copying, distribution and modification are not covered by\nthis License; they are outside its scope. The act of running the Program is\nnot restricted, and the output from the Program is covered only if its contents\nconstitute a work based on the Program (independent of having been made by\nrunning the Program). Whether that is true depends on what the Program does.\n\n1. You may copy and distribute verbatim copies of the Program's source code as\nyou receive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice and\ndisclaimer of warranty; keep intact all the notices that refer to this License\nand to the absence of any warranty; and give any other recipients of the\nProgram a copy of this License along with the Program.\n\nYou may charge a fee for the physical act of transferring a copy, and you may\nat your option offer warranty protection in exchange for a fee.\n\n2. You may modify your copy or copies of the Program or any portion of it, thus\nforming a work based on the Program, and copy and distribute such modifications\nor work under the terms of Section 1 above, provided that you also meet all of\nthese conditions:\n\n a) You must cause the modified files to carry prominent notices stating\n that you changed the files and the date of any change.\n\n b) You must cause any work that you distribute or publish, that in whole or\n in part contains or is derived from the Program or any part thereof, to be\n licensed as a whole at no charge to all third parties under the terms of\n this License.\n\n c) If the modified program normally reads commands interactively when run,\n you must cause it, when started running for such interactive use in the\n most ordinary way, to print or display an announcement including an\n appropriate copyright notice and a notice that there is no warranty (or\n else, saying that you provide a warranty) and that users may redistribute\n the program under these conditions, and telling the user how to view a copy\n of this License. (Exception: if the Program itself is interactive but does\n not normally print such an announcement, your work based on the Program is\n not required to print an announcement.)\n\nThese requirements apply to the modified work as a whole. If identifiable\nsections of that work are not derived from the Program, and can be reasonably\nconsidered independent and separate works in themselves, then this License, and\nits terms, do not apply to those sections when you distribute them as separate\nworks. But when you distribute the same sections as part of a whole which is a\nwork based on the Program, the distribution of the whole must be on the terms\nof this License, whose permissions for other licensees extend to the entire\nwhole, and thus to each and every part regardless of who wrote it.\n\nThus, it is not the intent of this section to claim rights or contest your\nrights to work written entirely by you; rather, the intent is to exercise the\nright to control the distribution of derivative or collective works based on\nthe Program.\n\nIn addition, mere aggregation of another work not based on the Program with the\nProgram (or with a work based on the Program) on a volume of a storage or\ndistribution medium does not bring the other work under the scope of this\nLicense.\n\n3. You may copy and distribute the Program (or a work based on it, under\nSection 2) in object code or executable form under the terms of Sections 1 and\n2 above provided that you also do one of the following:\n\n a) Accompany it with the complete corresponding machine-readable source\n code, which must be distributed under the terms of Sections 1 and 2 above\n on a medium customarily used for software interchange; or,\n\n b) Accompany it with a written offer, valid for at least three years, to\n give any third party, for a charge no more than your cost of physically\n performing source distribution, a complete machine-readable copy of the\n corresponding source code, to be distributed under the terms of Sections 1\n and 2 above on a medium customarily used for software interchange; or,\n\n c) Accompany it with the information you received as to the offer to\n distribute corresponding source code. (This alternative is allowed only\n for noncommercial distribution and only if you received the program in\n object code or executable form with such an offer, in accord with\n Subsection b above.)\n\nThe source code for a work means the preferred form of the work for making\nmodifications to it. For an executable work, complete source code means all\nthe source code for all modules it contains, plus any associated interface\ndefinition files, plus the scripts used to control compilation and installation\nof the executable. However, as a special exception, the source code\ndistributed need not include anything that is normally distributed (in either\nsource or binary form) with the major components (compiler, kernel, and so on)\nof the operating system on which the executable runs, unless that component\nitself accompanies the executable.\n\nIf distribution of executable or object code is made by offering access to copy\nfrom a designated place, then offering equivalent access to copy the source\ncode from the same place counts as distribution of the source code, even though\nthird parties are not compelled to copy the source along with the object code.\n\n4. You may not copy, modify, sublicense, or distribute the Program except as\nexpressly provided under this License. Any attempt otherwise to copy, modify,\nsublicense or distribute the Program is void, and will automatically terminate\nyour rights under this License. However, parties who have received copies, or\nrights, from you under this License will not have their licenses terminated so\nlong as such parties remain in full compliance.\n\n5. You are not required to accept this License, since you have not signed it.\nHowever, nothing else grants you permission to modify or distribute the Program\nor its derivative works. These actions are prohibited by law if you do not\naccept this License. Therefore, by modifying or distributing the Program (or\nany work based on the Program), you indicate your acceptance of this License to\ndo so, and all its terms and conditions for copying, distributing or modifying\nthe Program or works based on it.\n\n6. Each time you redistribute the Program (or any work based on the Program),\nthe recipient automatically receives a license from the original licensor to\ncopy, distribute or modify the Program subject to these terms and conditions.\nYou may not impose any further restrictions on the recipients' exercise of the\nrights granted herein. You are not responsible for enforcing compliance by\nthird parties to this License.\n\n7. If, as a consequence of a court judgment or allegation of patent\ninfringement or for any other reason (not limited to patent issues), conditions\nare imposed on you (whether by court order, agreement or otherwise) that\ncontradict the conditions of this License, they do not excuse you from the\nconditions of this License. If you cannot distribute so as to satisfy\nsimultaneously your obligations under this License and any other pertinent\nobligations, then as a consequence you may not distribute the Program at all.\nFor example, if a patent license would not permit royalty-free redistribution\nof the Program by all those who receive copies directly or indirectly through\nyou, then the only way you could satisfy both it and this License would be to\nrefrain entirely from distribution of the Program.\n\nIf any portion of this section is held invalid or unenforceable under any\nparticular circumstance, the balance of the section is intended to apply and\nthe section as a whole is intended to apply in other circumstances.\n\nIt is not the purpose of this section to induce you to infringe any patents or\nother property right claims or to contest validity of any such claims; this\nsection has the sole purpose of protecting the integrity of the free software\ndistribution system, which is implemented by public license practices. Many\npeople have made generous contributions to the wide range of software\ndistributed through that system in reliance on consistent application of that\nsystem; it is up to the author/donor to decide if he or she is willing to\ndistribute software through any other system and a licensee cannot impose that\nchoice.\n\nThis section is intended to make thoroughly clear what is believed to be a\nconsequence of the rest of this License.\n\n8. If the distribution and/or use of the Program is restricted in certain\ncountries either by patents or by copyrighted interfaces, the original\ncopyright holder who places the Program under this License may add an explicit\ngeographical distribution limitation excluding those countries, so that\ndistribution is permitted only in or among countries not thus excluded. In\nsuch case, this License incorporates the limitation as if written in the body\nof this License.\n\n9. The Free Software Foundation may publish revised and/or new versions of the\nGeneral Public License from time to time. Such new versions will be similar in\nspirit to the present version, but may differ in detail to address new problems\nor concerns.\n\nEach version is given a distinguishing version number. If the Program\nspecifies a version number of this License which applies to it and \"any later\nversion\", you have the option of following the terms and conditions either of\nthat version or of any later version published by the Free Software Foundation.\nIf the Program does not specify a version number of this License, you may\nchoose any version ever published by the Free Software Foundation.\n\n10. If you wish to incorporate parts of the Program into other free programs\nwhose distribution conditions are different, write to the author to ask for\npermission. For software which is copyrighted by the Free Software Foundation,\nwrite to the Free Software Foundation; we sometimes make exceptions for this.\nOur decision will be guided by the two goals of preserving the free status of\nall derivatives of our free software and of promoting the sharing and reuse of\nsoftware generally.\n\nNO WARRANTY\n\n11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR\nTHE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE\nSTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE\nPROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,\nINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND\nPERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE,\nYOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL\nANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE\nPROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR\nINABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA\nBEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A\nFAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER\nOR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nEND OF TERMS AND CONDITIONS\n\nHow to Apply These Terms to Your New Programs\n\nIf you develop a new program, and you want it to be of the greatest possible\nuse to the public, the best way to achieve this is to make it free software\nwhich everyone can redistribute and change under these terms.\n\nTo do so, attach the following notices to the program. It is safest to attach\nthem to the start of each source file to most effectively convey the exclusion\nof warranty; and each file should have at least the \"copyright\" line and a\npointer to where the full notice is found.\n\n One line to give the program's name and a brief idea of what it does.\n\n Copyright (C) \n\n This program is free software; you can redistribute it and/or modify it\n under the terms of the GNU General Public License as published by the Free\n Software Foundation; either version 2 of the License, or (at your option)\n any later version.\n\n This program is distributed in the hope that it will be useful, but WITHOUT\n ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\n FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for\n more details.\n\n You should have received a copy of the GNU General Public License along\n with this program; if not, write to the Free Software Foundation, Inc., 59\n Temple Place, Suite 330, Boston, MA 02111-1307 USA\n\nAlso add information on how to contact you by electronic and paper mail.\n\nIf the program is interactive, make it output a short notice like this when it\nstarts in an interactive mode:\n\n Gnomovision version 69, Copyright (C) year name of author Gnomovision comes\n with ABSOLUTELY NO WARRANTY; for details type 'show w'. This is free\n software, and you are welcome to redistribute it under certain conditions;\n type 'show c' for details.\n\nThe hypothetical commands 'show w' and 'show c' should show the appropriate\nparts of the General Public License. Of course, the commands you use may be\ncalled something other than 'show w' and 'show c'; they could even be\nmouse-clicks or menu items--whatever suits your program.\n\nYou should also get your employer (if you work as a programmer) or your school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary. Here\nis a sample; alter the names:\n\n Yoyodyne, Inc., hereby disclaims all copyright interest in the program\n 'Gnomovision' (which makes passes at compilers) written by James Hacker.\n\n signature of Ty Coon, 1 April 1989\n\n Ty Coon, President of Vice\n\nThis General Public License does not permit incorporating your program into\nproprietary programs. If your program is a subroutine library, you may\nconsider it more useful to permit linking proprietary applications with the\nlibrary. If this is what you want to do, use the GNU Library General Public\nLicense instead of this License.\n\n\n\"CLASSPATH\" EXCEPTION TO THE GPL\n\nCertain source files distributed by Oracle America and/or its affiliates are\nsubject to the following clarification and special exception to the GPL, but\nonly where Oracle has expressly included in the particular source file's header\nthe words \"Oracle designates this particular file as subject to the \"Classpath\"\nexception as provided by Oracle in the LICENSE file that accompanied this code.\"\n\n Linking this library statically or dynamically with other modules is making\n a combined work based on this library. Thus, the terms and conditions of\n the GNU General Public License cover the whole combination.\n\n As a special exception, the copyright holders of this library give you\n permission to link this library with independent modules to produce an\n executable, regardless of the license terms of these independent modules,\n and to copy and distribute the resulting executable under terms of your\n choice, provided that you also meet, for each linked independent module,\n the terms and conditions of the license of that module. An independent\n module is a module which is not derived from or based on this library. If\n you modify this library, you may extend this exception to your version of\n the library, but you are not obligated to do so. If you do not wish to do\n so, delete this exception statement from your version.\n\n\n\n\nADDITIONAL INFORMATION ABOUT LICENSING\n\nCertain files distributed by Oracle America, Inc. and/or its affiliates are\nsubject to the following clarification and special exception to the GPLv2,\nbased on the GNU Project exception for its Classpath libraries, known as the\nGNU Classpath Exception.\n\nNote that Oracle includes multiple, independent programs in this software\npackage. Some of those programs are provided under licenses deemed\nincompatible with the GPLv2 by the Free Software Foundation and others.\nFor example, the package includes programs licensed under the Apache\nLicense, Version 2.0 and may include FreeType. Such programs are licensed\nto you under their original licenses.\n\nOracle facilitates your further distribution of this package by adding the\nClasspath Exception to the necessary parts of its GPLv2 code, which permits\nyou to use that code in combination with other independent modules not\nlicensed under the GPLv2. However, note that this would not permit you to\ncommingle code under an incompatible license with Oracle's GPLv2 licensed\ncode by, for example, cutting and pasting such code into a file also\ncontaining Oracle's GPLv2 licensed code and then distributing the result.\n\nAdditionally, if you were to remove the Classpath Exception from any of the\nfiles to which it applies and distribute the result, you would likely be\nrequired to license some or all of the other code in that distribution under\nthe GPLv2 as well, and since the GPLv2 is incompatible with the license terms\nof some items included in the distribution by Oracle, removing the Classpath\nException could therefore effectively compromise your ability to further\ndistribute the package.\n\nFailing to distribute notices associated with some files may also create\nunexpected legal consequences.\n\nProceed with caution and we recommend that you obtain the advice of a lawyer\nskilled in open source matters before removing the Classpath Exception or\nmaking modifications to this package which may subsequently be redistributed\nand/or involve the use of third party software.", "name" : "GPL 2.0 with oracle classpath exception" }, { "licenseId" : "LicenseRef-Public-Domain", "extractedText" : "This product is released into the Public Domain and therefore has no license.", "name" : "Public Domain" }, { "licenseId" : "LicenseRef-scancode-unicode", "extractedText" : "UNICODE, INC. LICENSE AGREEMENT - DATA FILES AND SOFTWARE\n\nUnicode Data Files include all data files under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/ . Unicode Software includes any source\ncode published in the Unicode Standard or under the directories\nhttp://www.unicode.org/Public/, http://www.unicode.org/reports/, and\nhttp://www.unicode.org/cldr/data/.\n\nNOTICE TO USER: Carefully read the following legal agreement. BY\nDOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING UNICODE INC.'S DATA\nFILES (\"DATA FILES\"), AND/OR SOFTWARE (\"SOFTWARE\"), YOU UNEQUIVOCALLY\nACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE TERMS AND CONDITIONS OF THIS\nAGREEMENT. IF YOU DO NOT AGREE, DO NOT DOWNLOAD, INSTALL, COPY, DISTRIBUTE\nOR USE THE DATA FILES OR SOFTWARE.\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright © Unicode, Inc. All rights reserved. Distributed under\nthe Terms of Use in http://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of the Unicode data files and any associated documentation (the\n\"Data Files\") or Unicode software and any associated documentation (the\n\"Software\") to deal in the Data Files or Software without restriction,\nincluding without limitation the rights to use, copy, modify, merge,\npublish, distribute, and/or sell copies of the Data Files or Software,\nand to permit persons to whom the Data Files or Software are furnished\nto do so, provided that\n\n(a) the above copyright notice(s) and this permission notice appear with\nall copies of the Data Files or Software,\n\n(b) both the above copyright notice(s) and this permission notice appear\nin associated documentation, and\n\n(c) there is clear notice in each modified Data File or in the Software\nas well as in the documentation associated with the Data File(s) or\nSoftware that the data or software has been modified.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR HOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR\nANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder shall\nnot be used in advertising or otherwise to promote the sale, use or\nother dealings in these Data Files or Software without prior written\nauthorization of the copyright holder.\n\nUnicode and the Unicode logo are trademarks of Unicode, Inc., and may be\nregistered in some jurisdictions. All other trademarks and registered\ntrademarks mentioned herein are the property of their respective owners.", "name" : "LicenseRef-scancode-unicode" } ], "documentNamespace" : "https://cumulocity.com/spdx-namespace/SPDXRef-sigfox-agent-v4.0.0-89801868-ff64-4822-bea5-79a4bd6190ec", "packages" : [ { "SPDXID" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "copyrightText" : "Copyright (c) 2026 Cumulocity GmbH", "downloadLocation" : "https://www.cumulocity.com", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:generic/cumulocity/sigfox-agent@4.0.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.cumulocity.com", "licenseConcluded" : "LicenseRef-Cumulocity-License", "licenseDeclared" : "LicenseRef-Cumulocity-License", "licenseInfoFromFiles" : [ ], "name" : "sigfox-agent", "supplier" : "Organization: Cumulocity GmbH (info@cumulocity.com)", "versionInfo" : "4.0.0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-acl-libs-2.3.2-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright (c) 2007 Andreas Gruenbacher \nCopyright (c) 2000, 2002 Andreas Gruenbacher \nCopyright (c) 1999, 2000 Andreas Gruenbacher \nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2019 Debian French l10n team Sylvain Archenault , 2005. Jean-Philippe MENGUAL , 2019\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2000 Free Software Foundation, Inc. Andreas Grunbacher , 2000\nCopyright (c) 2007 Free Software Foundation, Inc. Antonio Trueba , 2007\nCopyright (c) 2006 Free Software Foundation, Inc. Daniel Nylander , 2006\nCopyright (c) 2004 Free Software Foundation, Inc. Jakub Bogusz , 2004-2022\nCopyright (c) 2001-2002 Silicon Graphics, Inc.\nCopyright (c) 1995-2000 Ulrich Drepper \nCopyright (c) 1994 X Consortium\nCopyright (c) 1999 by Andreas Gruenbacher \n(c) 1999 Andreas Gruenbacher, \n(c) 2000 Andreas Gruenbacher, \ncopyrighted by the Free Software Foundation\n\nAuthors: Alexandre Oliva ; An Andreas Gruenbacher Aq andreas.gruenbacher@gmail.com; An Robert N; Andreas Gruenbacher; Bootstrap Authors; Brandon Philips ; Bruno Haible; Bruno Haible ; Charles Bertsch ; Debian French l10n team Sylvain Archenault , Jean-Philippe MENGUAL; Fran,cois Pinard; Free Software Foundation, Inc.; Free Software Foundation, Inc. Andreas Grunbacher; Free Software Foundation, Inc. Antonio Trueba; Free Software Foundation, Inc. Daniel Nylander; Free Software Foundation, Inc. Jakub Bogusz; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Peter Rosin ; Scott James Remnant; Silicon Graphics, Inc.; Tom Tromey ; Ulrich Drepper; Ulrich Drepper ; Ulrich Drepper , Bruno Haible ; Ulrich Drepper , Bruno Haible , Macro; X Consortium; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/acl-libs/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/krsO8F1jr0i7XFxl12Kbqo-YtcsekI_MceVp-O_sXvQ/acl-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/acl-libs@2.3.2-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://savannah.nongnu.org/projects/acl", "licenseConcluded" : "(LGPL-2.1-or-later AND GPL-2.0-or-later)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/acl-libs", "versionInfo" : "2.3.2-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-data-3.7.1-r8-arch-x86-64-distro-3.23.3", "copyrightText" : "NONE", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-baselayout-data/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UhpVskS3Comz-A9zXpW-wjW0yrbzd2pJQGQ3h5jIcuI/alpine-baselayout-~-8.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/alpine-baselayout-data@3.7.1-r8?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/alpine-baselayout-data", "versionInfo" : "3.7.1-r8" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-3.7.1-r8-arch-x86-64-distro-3.23.3", "copyrightText" : "NONE", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-baselayout/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nJHI7tb9O9ZOKgzdb5hfF_CLjfZ02fvlGwmF5AVquTs/alpine-baselayout-~-8.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/alpine-baselayout@3.7.1-r8?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/alpine-baselayout", "versionInfo" : "3.7.1-r8" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-keys-2.6-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "NONE", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-keys/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A6VE3s8VGkSey2JXXYBaPQb6BqB_CFWmciTZfHjhJPs/alpine-keys-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://alpinelinux.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/alpine-keys", "versionInfo" : "2.6-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-alpine-release-3.23.3-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "NONE", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alpine-release/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/alpine-release@3.23.3-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/myEFpwZ0d_TeJw-m05oY0X-3zkkO6DKaagrVN0ya3wo/alpine-base-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://alpinelinux.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/alpine-release", "versionInfo" : "3.23.3-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-alsa-lib-1.2.14-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2024 Free Software Foundation, Inc.\nCopyright 1992 by Stichting Mathematisch Centrum, Amsterdam\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2006-2008 Diego Petteno \nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2014-2015 Intel Corporation\nCopyright (c) 2021 Jaroslav Kysela\nCopyright (c) 2022 Jaroslav Kysela \nCopyright (c) 2010 Red Hat Inc.\nCopyright (c) 2000-2002 Richard W.E. Furse, Paul Barton-Davis, Stefan Westerfeld\nCopyright (c) 2008-2010 SlimLogic Ltd\nCopyright (c) 2005 Takashi Iwai \nCopyright (c) 1998,99,2000 Takashi Iwai , Jaroslav Kysela \nCopyright (c) 2010 Texas Instruments Inc.\nCopyright (c) 2003 Thomas Charbonnel (thomas@undata.org)\nCopyright (c) 2003 Winfried Ritsch (IEM)\nCopyright (c) 2010 Wolfson Microelectronics PLC\nCopyright (c) 1994 X Consortium\nCopyright (c) by Abramo Bagnara \nCopyright (c) 2000 by Abramo Bagnara , Jaroslav Kysela \nCopyright (c) 2000 by Abramo Bagnara 2004 by Jaroslav Kysela \nCopyright (c) 2000 by Abramo Bagnara 2004 by Jaroslav Kysela 2006 by Takashi Iwai \nCopyright (c) 1998-1999 by Frank van de Pol \nCopyright (c) 1998 by Jaroslav Kysela \nCopyright (c) 1994-2003 by Jaroslav Kysela , Abramo Bagnara \nCopyright (c) by Jaroslav Kysela , Creative Labs, Inc. Definitions\nCopyright (c) 1994-98 by Jaroslav Kysela , 4Front Technologies\nCopyright (c) 2003 by Jaroslav Kysela Takashi Iwai \nCopyright (c) 1999 by Takashi Iwai \nCopyright (c) 2016 by Thomas Klausner \nCopyright (c) 1999 by Uros Bizjak Jaroslav Kysela \nCopyright (c) 1999 by Uros Bizjak Takashi Iwai \nCopyright (c) 2006-2008 xine project\n(c) 2003 - Rear\n(c) 2003 - Rear Left\n(c) 1998-1999 by Jaroslav Kysela \ncopyrighted by the Free Software Foundation\n\nAuthors: Abramo Bagnara; Abramo Bagnara , Jaroslav Kysela; Abramo Bagnara ; Abramo Bagnara Jaroslav Kysela; Abramo Bagnara by Jaroslav Kysela; Abramo Bagnara by Jaroslav Kysela by Takashi Iwai; Alexandre Oliva ; Bootstrap Authors; Diego Petteno; Fran,cois Pinard; Frank van de Pol; Frank van de Pol ; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Intel Corporation; Jaroslav Kysela; Jaroslav Kysela , 4Front Technologies; Jaroslav Kysela , Abramo Bagnara; Jaroslav Kysela , Creative Labs, Inc. Definitions; Jaroslav Kysela ; Jaroslav Kysela Abramo Bagnara; Jaroslav Kysela Takashi Iwai; Justin Xu ; Liam Girdwood ; Liam Girdwood Stefan Schmidt Justin Xu ; Mengdong Lin Yao Jin Liam Girdwood ; Rear; Rear Left; Red Hat Inc.; Richard W.E. Furse, Paul Barton-Davis, Stefan Westerfeld; Scott James Remnant; SlimLogic Ltd; Stefan Schmidt ; Stichting Mathematisch Centrum, Amsterdam; Takashi Iwai; Takashi Iwai , Jaroslav Kysela; Takashi Iwai ; Texas Instruments Inc.; Thomas Charbonnel; Thomas Klausner; Tom Tromey ; Uros Bizjak ; Uros Bizjak Jaroslav Kysela; Uros Bizjak Takashi Iwai; Winfried Ritsch (IEM); Wolfson Microelectronics PLC; X Consortium; the Free Software Foundation; xine project", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/alsa-lib/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/alsa-lib@1.2.14-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qPgqB_ms6hpH8ZDeymcJ_z_b9-m2CDJFQ7I7cQebWUU/alsa-lib-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://alsa-project.org/", "licenseConcluded" : "LGPL-2.1-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/alsa-lib", "versionInfo" : "1.2.14-r2" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-apk-tools-3.0.3-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1997 Massachusetts Institute of Technology\nCopyright (c) 1998-2004 Dag-Erling Coidan Smorgrav\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2008 Joerg Sonnenberger \nCopyright (c) 2024 Jonas Jelonek \nCopyright (c) 2005-2008 Natanael Copa \nCopyright (c) 2020 Noel Kuntze \nCopyright (c) 2011 Rich Felker\nCopyright (c) 2003 Thomas Klausner \nCopyright (c) 2008-2011 Timo Teras \nCopyright (c) 2017 William Pitcock \nCopyright (c) 2025 apk-tools authors\nCopyright (c) 2023 q66 \n(c) 1994-2012 Lua.org, PUC-Rio\ncopyrighted by the Free Software Foundation\n\nAuthors: Dag-Erling Coidan Smorgrav; Free Software Foundation, Inc.; Joerg Sonnenberger; Jonas Jelonek; Lua.org, PUC-Rio; Massachusetts Institute of Technology; Natanael Copa; Noel Kuntze ; Rich Felker; Thomas Klausner; Timo Teras; William Pitcock; apk-tools authors; q66; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/apk-tools/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/apk-tools@3.0.3-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO0dhVGubXbD_0QEa0HcqZetvN4BwVhDTc9OCAdpagA/apk-tools-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://gitlab.alpinelinux.org/alpine/apk-tools", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/apk-tools", "versionInfo" : "3.0.3-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-brotli-libs-1.2.0-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2015 The Brotli Authors\nCopyright (c) 2009, 2010, 2013-2016 by the Brotli Authors\n(c) W't GlI9\n\nAuthors: Google Inc.; W't GlI9; the Brotli Authors", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/brotli-libs/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/brotli-libs@1.2.0-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/vvCksR_4YwjGY8rFRIfNCBeCqZcgvU8sUibabs4TiYE/brotli-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/brotli", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/brotli-libs", "versionInfo" : "1.2.0-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-busybox-binsh-1.37.0-r30-arch-x86-64-distro-3.23.3", "copyrightText" : "BusyBox (c) 2007 by Yuichi Nakamura \nCopyright 2002 Andi Kleen, SuSE Labs\nCopyright 2006 Bernhard Reutner-Fischer\nCopyright 2006 Bernhard Reutner-Fischer \nCopyright 1999 Dave Cinege\nCopyright 2010, Denys Vlasenko\nCopyright 1994-1996 Donald Becker\nCopyright 1999-2003 Donald Becker and Scyld Computing Corporation\nCopyright 2005 Frank Sorenson \nCopyright 1999 George Staikos\nCopyright 2001 Glenn McGrath\nCopyright 2005 H. Peter Anvin\nCopyright Joern Engel \nCopyright 1989 - 1991, Julianne Frances Haugh \nCopyright 2007 KaiGai Kohei \nCopyright 1997, 2000, 2001 Larry Doolittle \nCopyright 2002 Laurence Anderson\nCopyright 1996, 1997 Linux International\nCopyright 1996, 1997 Linux International. I've\nCopyright 2004 Matt Mackall \nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com)\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com) Vladimir Oleynik \nCopyright 1993 MicroWalt Corporation\nCopyright 1991-1997 Miquel van Smoorenburg\nCopyright 2005 Rob Landley \nCopyright 2006, 2007 Stefan Rompf \nCopyright 2003 Tito Ragusa \nCopyright 2004 Tony J. White\nCopyright 1998 by Albert Cahalan\nCopyright 2002 by Kai Germaschewski \nCopyright 1997,.. by Peter Hanecak \nCopyright 2006 by Rob Landley \nCopyright (c) 2000\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2002 AYR Networks, Inc.\nCopyright (c) 2001 Aaron Lehmann \nCopyright (c) 2002 Al Stone\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2004 Alexander Guy \nCopyright (c) Andre Masella \nCopyright (c) Andreas Neuper\nCopyright (c) 1994-1998 Andries E. Brouwer \nCopyright (c) 1999 Anthony Towns \nCopyright (c) 2000 Arcom Control System Ltd\nCopyright (c) Arne Bernin \nCopyright (c) 2006 Aurelien Jacobs \nCopyright (c) 2014 Bartosz Golaszewski \nCopyright (c) 2003 Bastian Blank \nCopyright (c) 2003 Bernardo Innocenti \nCopyright (c) 2008 Bernhard Reutner-Fischer\nCopyright (c) 2008 Bernhard Reutner-Fischer Copyrihgt\nCopyright (c) 2006 Bernhard Reutner-Fischer \nCopyright (c) 2010 Bradley M. Kuhn \nCopyright (c) 1992 Branko Lankester\nCopyright (c) 1996 Brian Candler \nCopyright (c) 1995 Bruce Perens\nCopyright (c) 2008, BusyBox Team\nCopyright (c) 1994-1996 Charles L. Blake\nCopyright (c) 1998, 1999 Charles P. Wright\nCopyright (c) 2002-2009 Craig\nCopyright (c) 2008 Darius Augulis \nCopyright (c) 1998 Dave Cinege\nCopyright (c) 1994 David Burren\nCopyright (c) 1999 David Mosberger-Tang \nCopyright (c) 2001 David Schleef \nCopyright (c) 2006 Denys Vlasenko\nCopyright (c) 2010 Denys Vlasenko Split\nCopyright (c) 2017 Denys Vlasenko \nCopyright (c) 2007 Denys Vlasenko \nCopyright (c) 2000 Edward Betts \nCopyright (c) 2004,2005 Enrik Berkhan \nCopyright (c) 1998 Enrique Zanardi \nCopyright (c) 2003 Erik Andersen\nCopyright (c) 2001 Erik Andersen \nCopyright (c) 2001, 2002, 2003, 2004, 2005 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991,92,95,96,97,98,99,2000,01 Free Software Foundation, Inc.\nCopyright (c) 86, 1991-1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 86, 89, 91, 1995-2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 91, 1995-2002 Free Software Foundation, Inc.\nCopyright (c) 2006 Freescale Semiconductor, Inc \nCopyright (c) 1997, 1998, 1999, 2000 Frodo Looijaard \nCopyright (c) 2006 Gabriel Somlo\nCopyright (c) 2001-2006, Gerrit Pape\nCopyright (c) 2002,2003 Glenn Engel \nCopyright (c) 2003 Glenn L. McGrath\nCopyright (c) 2002 Glenn McGrath\nCopyright (c) 1996-1999 Guy Maor \nCopyright (c) 2003, 2004 Henning Brauer \nCopyright (c) 1997-2005 Herbert Xu \nCopyright (c) 1999 Hewlett-Packard Co\nCopyright (c) 2001, Hewlett-Packard Company\nCopyright (c) 2001 Hewlett-Packard Laboratories\nCopyright (c) 2013 INSIDE Secure Corporation\nCopyright (c) 1999-2005 Igor Pavlov\nCopyright (c) 2014 Isaac Dunham \nCopyright (c) 2000, Jan-Derk Bakker (J.D.Bakker@its.tudelft.nl)\nCopyright (c) 2022 Jason A. Donenfeld \nCopyright (c) 2000 Jean-Pierre Lefebvre and Remi Lefebvre \nCopyright (c) 1992-1993 Jean-loup Gailly\nCopyright (c) 2002 Jeff Angielski, The PTR Group \nCopyright (c) 1996 Jeff Noxon \nCopyright (c) 2000-2001 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2006 Jesse Dutton \nCopyright (c) 2017 Jo-Philipp Wich \nCopyright (c) 1996-2006 Julian Seward \nCopyright (c) 2016-2018 Kaarle Ritvanen\nCopyright (c) KaiGai Kohei \nCopyright (c) 2006 - 2007 KaiGai Kohei \nCopyright (c) 2004 Kay Sievers \nCopyright (c) 2010 Kevin Cernekee \nCopyright (c) 2002 Khalid Aziz\nCopyright (c) 2000,2001 Larry Doolittle \nCopyright (c) 2001 Larry Doolittle, \nCopyright (c) 2010 Lauri Kasanen\nCopyright (c) 2000 Lennert Buytenhek\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 2007 Loic Grenie \nCopyright (c) 2001 Magnus Damm \nCopyright (c) 2009 Maksym Kryzhanovskyy \nCopyright (c) 2009 Malek Degachi \nCopyright (c) 2001 Manuel Novoa III\nCopyright (c) 2001 Manuel Novoa III \nCopyright (c) Manuel Novoa III and Vladimir Oleynik \nCopyright (c) 2011 Marek Becka \nCopyright (c) 2010 Marek Polacek \nCopyright (c) 2002 Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG\nCopyright (c) 1996 Markus Franz Xaver Johannes Oberhumer\nCopyright (c) 2017 Markus Gothe \nCopyright (c) 2000,2001 Matt Kraai\nCopyright (c) 2000,2001 Matt Kraai \nCopyright (c) 2001 Matt Krai\nCopyright (c) 1999 Matthew Ramsay Chris Trew \nCopyright (c) 1992-1998 Michael K. Johnson\nCopyright (c) 2006 Michael Opdenacker \nCopyright (c) 2008 Michele Sanges \nCopyright (c) Michiel Huisjes\nCopyright (c) 2008 Natanael Copa \nCopyright (c) 2004 Nicholas Miell\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2020 Norbert Lange \nCopyright (c) 2008 Nuovation System Designs, LLC\nCopyright (c) 2005 Odd Arild Olsen (oao at fibula dot no)\nCopyright (c) 2008 Pascal Bellard\nCopyright (c) 2003 Paul Mundt \nCopyright (c) 2003 Paul Sheer\nCopyright (c) PeerSec Networks, 2002-2011\nCopyright (c) 2011 Pere Orga \nCopyright (c) 2004 Peter Willis \nCopyright (c) 1987,1997, Prentice Hall\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 2002 Randy Dunlap\nCopyright (c) 1987, 1988 Regents of the University of California\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1993, 1994 Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 1997-1999 Richard Gooch\nCopyright (c) 1993 Rick Sladkey \nCopyright (c) 2006 Rob Landley\nCopyright (c) 2005, 2006 Rob Landley \nCopyright (c) 2002 Robert Griebl \nCopyright (c) 2005 Roberto A. Foglietta\nCopyright (c) 2005-6, Roberto A. Foglietta\nCopyright (c) 1992 Roger Binns\nCopyright (c) 2022 Roger Knecht \nCopyright (c) 2013 Rolf Fokkens \nCopyright (c) 2002-2003 Romain Lievin \nCopyright (c) 2002-2005 Roman Zippel \nCopyright (c) 2003 Russ Dill \nCopyright (c) 2012 S-G Bergh \nCopyright (c) 2002-2005 Sam Ravnborg \nCopyright (c) 2010 Sergey Naumov \nCopyright (c) 2000, 2001 Sterling Huxley \nCopyright (c) 2002 Steven J. Hill \nCopyright (c) 2001 Stuart Hughes \nCopyright (c) 2018 Sven-Goran Bergh \nCopyright (c) 1980 The Regents of the University of California\nCopyright (c) 1999, 2000 The ht://Dig Group\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 2008 Timo Teras \nCopyright (c) 2005 Tito Ragusa \nCopyright (c) 2005 Tobias Klauser \nCopyright (c) 2003 Todd C. Miller \nCopyright (c) University of Delaware 1992-2009\nCopyright (c) 1999 Uwe Ohse \nCopyright (c) 2008 Vladimir Dronnikov\nCopyright (c) 2009 Vladimir Dronnikov \nCopyright (c) Vladimir N. Oleynik \nCopyright (c) 2005 Vladimir Oleynik\nCopyright (c) 2001,2002 Vladimir Oleynik \nCopyright (c) 2005 W. Michael Petullo \nCopyright (c) 1993-2002 Werner Almesberger\nCopyright (c) 2003 Yang Xiaopeng\nCopyright (c) 2015 by Ari Sundholm \nCopyright (c) 2015 by Ari Sundholm and Tuxera Inc.\nCopyright (c) 2003 by Arthur van Hoff (avh@strangeberry.com)\nCopyright (c) 2002 by Bart Visscher \nCopyright (c) 2014 by Bartosz Golaszewski \nCopyright (c) 2008 by Bernhard Reutner-Fischer\nCopyright (c) 1995, 1996 by Bruce Perens \nCopyright (c) 2009 by Dan Fandrich \nCopyright (c) 2000 by Daniel Jacobowitz\nCopyright (c) 2004 by David Brownell\nCopyright (c) 1999 by David I. Bell\nCopyright (c) 2008 by Denys Vlasenko \nCopyright (c) 2007 by Denys Vlasenko \nCopyright (c) 2002 by Dmitry Zakharov \nCopyright (c) 2004 by Ed Clark\nCopyright (c) 2001 by Emanuele Aina \nCopyright (c) 1999-2004 by Erik Andersen \nCopyright (c) 1999-2004 by Erik Andersen Adjusted\nCopyright (c) 1999-2004 by Erik Andersen Fix\nCopyright (c) 1999-2004 by Erik Andersen and Ron Alder \nCopyright (c) 2014 by Fugro Intersite B.V. \nCopyright (c) 2000 by Gennady Feldman \nCopyright (c) 2001 by Gennady Feldman Changes Made\nCopyright (c) 2000 by Glenn McGrath\nCopyright (c) 2010 by Grigory Batalov \nCopyright (c) 2006 by Jan Kiszka \nCopyright (c) 2006 by Jason Schoon \nCopyright (c) 1999,2000,2001 by John Beppu \nCopyright (c) 2007 by KaiGai Kohei \nCopyright (c) 2000 by Karl M. Hegbloom \nCopyright (c) 2001 by Laurence Anderson\nCopyright (c) 1999,2000,2001 by Lineo, inc.\nCopyright (c) 1999 by Lineo, inc. and John Beppu\nCopyright (c) 1999,2000,2001 by Lineo, inc. and Mark Whitley\nCopyright (c) 2023 by LoveSy \nCopyright (c) 2005 by Marc Leeman \nCopyright (c) 1999,2000,2001 by Mark Whitley \nCopyright (c) 2010 by Matheus Izvekov \nCopyright (c) 2000 by Matt Kraai \nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it> Hacked\nCopyright (c) 2001 by Michael Habermann Copyrigjt (c)\nCopyright (c) 2005 by Mike Frysinger \nCopyright (c) 2008 by Patricia Muscalu \nCopyright (c) 1999 by Randolph Chung \nCopyright (c) 2003,2004 by Rob Landley \nCopyright (c) 2003 by Rob Landley , Joey Hess\nCopyright (c) 2006 by Rob Sullivan\nCopyright (c) 2005 by Rob Sullivan \nCopyright (c) 2005 by Robert Sullivan \nCopyright (c) 2006 by Robert Sullivan \nCopyright (c) 2007 by Stephane Billiart \nCopyright (c) 2012 by Sven Oliver SvOlli Moll \nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 2008 by Timo Teras \nCopyright (c) 2003 by Tito Ragusa \nCopyright (c) 2005 by Tito Ragusa \nCopyright (c) 1994-2000 by Tomi Ollila\nCopyright (c) 2008 by Vladimir Dronnikov \nCopyright (c) 2002 by Vladimir Oleynik \nCopyright (c) 2021 by YU Jincheng \nCopyright (c) 2006 by Yoshinori Sato \nCopyright (c) 2017 by \nCopyright (c) 2000 by spoon \nCopyright (c) 2008 by \nCopyright (c) (c) 2003 Vladimir Oleynik \nCopyright (c) 1986-2003 may safely be consumed\nCopyright (c) 2006-2015 wolfSSL Inc.\nDenys Vlasenko (c) 2008\nMark Lord (c) 1994-2002\nPaul Mundt (c) 2004\nPortions copyright (c) 1990-1996 Free Software Foundation, Inc.\nTito Ragusa (c) 2004\nVladimir Oleynik 2001\nVladimir Oleynik (c) 2001-2005\n(c) 2002\n(c) Copyright 2000, Axis Communications AB\n(c) Eero Tamminen\n(c) 1995 Erik Andersen \n(c) 2007 Gabriel Somlo\n(c) 2018 Gavin D. Howard and contributors\n(c) 2002 Glenn McGrath\n(c) 2007 Hiroshi Shinji \n(c) 2006 Jac Goudsmit\n(c) Lauri Kasanen\n(c) 1991 Linus Torvalds\n(c) 2005 Martin Cracauer cracauer @ cons.org http://www.cons.org/cracauer/ http://www.cons.org/cracauer\n(c) 2002 Robert Griebl\n(c) 2009 Stefan Seyfried \n(c) 2008 Timo Teras \n(c) Vladimir Oleynik \n(c) 2007 Yuichi Nakamura \n(c) 1997 by Andi Kleen\n(c) 1995-1999 by Geert Uytterhoeven (Geert.Uytterhoeven@cs.kuleuven.ac.be)\n(c) 2007 by Tito Ragusa \n(c) 2002,2003 by Vladimir Oleynik \n(c) 2007 by Yuichi Nakamura \n(c) by a whole\n(c) 2003 - correct\n(c) 2001-2005 \n(c) $?i (c) Y\ncopyright (c) 2018 Gavin D. Howard and contributors\ncopyright (c) 1995 Ian Jackson \ncopyright (c) 1996-2006 Julian R Seward\ncopyright (c) 2002 Romain Lievin \ncopyright (c) 1997 by Vernon Hoxie\ncopyright (c) 2001 by glenn\ncopyrighted by many authors\ncopyrighted by the Free Software Foundation\n(c) 2009 \n\nAuthors: $?i Y; ; ; ; ; ; A. V. Le Blanc; AT&T; AYR Networks, Inc.; Aaron Lehmann; Adam Tkac; Adam Tkac ; Al Stone; Albert Cahalan; Alessandro Rubini; Alexander Guy; Alexander Shishkin; Alexander Shishkin ; Alexey Kuznetsov ; Alexey Kuznetsov, ; Alexey Kuznetsov, Patrick McHardy ; Andi Kleen; Andi Kleen, SuSE Labs; Andre Masella; Andreas Neuper; Andreas Schwab; Andries E. Brouwer; Anthony Towns; Arcom Control System Ltd; Ari Sundholm; Ari Sundholm and Tuxera Inc.; Arkadiusz Mickiewicz ; Arnd Bergmann ; Arne Bernin; Arnold Robbins; Arthur van Hoff; Aurelien Jacobs; Axis Communications AB; Bart Visscher; Bart Visscher ; Bartosz Golaszewski; Baruch Siach , Orex Computed Radiography; Bastian Blank; Ben Zeckel ; Bernardo Innocenti; Bernhard Reutner-Fischer; Bernhard Reutner-Fischer Copyrihgt; Bjorn Ekwall ; Bradley M. Kuhn; Branko Lankester; Breno Leitao ; Brian Candler; Bruce Perens; Bryan Rittmeyer ; BusyBox Team; BusyBox by Yuichi Nakamura; Charles L. Blake; Charles P. Wright; Charles P. Wright ; Chip Rosenthal Covad Communications ; Christopher Hoover ; Clifford Wolf (god@clifford.at); Craig; Dan Fandrich; Daniel Jacobowitz; Daniel Jacobowitz ; Darius Augulis; Dave Cinege; David Brownell; David Burren; David Burren ; David I. Bell; David Keppel ; David MacKenzie ; David MacKenzie, djm@gnu.ai.mit.edu; David Mosberger-Tang; David Schleef; David Schleef ; Denys Vlasenko; Denys Vlasenko ; Denys Vlasenko Split; Dmitry Zakharov; Donald Becker; Donald Becker ; Donald Becker and Scyld Computing Corporation; Donald Becker, http://www.scyld.com/ http://www.scyld.com/wakeonlan.html; Ed Clark; Edward Betts; Eero Tamminen; Emanuele Aina; Emanuele Caratti ; Enrik Berkhan; Enrique Zanardi; Eric Gisin; Eric Rasmussen ; Erik Andersen; Erik Andersen ; Erik Andersen ; Erik Andersen ; Erik Andersen ; Erik Andersen Adjusted; Erik Andersen Fix; Erik Andersen and Kent Robotti ; Erik Andersen and Ron Alder; Erik Baalbergen; Fernando Silveira ; Frank Sorenson; Fred N. van Kempen; Fred N. van Kempen, and others; Free Software Foundation; Free Software Foundation, Inc.; Freescale Semiconductor, Inc; Frodo Looijaard; Fugro Intersite B.V.; G. Somlo ; Gabriel Somlo; Gavin D. Howard and contributors; Geert Uytterhoeven; Gennady Feldman; Gennady Feldman Changes Made; George Staikos; Gerrit Pape; Gerrit Pape ; Glenn Engel; Glenn L. McGrath; Glenn McGrath; Grigory Batalov; Guy Maor; H. Peter Anvin; H. Peter Anvin I've; Henning Brauer; Herbert Xu; Hewlett-Packard Co; Hewlett-Packard Company; Hewlett-Packard Laboratories; Hiroshi Shinji; INSIDE Secure Corporation; Ian Jackson; Ignacio Garcia Perez (iggarpe at gmail dot com); Igor Pavlov; Isaac Dunham; J.T. Conklin; Jac Goudsmit; Jan Kiszka; Jan-Derk Bakker; Jason A. Donenfeld; Jason Schoon; Jean-Pierre Lefebvre and Remi Lefebvre; Jean-loup Gailly; Jeff Angielski, The PTR Group; Jeff Noxon; Jeff Tranter; Jesse Dutton; Jim McQuillan ; Jim Meyering. Busyboxed; Jo-Philipp Wich; Jody Bruchon (jody@jodybruchon.com); Joern Engel; John Beppu; Juan Quintela ; Julian R Seward; Julian R Seward (jseward@acm.org); Julian Seward; Julian Seward ; Julianne Frances Haugh; Kaarle Ritvanen; Kai Germaschewski; KaiGai Kohei; Karl M. Hegbloom; Kay Sievers; Kayvan Aghaiepour and David MacKenzie; Kevin Cernekee; Khalid Aziz; Larry Doolittle; Larry Doolittle ; Lasse Collin ; Lasse Collin Igor Pavlov ; Laurence Anderson; Lauri Kasanen; Lennert Buytenhek; Leonid Lisovskiy ; Lineo, inc.; Lineo, inc. and John Beppu; Lineo, inc. and Mark Whitley; Linus Torvalds; Linux International; Linux International. I've; Loic Grenie; LoveSy; Magnus Damm; Maintainer Gennady Feldman ; Maksym Kryzhanovskyy; Malek Degachi; Manuel Novoa III; Manuel Novoa III (mjn3@codepoet.org); Manuel Novoa III and Vladimir Oleynik; Marc Leeman; Marek Becka; Marek Michalkiewicz ; Marek Polacek; Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG; Mark Adler ; Mark Lord; Mark Whitley; Mark Whitley ; Markus Franz Xaver Johannes Oberhumer; Markus Gothe; Martin Cracauer cracauer @ cons.org; Martin Habets ; Matheus Izvekov; Matt Kraai; Matt Krai; Matt Mackall; Matt Mackall ; Matteo Croce; Matteo Croce Hacked; Matthew Dillon; Matthew Dillon Vladimir Oleynik; Matthew Ramsay Chris Trew; Maxime Coste ; Michael Habermann Copyrigjt; Michael K. Johnson; Michael Meskes; Michael Opdenacker; Michele Sanges; Michiel Huisjes; MicroWalt Corporation; Mike Frysinger; Miquel van Smoorenburg; Mrs. Brisby ; Natanael Copa; Nicholas Miell; Nico Erfurth ; Nokia Corporation; Norbert Lange; Nuovation System Designs, LLC; Odd Arild Olsen (oao at fibula dot no); Pascal Bellard; Pascal Bellard ; Patricia Muscalu; Paul Fox ; Paul Mackerras; Paul Mundt; Paul Sheer; Pedro Roque ; PeerSec Networks; Pere Orga; Pere Orga ; Peter Hanecak; Peter Orbaek ; Peter Willis; Prentice Hall; Quy Tonthat ; RSA Data Security, Inc.; Ralf Baechle ; Randolph Chung; Randy Dunlap; Regents of the University of California; Remy Card Laboratoire MASI - Institut Blaise Pascal; Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris; Rewritten by Vladimir Oleynik; Richard Gooch; Richard Henderson ; Richard Stallman; Rick Sladkey; Rob Landley; Rob Landley (rob@landley.net); Rob Landley , Joey Hess; Rob Sullivan; Robert Griebl; Robert Griebl ; Robert Sullivan; Roberto A. Foglietta; Roger Binns; Roger Knecht; Rolf Fokkens; Romain Lievin; Roman Zippel; Russ Dill; Russ Dill ; S-G Bergh; Sam Ravnborg; Savio Lam (lam836@cs.cuhk.hk); Sergey Naumov; Spencer Thomas, Joe Orost, James Woods, Jim McKie, Steve Davies, Ken Turkowski, Dave Mack and Peter Jannesen; Spencer W. Thomas; Stefan Rompf; Stefan Seyfried; Stephane Billiart; Sterling Huxley; Sterling Huxley ; Steve Reid ; Steven J. Hill; Stuart Herbert (S.Herbert@shef.ac.uk); Stuart Hughes; Sven Oliver SvOlli Moll; Sven Rudolph ; Sven-Goran Bergh; The Regents of the University of California; The ht://Dig Group; Theodore Ts'o; Theodore Ts'o, ; Theodore Ts'o. Also; Thomas Lundquist ; Tim Riker ; Timo Teras; Tito Ragusa; Tito Ragusa ; Tobias Klauser; Todd C. Miller; Tomi Ollila; Tomi Ollila ; Tony J. White; Ulrich Drepper ; Ulrich Drepper ; University of Delaware; Uwe Ohse; Vernon Hoxie; Vladimir Dronnikov; Vladimir Dronnikov ; Vladimir N. Oleynik; Vladimir N. Oleynik ; Vladimir Oleynik; Vladimir Oleynik ; W. Michael Petullo; Werner Almesberger; William Roadcap (roadcap@cfw.com); William Roadcap (roadcapw@cfw.com); YU Jincheng; Yang Xiaopeng; Yoichi Hariguchi ; Yoshinori Sato; Yuichi Nakamura; Yuichi Nakamura ; content Ken A; correct; dhankins@isc.org; glenn; hobbit@avian.org; hush. Also; many authors; may safely be consumed; spoon; the Free Software Foundation; the University of California, Berkeley and its contributors; the University of California, Lawrence Berkeley Laboratory and its contributors; whole; wolfSSL Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/busybox-binsh/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aIgkp8Bz-FJuk3adHEEHYQiEmrhaG7iqWoYVCX7rFOU/busybox-~-30.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://busybox.net/", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/busybox-binsh", "versionInfo" : "1.37.0-r30" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-busybox-1.37.0-r30-arch-x86-64-distro-3.23.3", "copyrightText" : "BusyBox (c) 2007 by Yuichi Nakamura \nCopyright 2002 Andi Kleen, SuSE Labs\nCopyright 2006 Bernhard Reutner-Fischer\nCopyright 2006 Bernhard Reutner-Fischer \nCopyright 1999 Dave Cinege\nCopyright 2010, Denys Vlasenko\nCopyright 1994-1996 Donald Becker\nCopyright 1999-2003 Donald Becker and Scyld Computing Corporation\nCopyright 2005 Frank Sorenson \nCopyright 1999 George Staikos\nCopyright 2001 Glenn McGrath\nCopyright 2005 H. Peter Anvin\nCopyright Joern Engel \nCopyright 1989 - 1991, Julianne Frances Haugh \nCopyright 2007 KaiGai Kohei \nCopyright 1997, 2000, 2001 Larry Doolittle \nCopyright 2002 Laurence Anderson\nCopyright 1996, 1997 Linux International\nCopyright 1996, 1997 Linux International. I've\nCopyright 2004 Matt Mackall \nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com)\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com) Vladimir Oleynik \nCopyright 1993 MicroWalt Corporation\nCopyright 1991-1997 Miquel van Smoorenburg\nCopyright 2005 Rob Landley \nCopyright 2006, 2007 Stefan Rompf \nCopyright 2003 Tito Ragusa \nCopyright 2004 Tony J. White\nCopyright 1998 by Albert Cahalan\nCopyright 2002 by Kai Germaschewski \nCopyright 1997,.. by Peter Hanecak \nCopyright 2006 by Rob Landley \nCopyright (c) 2000\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2002 AYR Networks, Inc.\nCopyright (c) 2001 Aaron Lehmann \nCopyright (c) 2002 Al Stone\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2004 Alexander Guy \nCopyright (c) Andre Masella \nCopyright (c) Andreas Neuper\nCopyright (c) 1994-1998 Andries E. Brouwer \nCopyright (c) 1999 Anthony Towns \nCopyright (c) 2000 Arcom Control System Ltd\nCopyright (c) Arne Bernin \nCopyright (c) 2006 Aurelien Jacobs \nCopyright (c) 2014 Bartosz Golaszewski \nCopyright (c) 2003 Bastian Blank \nCopyright (c) 2003 Bernardo Innocenti \nCopyright (c) 2008 Bernhard Reutner-Fischer\nCopyright (c) 2008 Bernhard Reutner-Fischer Copyrihgt\nCopyright (c) 2006 Bernhard Reutner-Fischer \nCopyright (c) 2010 Bradley M. Kuhn \nCopyright (c) 1992 Branko Lankester\nCopyright (c) 1996 Brian Candler \nCopyright (c) 1995 Bruce Perens\nCopyright (c) 2008, BusyBox Team\nCopyright (c) 1994-1996 Charles L. Blake\nCopyright (c) 1998, 1999 Charles P. Wright\nCopyright (c) 2002-2009 Craig\nCopyright (c) 2008 Darius Augulis \nCopyright (c) 1998 Dave Cinege\nCopyright (c) 1994 David Burren\nCopyright (c) 1999 David Mosberger-Tang \nCopyright (c) 2001 David Schleef \nCopyright (c) 2006 Denys Vlasenko\nCopyright (c) 2010 Denys Vlasenko Split\nCopyright (c) 2017 Denys Vlasenko \nCopyright (c) 2007 Denys Vlasenko \nCopyright (c) 2000 Edward Betts \nCopyright (c) 2004,2005 Enrik Berkhan \nCopyright (c) 1998 Enrique Zanardi \nCopyright (c) 2003 Erik Andersen\nCopyright (c) 2001 Erik Andersen \nCopyright (c) 2001, 2002, 2003, 2004, 2005 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991,92,95,96,97,98,99,2000,01 Free Software Foundation, Inc.\nCopyright (c) 86, 1991-1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 86, 89, 91, 1995-2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 91, 1995-2002 Free Software Foundation, Inc.\nCopyright (c) 2006 Freescale Semiconductor, Inc \nCopyright (c) 1997, 1998, 1999, 2000 Frodo Looijaard \nCopyright (c) 2006 Gabriel Somlo\nCopyright (c) 2001-2006, Gerrit Pape\nCopyright (c) 2002,2003 Glenn Engel \nCopyright (c) 2003 Glenn L. McGrath\nCopyright (c) 2002 Glenn McGrath\nCopyright (c) 1996-1999 Guy Maor \nCopyright (c) 2003, 2004 Henning Brauer \nCopyright (c) 1997-2005 Herbert Xu \nCopyright (c) 1999 Hewlett-Packard Co\nCopyright (c) 2001, Hewlett-Packard Company\nCopyright (c) 2001 Hewlett-Packard Laboratories\nCopyright (c) 2013 INSIDE Secure Corporation\nCopyright (c) 1999-2005 Igor Pavlov\nCopyright (c) 2014 Isaac Dunham \nCopyright (c) 2000, Jan-Derk Bakker (J.D.Bakker@its.tudelft.nl)\nCopyright (c) 2022 Jason A. Donenfeld \nCopyright (c) 2000 Jean-Pierre Lefebvre and Remi Lefebvre \nCopyright (c) 1992-1993 Jean-loup Gailly\nCopyright (c) 2002 Jeff Angielski, The PTR Group \nCopyright (c) 1996 Jeff Noxon \nCopyright (c) 2000-2001 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2006 Jesse Dutton \nCopyright (c) 2017 Jo-Philipp Wich \nCopyright (c) 1996-2006 Julian Seward \nCopyright (c) 2016-2018 Kaarle Ritvanen\nCopyright (c) KaiGai Kohei \nCopyright (c) 2006 - 2007 KaiGai Kohei \nCopyright (c) 2004 Kay Sievers \nCopyright (c) 2010 Kevin Cernekee \nCopyright (c) 2002 Khalid Aziz\nCopyright (c) 2000,2001 Larry Doolittle \nCopyright (c) 2001 Larry Doolittle, \nCopyright (c) 2010 Lauri Kasanen\nCopyright (c) 2000 Lennert Buytenhek\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 2007 Loic Grenie \nCopyright (c) 2001 Magnus Damm \nCopyright (c) 2009 Maksym Kryzhanovskyy \nCopyright (c) 2009 Malek Degachi \nCopyright (c) 2001 Manuel Novoa III\nCopyright (c) 2001 Manuel Novoa III \nCopyright (c) Manuel Novoa III and Vladimir Oleynik \nCopyright (c) 2011 Marek Becka \nCopyright (c) 2010 Marek Polacek \nCopyright (c) 2002 Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG\nCopyright (c) 1996 Markus Franz Xaver Johannes Oberhumer\nCopyright (c) 2017 Markus Gothe \nCopyright (c) 2000,2001 Matt Kraai\nCopyright (c) 2000,2001 Matt Kraai \nCopyright (c) 2001 Matt Krai\nCopyright (c) 1999 Matthew Ramsay Chris Trew \nCopyright (c) 1992-1998 Michael K. Johnson\nCopyright (c) 2006 Michael Opdenacker \nCopyright (c) 2008 Michele Sanges \nCopyright (c) Michiel Huisjes\nCopyright (c) 2008 Natanael Copa \nCopyright (c) 2004 Nicholas Miell\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2020 Norbert Lange \nCopyright (c) 2008 Nuovation System Designs, LLC\nCopyright (c) 2005 Odd Arild Olsen (oao at fibula dot no)\nCopyright (c) 2008 Pascal Bellard\nCopyright (c) 2003 Paul Mundt \nCopyright (c) 2003 Paul Sheer\nCopyright (c) PeerSec Networks, 2002-2011\nCopyright (c) 2011 Pere Orga \nCopyright (c) 2004 Peter Willis \nCopyright (c) 1987,1997, Prentice Hall\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 2002 Randy Dunlap\nCopyright (c) 1987, 1988 Regents of the University of California\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1993, 1994 Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 1997-1999 Richard Gooch\nCopyright (c) 1993 Rick Sladkey \nCopyright (c) 2006 Rob Landley\nCopyright (c) 2005, 2006 Rob Landley \nCopyright (c) 2002 Robert Griebl \nCopyright (c) 2005 Roberto A. Foglietta\nCopyright (c) 2005-6, Roberto A. Foglietta\nCopyright (c) 1992 Roger Binns\nCopyright (c) 2022 Roger Knecht \nCopyright (c) 2013 Rolf Fokkens \nCopyright (c) 2002-2003 Romain Lievin \nCopyright (c) 2002-2005 Roman Zippel \nCopyright (c) 2003 Russ Dill \nCopyright (c) 2012 S-G Bergh \nCopyright (c) 2002-2005 Sam Ravnborg \nCopyright (c) 2010 Sergey Naumov \nCopyright (c) 2000, 2001 Sterling Huxley \nCopyright (c) 2002 Steven J. Hill \nCopyright (c) 2001 Stuart Hughes \nCopyright (c) 2018 Sven-Goran Bergh \nCopyright (c) 1980 The Regents of the University of California\nCopyright (c) 1999, 2000 The ht://Dig Group\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 2008 Timo Teras \nCopyright (c) 2005 Tito Ragusa \nCopyright (c) 2005 Tobias Klauser \nCopyright (c) 2003 Todd C. Miller \nCopyright (c) University of Delaware 1992-2009\nCopyright (c) 1999 Uwe Ohse \nCopyright (c) 2008 Vladimir Dronnikov\nCopyright (c) 2009 Vladimir Dronnikov \nCopyright (c) Vladimir N. Oleynik \nCopyright (c) 2005 Vladimir Oleynik\nCopyright (c) 2001,2002 Vladimir Oleynik \nCopyright (c) 2005 W. Michael Petullo \nCopyright (c) 1993-2002 Werner Almesberger\nCopyright (c) 2003 Yang Xiaopeng\nCopyright (c) 2015 by Ari Sundholm \nCopyright (c) 2015 by Ari Sundholm and Tuxera Inc.\nCopyright (c) 2003 by Arthur van Hoff (avh@strangeberry.com)\nCopyright (c) 2002 by Bart Visscher \nCopyright (c) 2014 by Bartosz Golaszewski \nCopyright (c) 2008 by Bernhard Reutner-Fischer\nCopyright (c) 1995, 1996 by Bruce Perens \nCopyright (c) 2009 by Dan Fandrich \nCopyright (c) 2000 by Daniel Jacobowitz\nCopyright (c) 2004 by David Brownell\nCopyright (c) 1999 by David I. Bell\nCopyright (c) 2008 by Denys Vlasenko \nCopyright (c) 2007 by Denys Vlasenko \nCopyright (c) 2002 by Dmitry Zakharov \nCopyright (c) 2004 by Ed Clark\nCopyright (c) 2001 by Emanuele Aina \nCopyright (c) 1999-2004 by Erik Andersen \nCopyright (c) 1999-2004 by Erik Andersen Adjusted\nCopyright (c) 1999-2004 by Erik Andersen Fix\nCopyright (c) 1999-2004 by Erik Andersen and Ron Alder \nCopyright (c) 2014 by Fugro Intersite B.V. \nCopyright (c) 2000 by Gennady Feldman \nCopyright (c) 2001 by Gennady Feldman Changes Made\nCopyright (c) 2000 by Glenn McGrath\nCopyright (c) 2010 by Grigory Batalov \nCopyright (c) 2006 by Jan Kiszka \nCopyright (c) 2006 by Jason Schoon \nCopyright (c) 1999,2000,2001 by John Beppu \nCopyright (c) 2007 by KaiGai Kohei \nCopyright (c) 2000 by Karl M. Hegbloom \nCopyright (c) 2001 by Laurence Anderson\nCopyright (c) 1999,2000,2001 by Lineo, inc.\nCopyright (c) 1999 by Lineo, inc. and John Beppu\nCopyright (c) 1999,2000,2001 by Lineo, inc. and Mark Whitley\nCopyright (c) 2023 by LoveSy \nCopyright (c) 2005 by Marc Leeman \nCopyright (c) 1999,2000,2001 by Mark Whitley \nCopyright (c) 2010 by Matheus Izvekov \nCopyright (c) 2000 by Matt Kraai \nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it> Hacked\nCopyright (c) 2001 by Michael Habermann Copyrigjt (c)\nCopyright (c) 2005 by Mike Frysinger \nCopyright (c) 2008 by Patricia Muscalu \nCopyright (c) 1999 by Randolph Chung \nCopyright (c) 2003,2004 by Rob Landley \nCopyright (c) 2003 by Rob Landley , Joey Hess\nCopyright (c) 2006 by Rob Sullivan\nCopyright (c) 2005 by Rob Sullivan \nCopyright (c) 2005 by Robert Sullivan \nCopyright (c) 2006 by Robert Sullivan \nCopyright (c) 2007 by Stephane Billiart \nCopyright (c) 2012 by Sven Oliver SvOlli Moll \nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 2008 by Timo Teras \nCopyright (c) 2003 by Tito Ragusa \nCopyright (c) 2005 by Tito Ragusa \nCopyright (c) 1994-2000 by Tomi Ollila\nCopyright (c) 2008 by Vladimir Dronnikov \nCopyright (c) 2002 by Vladimir Oleynik \nCopyright (c) 2021 by YU Jincheng \nCopyright (c) 2006 by Yoshinori Sato \nCopyright (c) 2017 by \nCopyright (c) 2000 by spoon \nCopyright (c) 2008 by \nCopyright (c) (c) 2003 Vladimir Oleynik \nCopyright (c) 1986-2003 may safely be consumed\nCopyright (c) 2006-2015 wolfSSL Inc.\nDenys Vlasenko (c) 2008\nMark Lord (c) 1994-2002\nPaul Mundt (c) 2004\nPortions copyright (c) 1990-1996 Free Software Foundation, Inc.\nTito Ragusa (c) 2004\nVladimir Oleynik 2001\nVladimir Oleynik (c) 2001-2005\n(c) 2002\n(c) Copyright 2000, Axis Communications AB\n(c) Eero Tamminen\n(c) 1995 Erik Andersen \n(c) 2007 Gabriel Somlo\n(c) 2018 Gavin D. Howard and contributors\n(c) 2002 Glenn McGrath\n(c) 2007 Hiroshi Shinji \n(c) 2006 Jac Goudsmit\n(c) Lauri Kasanen\n(c) 1991 Linus Torvalds\n(c) 2005 Martin Cracauer cracauer @ cons.org http://www.cons.org/cracauer/ http://www.cons.org/cracauer\n(c) 2002 Robert Griebl\n(c) 2009 Stefan Seyfried \n(c) 2008 Timo Teras \n(c) Vladimir Oleynik \n(c) 2007 Yuichi Nakamura \n(c) 1997 by Andi Kleen\n(c) 1995-1999 by Geert Uytterhoeven (Geert.Uytterhoeven@cs.kuleuven.ac.be)\n(c) 2007 by Tito Ragusa \n(c) 2002,2003 by Vladimir Oleynik \n(c) 2007 by Yuichi Nakamura \n(c) by a whole\n(c) 2003 - correct\n(c) 2001-2005 \n(c) $?i (c) Y\ncopyright (c) 2018 Gavin D. Howard and contributors\ncopyright (c) 1995 Ian Jackson \ncopyright (c) 1996-2006 Julian R Seward\ncopyright (c) 2002 Romain Lievin \ncopyright (c) 1997 by Vernon Hoxie\ncopyright (c) 2001 by glenn\ncopyrighted by many authors\ncopyrighted by the Free Software Foundation\n(c) 2009 \n\nAuthors: $?i Y; ; ; ; ; ; A. V. Le Blanc; AT&T; AYR Networks, Inc.; Aaron Lehmann; Adam Tkac; Adam Tkac ; Al Stone; Albert Cahalan; Alessandro Rubini; Alexander Guy; Alexander Shishkin; Alexander Shishkin ; Alexey Kuznetsov ; Alexey Kuznetsov, ; Alexey Kuznetsov, Patrick McHardy ; Andi Kleen; Andi Kleen, SuSE Labs; Andre Masella; Andreas Neuper; Andreas Schwab; Andries E. Brouwer; Anthony Towns; Arcom Control System Ltd; Ari Sundholm; Ari Sundholm and Tuxera Inc.; Arkadiusz Mickiewicz ; Arnd Bergmann ; Arne Bernin; Arnold Robbins; Arthur van Hoff; Aurelien Jacobs; Axis Communications AB; Bart Visscher; Bart Visscher ; Bartosz Golaszewski; Baruch Siach , Orex Computed Radiography; Bastian Blank; Ben Zeckel ; Bernardo Innocenti; Bernhard Reutner-Fischer; Bernhard Reutner-Fischer Copyrihgt; Bjorn Ekwall ; Bradley M. Kuhn; Branko Lankester; Breno Leitao ; Brian Candler; Bruce Perens; Bryan Rittmeyer ; BusyBox Team; BusyBox by Yuichi Nakamura; Charles L. Blake; Charles P. Wright; Charles P. Wright ; Chip Rosenthal Covad Communications ; Christopher Hoover ; Clifford Wolf (god@clifford.at); Craig; Dan Fandrich; Daniel Jacobowitz; Daniel Jacobowitz ; Darius Augulis; Dave Cinege; David Brownell; David Burren; David Burren ; David I. Bell; David Keppel ; David MacKenzie ; David MacKenzie, djm@gnu.ai.mit.edu; David Mosberger-Tang; David Schleef; David Schleef ; Denys Vlasenko; Denys Vlasenko ; Denys Vlasenko Split; Dmitry Zakharov; Donald Becker; Donald Becker ; Donald Becker and Scyld Computing Corporation; Donald Becker, http://www.scyld.com/ http://www.scyld.com/wakeonlan.html; Ed Clark; Edward Betts; Eero Tamminen; Emanuele Aina; Emanuele Caratti ; Enrik Berkhan; Enrique Zanardi; Eric Gisin; Eric Rasmussen ; Erik Andersen; Erik Andersen ; Erik Andersen ; Erik Andersen ; Erik Andersen ; Erik Andersen Adjusted; Erik Andersen Fix; Erik Andersen and Kent Robotti ; Erik Andersen and Ron Alder; Erik Baalbergen; Fernando Silveira ; Frank Sorenson; Fred N. van Kempen; Fred N. van Kempen, and others; Free Software Foundation; Free Software Foundation, Inc.; Freescale Semiconductor, Inc; Frodo Looijaard; Fugro Intersite B.V.; G. Somlo ; Gabriel Somlo; Gavin D. Howard and contributors; Geert Uytterhoeven; Gennady Feldman; Gennady Feldman Changes Made; George Staikos; Gerrit Pape; Gerrit Pape ; Glenn Engel; Glenn L. McGrath; Glenn McGrath; Grigory Batalov; Guy Maor; H. Peter Anvin; H. Peter Anvin I've; Henning Brauer; Herbert Xu; Hewlett-Packard Co; Hewlett-Packard Company; Hewlett-Packard Laboratories; Hiroshi Shinji; INSIDE Secure Corporation; Ian Jackson; Ignacio Garcia Perez (iggarpe at gmail dot com); Igor Pavlov; Isaac Dunham; J.T. Conklin; Jac Goudsmit; Jan Kiszka; Jan-Derk Bakker; Jason A. Donenfeld; Jason Schoon; Jean-Pierre Lefebvre and Remi Lefebvre; Jean-loup Gailly; Jeff Angielski, The PTR Group; Jeff Noxon; Jeff Tranter; Jesse Dutton; Jim McQuillan ; Jim Meyering. Busyboxed; Jo-Philipp Wich; Jody Bruchon (jody@jodybruchon.com); Joern Engel; John Beppu; Juan Quintela ; Julian R Seward; Julian R Seward (jseward@acm.org); Julian Seward; Julian Seward ; Julianne Frances Haugh; Kaarle Ritvanen; Kai Germaschewski; KaiGai Kohei; Karl M. Hegbloom; Kay Sievers; Kayvan Aghaiepour and David MacKenzie; Kevin Cernekee; Khalid Aziz; Larry Doolittle; Larry Doolittle ; Lasse Collin ; Lasse Collin Igor Pavlov ; Laurence Anderson; Lauri Kasanen; Lennert Buytenhek; Leonid Lisovskiy ; Lineo, inc.; Lineo, inc. and John Beppu; Lineo, inc. and Mark Whitley; Linus Torvalds; Linux International; Linux International. I've; Loic Grenie; LoveSy; Magnus Damm; Maintainer Gennady Feldman ; Maksym Kryzhanovskyy; Malek Degachi; Manuel Novoa III; Manuel Novoa III (mjn3@codepoet.org); Manuel Novoa III and Vladimir Oleynik; Marc Leeman; Marek Becka; Marek Michalkiewicz ; Marek Polacek; Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG; Mark Adler ; Mark Lord; Mark Whitley; Mark Whitley ; Markus Franz Xaver Johannes Oberhumer; Markus Gothe; Martin Cracauer cracauer @ cons.org; Martin Habets ; Matheus Izvekov; Matt Kraai; Matt Krai; Matt Mackall; Matt Mackall ; Matteo Croce; Matteo Croce Hacked; Matthew Dillon; Matthew Dillon Vladimir Oleynik; Matthew Ramsay Chris Trew; Maxime Coste ; Michael Habermann Copyrigjt; Michael K. Johnson; Michael Meskes; Michael Opdenacker; Michele Sanges; Michiel Huisjes; MicroWalt Corporation; Mike Frysinger; Miquel van Smoorenburg; Mrs. Brisby ; Natanael Copa; Nicholas Miell; Nico Erfurth ; Nokia Corporation; Norbert Lange; Nuovation System Designs, LLC; Odd Arild Olsen (oao at fibula dot no); Pascal Bellard; Pascal Bellard ; Patricia Muscalu; Paul Fox ; Paul Mackerras; Paul Mundt; Paul Sheer; Pedro Roque ; PeerSec Networks; Pere Orga; Pere Orga ; Peter Hanecak; Peter Orbaek ; Peter Willis; Prentice Hall; Quy Tonthat ; RSA Data Security, Inc.; Ralf Baechle ; Randolph Chung; Randy Dunlap; Regents of the University of California; Remy Card Laboratoire MASI - Institut Blaise Pascal; Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris; Rewritten by Vladimir Oleynik; Richard Gooch; Richard Henderson ; Richard Stallman; Rick Sladkey; Rob Landley; Rob Landley (rob@landley.net); Rob Landley , Joey Hess; Rob Sullivan; Robert Griebl; Robert Griebl ; Robert Sullivan; Roberto A. Foglietta; Roger Binns; Roger Knecht; Rolf Fokkens; Romain Lievin; Roman Zippel; Russ Dill; Russ Dill ; S-G Bergh; Sam Ravnborg; Savio Lam (lam836@cs.cuhk.hk); Sergey Naumov; Spencer Thomas, Joe Orost, James Woods, Jim McKie, Steve Davies, Ken Turkowski, Dave Mack and Peter Jannesen; Spencer W. Thomas; Stefan Rompf; Stefan Seyfried; Stephane Billiart; Sterling Huxley; Sterling Huxley ; Steve Reid ; Steven J. Hill; Stuart Herbert (S.Herbert@shef.ac.uk); Stuart Hughes; Sven Oliver SvOlli Moll; Sven Rudolph ; Sven-Goran Bergh; The Regents of the University of California; The ht://Dig Group; Theodore Ts'o; Theodore Ts'o, ; Theodore Ts'o. Also; Thomas Lundquist ; Tim Riker ; Timo Teras; Tito Ragusa; Tito Ragusa ; Tobias Klauser; Todd C. Miller; Tomi Ollila; Tomi Ollila ; Tony J. White; Ulrich Drepper ; Ulrich Drepper ; University of Delaware; Uwe Ohse; Vernon Hoxie; Vladimir Dronnikov; Vladimir Dronnikov ; Vladimir N. Oleynik; Vladimir N. Oleynik ; Vladimir Oleynik; Vladimir Oleynik ; W. Michael Petullo; Werner Almesberger; William Roadcap (roadcap@cfw.com); William Roadcap (roadcapw@cfw.com); YU Jincheng; Yang Xiaopeng; Yoichi Hariguchi ; Yoshinori Sato; Yuichi Nakamura; Yuichi Nakamura ; content Ken A; correct; dhankins@isc.org; glenn; hobbit@avian.org; hush. Also; many authors; may safely be consumed; spoon; the Free Software Foundation; the University of California, Berkeley and its contributors; the University of California, Lawrence Berkeley Laboratory and its contributors; whole; wolfSSL Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/busybox/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/P7yMwT5E24LWUkgSCDf-GO13hHS_9uD00mSLjdwC2VQ/busybox-~-30.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://busybox.net/", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/busybox", "versionInfo" : "1.37.0-r30" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-ca-certificates-bundle-20251003-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright (c) Daniel Stenberg, \nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 2013-2014 Timo Teras \n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/ca-certificates-bundle/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/ca-certificates-bundle@20251003-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/icWtBOdXE3ZIrSVCZHaNGbITrg2znnhQQiyd2fBQkvc/ca-certificates-20251003-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", "licenseConcluded" : "(MPL-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/ca-certificates-bundle", "versionInfo" : "20251003-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-ca-certificates-20251003-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright (c) Daniel Stenberg, \nCopyright (c) 2005,O WISeKey,C CH Not Valid\nCopyright (c) 2005,O WISeKey,C CH Serial\nCopyright (c) 2013-2014 Timo Teras \n(c) 2006 Entrust, Inc\n(c) 2009 Entrust, Inc. - for\n(c) 1999 Entrust.net", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/ca-certificates/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/ca-certificates@20251003-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/iEV4sqDb5bSg5XC-LDXZ0kyd6OxRLIj4yFjigMoia94/ca-certificates-20251003-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", "licenseConcluded" : "(MPL-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/ca-certificates", "versionInfo" : "20251003-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-env-9.8-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves \nCopyright (c) 2001 Anthony Towns \nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2025 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2025 Free Software Foundation, Inc. Francois Pinard , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome , 2025\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. \nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson \nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper \nCopyright d Free Software Foundation, Inc.\nRafal Maszkowski 1996-2001, 2003-2025\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils-env/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/coreutils-env@9.8-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/yP_0OUxwS4qv_7fjbY01GdQUgDZtmmcBoRP-6Tv_IKE/coreutils-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.gnu.org/software/coreutils/", "licenseConcluded" : "GPL-3.0-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/coreutils-env", "versionInfo" : "9.8-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-fmt-9.8-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves \nCopyright (c) 2001 Anthony Towns \nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2025 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2025 Free Software Foundation, Inc. Francois Pinard , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome , 2025\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. \nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson \nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper \nCopyright d Free Software Foundation, Inc\nCopyright d Free Software Foundation, Inc. GCC Alpine\nRafal Maszkowski 1996-2001, 2003-2025\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils-fmt/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/coreutils-fmt@9.8-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SvUWVTuiFjE0wZVdJuawFzf-nanVA_mmqJv18T5BlAc/coreutils-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.gnu.org/software/coreutils/", "licenseConcluded" : "GPL-3.0-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/coreutils-fmt", "versionInfo" : "9.8-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-sha512sum-9.8-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves \nCopyright (c) 2001 Anthony Towns \nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2025 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2025 Free Software Foundation, Inc. Francois Pinard , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome , 2025\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. \nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson \nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper \nCopyright d Free Software Foundation, Inc\nCopyright d Free Software Foundation, Inc. 0123456789abcdef GCC Alpine\nRafal Maszkowski 1996-2001, 2003-2025\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils-sha512sum/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/u58wfqJhp43LYZyIXRQglzqA4hdmqIQBk8Xy06AKNOI/coreutils-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/coreutils-sha512sum@9.8-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.gnu.org/software/coreutils/", "licenseConcluded" : "GPL-3.0-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/coreutils-sha512sum", "versionInfo" : "9.8-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-coreutils-9.8-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright Free Software Foundation\nCopyright 1990-2005, 2007-2009, 2025 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref https://fsf.org\nCopyright 2012, Samuel Neves \nCopyright (c) 2001 Anthony Towns \nCopyright (c) 1997, 1998, 1999 Colin Plumb\nCopyright (c) 1984 David M. Ihnat\nCopyright (c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2004-2006, 2009-2025 Free Software Foundation, Inc. Adapted from Simon Josefsson's\nCopyright (c) 1990-2025 Free Software Foundation, Inc. Francois Pinard , 1988\nCopyright (c) 2001 Free Software Foundation, Inc. Hasbullah Bin Pit , 2003\nCopyright (c) 2000, 2001, 2002 Free Software Foundation, Inc. Jacobo Tarrio , 2000, 2001, 2002\nCopyright (c) 2000 Free Software Foundation, Inc. Toomas Soome , 2025\nCopyright (c) 2002, 2005, 2006, 2007, 2008, 2010, 2011, 2012, 2013, 2014, 2016, 2017, 2018 Free Software Foundation, Inc. Translated\nCopyright (c) 2007 Free Software Foundation, Inc. \nCopyright (c) 1994, 1995, 1997, 1998, 1999, 2000 H. Peter Anvin\nCopyright (c) 1995 Ian Jackson \nCopyright (c) 1983 Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996,1999 by Internet Software Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper \nCopyright d Free Software Foundation, Inc.\nRafal Maszkowski 1996-2001, 2003-2025\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007\n(c) 1990-2005, 2007-2009 Acme, Inc.\n(c) 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.\n(c) 1989, 2010 Free Software Foundation, Inc. Undisturbed\n(c) Internal macro Tests\n(c) 1987, 1988, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009, 2010 Free Software Foundation\n(c) 87, 88, 1991, 1992, 1993, 1994, 1995, 1996, 1997,@ Rem 98, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,@ Rem 2009 Free Software Foundation\n(c) TRANSLATORS Translate (c)\n(c) 1998 en2010 Free Software Foundation, Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/coreutils/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/SSSAB3MVZeoMG7Q39IKz7iZRI9rxiRMD6kuI6pTHlB4/coreutils-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/coreutils@9.8-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.gnu.org/software/coreutils/", "licenseConcluded" : "GPL-3.0-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/coreutils", "versionInfo" : "9.8-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-freetype-2.14.1-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2006-2013 Adobe Systems Incorporated\nCopyright 2000 Computing Research Labs, New Mexico State University\nCopyright 2007 Dmitry Timoshkov\nCopyright 2001-2002, 2011 Francesco Zappa Nardelli\nCopyright 1992-2025 Free Software Foundation, Inc.\nCopyright 2003 Huw D M Davies for Codeweavers\nCopyright 1995-2024 Mark Adler\nCopyright 1990, 1994, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 2000-2001, 2002 by Francesco Zappa Nardelli\nCopyright 2013 by Google, Inc. Google Author(s) Behdad Esfahbod\nCopyright 2010-2019 by Joel Klinghed\nCopyright 2003 by Masatake YAMATO and Redhat K.K.\nCopyright 2 2016-2023 by Werner Lemberg and Charlie Jiang \nCopyright 2000 by foobar\nCopyright 2005-2022 by write David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1999-2025\nCopyright (c) 2001 Alexander Peslyak\nCopyright (c) 2015 Andreas Lubbe\nCopyright (c) 2004-2019, 2021, 2023-2024 Bootstrap Authors\nCopyright (c) 2010, 2017 Craig A. Berry\nCopyright (c) 2011 Daniel Richard G. \nCopyright (c) 2009 Francesco Salvestrini \nCopyright (c) Free Software Foundation Inc.\nCopyright (c) 2011,2012 Google, Inc.\nCopyright (c) 2012, Intel Corporation\nCopyright (c) 1995-2017 Jean-loup Gailly\nCopyright (c) 1995-2024 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright (c) 2019 Marc Stevens \nCopyright (c) 1995-2003, 2010 Mark Adler\nCopyright (c) 2016-2025 Martin Donath \nCopyright (c) Microsoft Corporation\nCopyright (c) 2020 Oliver Nightingale\nCopyright (c) 2007,2008,2009 Red Hat, Inc.\nCopyright (c) 2004 Scott James Remnant \nCopyright (c) 2019 Sony Interactive Entertainment Inc.\nCopyright (c) 2008 Steven G. Johnson \nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2015 Tiancheng Timothy Gu\nCopyright (c) 2008 Tim Toolan \nCopyright (c) 1994 X Consortium\nCopyright (c) 2004-2025 by Albert\nCopyright (c) 1999-2025 by Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2018-2025 by Armin Hasitzka, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2025 by Behdad Esfahbod\nCopyright (c) 2022-2025 by Charlie Jiang\nCopyright (c) 2021-2025 by D. Turner, R.Wilhelm, W. Lemberg, and Anuj Verma\nCopyright (c) 1996-2025 by D. Turner, R.Wilhelm, and W. Lemberg\nCopyright (c) 2024-2025 by David Saltzman\nCopyright (c) 2007-2025 by David Turner\nCopyright (c) 2018-2025 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2025 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams, and Dominik Rottsches\nCopyright (c) 2022-2025 by David Turner, Robert Wilhelm, Werner Lemberg, and Charlie Jiang\nCopyright (c) 1996-2025 by David Turner, Robert Wilhelm, Werner Lemberg, and Detlef Wuerkner\nCopyright (c) 1996-2025 by David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner\nCopyright (c) 1996-2025 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2025 by David Turner, Robert Wilhelm, Werner Lemberg and George Williams\nCopyright (c) 2022-2025 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2025 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2005-2025 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2007-2025 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2025 by Derek Clegg and Michael Toftdal\nCopyright (c) 2000 by Francesco Zappa Nardelli\nCopyright (c) 2005, 2007, 2008, 2013 by George Williams\nCopyright (c) 2013-2025 by Google, Inc.\nCopyright (c) 2010-2025 by Joel Klinghed\nCopyright (c) 1999-2025 by Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 1996-2025 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2025 by Masatake YAMATO, Redhat K.K., David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2004-2025 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2001-2025 by Michael Pfeiffer\nCopyright (c) 2018-2025 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2025 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2025 by Rahul Bhalerao \nCopyright (c) 2002-2025 by Roberto Alameda\nCopyright (c) 1991-2025 by Stichting Mathematisch Centrum, Amsterdam, The Netherlands\nCopyright (c) 1999-2025 by The FreeType Development Team - https://freetype.org\nCopyright (c) 2015-2025 by Werner Lemberg\nCopyright (c) 2005-2025 by Werner Lemberg and Detlef Wurkner\nCopyright (c) 2000, 2001, 2004-2007 by foobar\nCopyright (c) 1996-2025 by suzuki toshiya, D. Turner, R.Wilhelm, and W. Lemberg\nCopyright (c) 2006-2025 by suzuki toshiya, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2004-2025 by suzuki toshiya, Masatake YAMATO, Red\nCopyright (c) 2004-2025 by suzuki toshiya, Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2000-2021 foobar\nCopyright (c) 2019 nyorain Distributed\nCopyright 2025 https://www.freetype.org/license.html' The FreeType Project\n(c) Zeno Rocha\ncopyright (c) The FreeType Project (https://freetype.org)\ncopyrighted by the Free Software Foundation\n\nAuthors: $! David Turner, Robert Wilhelm, and Werner Lemberg; ; ; ; ; Adam Twardoch ; Adobe Systems Incorporated; Akaki Razmadze ; Akiem Helmling ; Akira Kakuto ; Alan Coopersmith ; Albert; Albert Astals Cid ; Alexander Hedges ; Alexander Peslyak; Alexei Podtelezhnikov ; Alexey Kryukov ; Andreas Lubbe; Andreas Radke ; Andrey Panov ; Anthony Fok ; Antoine Leca; Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg; Antony Lee ; Anuj Verma; Armin Hasitzka, David Turner, Robert Wilhelm, and Werner Lemberg; Behdad Esfahbod; Behdad Esfahbod Google; Behdad Esfahbod, Matthias Clasen Google; Ben Wagner ; Bob Taylor ; Bootstrap Authors; Boris Letocha ; Brad Dunzer ; Celine PILLET ; Charlie Jiang; Chi Nguyen ; Chris Evans ; Chris Liddell ; Colin Walters ; Computing Research Labs, New Mexico State University; Craig A. Berry; Craig White ; D. Turner, R.Wilhelm, W. Lemberg, and Anuj Verma; D. Turner, R.Wilhelm, and W. Lemberg; Dan Liddell ; Daniel Glockner ; Daniel Richard G.; Dave Arnold ; David Bevan; David Bevan ; David Capello ; David Kastrup ; David Osborn ; David Sachitano and Lawrence Coopet; David Saltzman; David Saltzman ; David Turner; David Turner ; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg and Detlef Wurkner; David Turner, Robert Wilhelm, Werner Lemberg and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, George Williams, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and Charlie Jiang; David Turner, Robert Wilhelm, Werner Lemberg, and Detlef Wuerkner; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; David Wimsey ; Del Merritt ; Dennis Felsing ; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Detlef Wurkner ; Dirck Blaskey ; Dmitry Timoshkov; Doug Felt ; Francesco Salvestrini; Francesco Zappa Nardelli; Francesco Zappa Nardelli ; Free Software Foundation Inc.; Free Software Foundation, Inc.; FreeType team; G.W. Lucas ; Gary V. Vaughan; George Williams; George Williams ; Google, Inc.; Google, Inc. Google Author(s) Behdad Esfahbod; Gordon Childs ; Gordon Matzigkeit; Gordon Matzigkeit ; Henry Maddocks ; Herbert Duerr ; Hin-Tak Leung ; Hrant H Papazian ; Huib-Jan Imbens ; Huw D M Davies for Codeweavers; Ian Britten ; Ian Brown ; Ingmar Sittl ; Intel Corporation; Ismail Donmez ; Ivan Nincic ; J. Ali Harlow ; Jakub Bogusz ; James Cloos ; Jason Owen ; Jean-loup Gailly; Jean-loup Gailly and Mark Adler; Jean-loup Gailly, Mark Adler; Jeremy Manson ; Jjgod Jiang ; Joel Klinghed; Johannes Walther ; John Cary ; John Emmas ; John Emmas ; Johnson Y. Yan ; Jorg Gunnewig ; Jouk Jansen ; Just van Rossum; Just van Rossum ; Just van Rossum, Antoine Leca, David Turner, Robert Wilhelm, and Werner Lemberg; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; Karsten Lucke ; Keith Packard; Kevin Blenkinsopp ; Khaled Hosny ; Kirill Tishin ; Knut St. Osmundsen ; Kostya Serebryany ; Krzysztof Kotlenga ; Krzysztof Kowalczyk ; Marc Schonefeld ; Marc Stevens; Marco Wertz ; Marek Kasik ; Mark Adler; Markus Trippelsdorf ; Martin Donath; Martin P.J. Zinser zinser@decus.de; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; Masatake YAMATO, Redhat K.K, David Turner, Robert Wilhelm, and Werner Lemberg; Masatake YAMATO, Redhat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; Mateusz Jurczyk ; Michael Pfeiffer; Michal Nowakowski ; Mickey Gabel ; Microsoft Corporation; Mikey Anbary ; Mojca Miklavec ; Nickolas George ; Nicolas Rougier ; Niels Boldt ; Nigel Tao ; Nikhil Ramakrishnan ; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; Nikolaus Waxweiler ; Nikolay Sivov ; Ning Dong ; Nis Martensen ; Oliver Nightingale; Oran Agra ; Oran Agra and Mickey Gabel; Ozkan Sezer ; Patrick Thomas ; Paul Watson ; Peter Breitenlohner ; Peter Weilbacher ; Rahul Bhalerao; Ralf S. Engelschall ; Red Hat, Inc.; Richard COOK ; Robert Marki ; Roberto Alameda; Roberto Alameda ; Robin Watts ; Roy Tam ; Sander van der Wal ; Scott James Remnant; Sean McBride; Sean McBride ; Sebastien Leix ; Sender Ghost ; Shailesh Mistry ; Shao Yu Zhang ; Sony Interactive Entertainment Inc.; Spencer Garrett ; Stephan T. Lavavej ; Stephen Fisher ; Steve Hartwell ; Steve Langasek ; Steven G. Johnson; Stichting Mathematisch Centrum, Amsterdam, The Netherlands; Stuart Gill and Behdad Esfahbod; Sven Neumann sven@gimp.org; Sylvain Beucler ; TJ Holowaychuk; Tavis Ormandy ; Taylor Holberton ; The FreeType Development Team; The FreeType Project; The Open Group; Tiancheng Timothy Gu; Tim Toolan; Titus Nemeth ; Tobias Wolf ; Tom Bishop ; Tony J. Ibbs ; Tony Smith ; Truc Truong ; Vaibhav Nagarnaik ; Victor Stinner ; Werner Lemberg; Werner Lemberg ; Werner Lemberg and Charlie Jiang; Werner Lemberg and Detlef Wurkner; Wojciech Mamrak ; X Consortium; YAMANO-UCHI Hidetoshi ; YAMATO Masatake and SUZUKI Toshiya; Yu Lei ; Zeno Rocha; Zhang Jun Zhi <418092625@qq.com>; chris@dokein.co.uk; content FreeType; foobar; gzip. Files; just@letterror.com; just@letterror.com. Heavily Fixed; mpsuzuki, George Williams, and Sean McBride; nyorain Distributed; suyu@cooee.cn; suzuki toshiya, D. Turner, R.Wilhelm, and W. Lemberg; suzuki toshiya, David Turner, Robert Wilhelm, and Werner Lemberg; suzuki toshiya, Masatake YAMATO, Red; suzuki toshiya, Masatake YAMATO, Red Hat K.K., David Turner, Robert Wilhelm, and Werner Lemberg; suzuki toshiya. On; the Free Software Foundation; the FreeType team; the LilyPond; write David Turner, Robert Wilhelm, and Werner Lemberg", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/freetype/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6imbNR5MmA95wpHGqxXS1wFlpLK6PA3XaaZd3CUBfbE/freetype-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/freetype@2.14.1-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.freetype.org/", "licenseConcluded" : "FTL", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/freetype", "versionInfo" : "2.14.1-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-giflib-5.2.2-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright (c) 1997 Eric S. Raymond\nCopyright (c) 2008 Otto Moerbeek \nCopyright property of CompuServe Incorporated\n(c) CompuServe Incorporated, 1987\n(c) 1987, 1988, 1989, 1990 Copyright CompuServe Incorporated Columbus, Ohio\n(c) Copyright 1992 Eric Raymond\n(c) Copyright 1989 Gershon Elber\ncopyrighted property of CompuServe Incorporated\ncopyright property of CompuServe Incorporated. Only CompuServe Incorporated", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/giflib/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sXFsQoJh6-QNyLmyxtK8zQnyxHU9Or3m6gcTlZ2N2rk/giflib-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/giflib@5.2.2-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://sourceforge.net/projects/giflib/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/giflib", "versionInfo" : "5.2.2-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-java-cacerts-1.1-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Maintainer Natanael Copa ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/community/java-cacerts/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s81LElXcnAd15xrmk1IkmcdRL1sPN9VAD1dL8H8SNA4/java-cacerts-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/java-cacerts@1.1-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://git.alpinelinux.org/aports/tree/community/java-cacerts", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/java-cacerts", "versionInfo" : "1.1-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-java-common-1.0-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Contributor Timo Teras \nMaintainer Timo Teras ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/community/java-common/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k3MlW3D_cu-WcWHA2K9o76-Nrcvfm4lowGSCKNpcPGI/java-common-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/java-common@1.0-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://git.alpinelinux.org/aports/", "licenseConcluded" : "GPL-2.0-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/java-common", "versionInfo" : "1.0-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-lcms2-2.17-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2018 Free Software Foundation, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Daniel Richard G. \nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. \nCopyright (c) 2013 Gabriele Svelto \nCopyright (c) 2008 Guido U. Draheim \nCopyright (c) HP 2007\nCopyright (c) 2011 Maarten Bosmans \nCopyright (c) 2019 Marc Stevens \nCopyright (c) 1998-2003 Marti Maria\nCopyright (c) 1998-2010 Marti Maria, Ignacio Ruiz de Conejo\nCopyright (c) 2023 Marti Maria Saguer\nCopyright (c) 2014 Mike Frysinger \nCopyright (c) 2009 Richard Hughes desc IBM France\nCopyright (c) 2008 Steven G. Johnson \nCopyright (c) 1994 X Consortium\nCopyright property of CompuServe Incorporated\nCopyright 2001, softSurfer (www.softsurfer.com)\ncopyright by X Consortium\ncopyright by the Free Software Foundation\ncopyright (c) 1991-2013, Thomas G. Lane, Guido Vollbeding\n\nAuthors: Alexandre Oliva ; Bob Friesenhahn; Bootstrap Authors; CompuServe Incorporated; Daniel Richard G.; Fran,cois Pinard; Free Software Foundation, Inc.; Gabriele Svelto; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Guido U. Draheim; HP; Maarten Bosmans; Marc Stevens; Marti Maria; Marti Maria Saguer; Marti Maria, Ignacio Ruiz de Conejo; Mike Frysinger; Paul Miller; Richard Hughes desc IBM France; Scott James Remnant; Shiju p. Nair , for the Debian project; Steven G. Johnson; Thomas G. Lane, Guido Vollbeding; Tom Tromey ; X Consortium; contributors, mostly Artifex Fixed; softSurfer; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/lcms2/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/lcms2@2.17-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BD_SBssDOIXR8rHN0jwBs_sWqy0-cMiuNxvg0Yv_zO0/lcms2-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.littlecms.com", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/lcms2", "versionInfo" : "2.17-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libapk-3.0.3-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1997 Massachusetts Institute of Technology\nCopyright (c) 1998-2004 Dag-Erling Coidan Smorgrav\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2008 Joerg Sonnenberger \nCopyright (c) 2024 Jonas Jelonek \nCopyright (c) 2005-2008 Natanael Copa \nCopyright (c) 2020 Noel Kuntze \nCopyright (c) 2011 Rich Felker\nCopyright (c) 2003 Thomas Klausner \nCopyright (c) 2008-2011 Timo Teras \nCopyright (c) 2017 William Pitcock \nCopyright (c) 2025 apk-tools authors\nCopyright (c) 2023 q66 \n(c) 1994-2012 Lua.org, PUC-Rio\ncopyrighted by the Free Software Foundation\n\nAuthors: Dag-Erling Coidan Smorgrav; Free Software Foundation, Inc.; Joerg Sonnenberger; Jonas Jelonek; Lua.org, PUC-Rio; Massachusetts Institute of Technology; Natanael Copa; Noel Kuntze ; Rich Felker; Thomas Klausner; Timo Teras; William Pitcock; apk-tools authors; q66; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libapk/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libapk@3.0.3-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/puN-QsUJUW20DoIMcZ6zd4_SMQSflKU7mJlfpZND-hY/apk-tools-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://gitlab.alpinelinux.org/alpine/apk-tools", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libapk", "versionInfo" : "3.0.3-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libattr-2.5.2-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright (c) 2007 Andreas Gruenbacher \nCopyright (c) 2002 Andreas Gruenbacher \nCopyright (c) 2001-2002 Andreas Gruenbacher \nCopyright (c) 2002, 2003 Andreas Grunbacher \nCopyright (c) 2007 Antonio Trueba \nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2006 Daniel Nylander \nCopyright (c) 2015 Dmitry V. Levin \nCopyright (c) 2019 Frans Spiesschaert \nCopyright (c) 2007 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991, 1999 Free Software Foundation, Inc.\nCopyright (c) 2004 Free Software Foundation, Inc. Jakub Bogusz , 2004-2022\nCopyright (c) 2019, French l10n team \nCopyright (c) 2005 Guilhelm Panaget \nCopyright (c) 2004 Luk Claes \nCopyright (c) 2008 Petr Pisar \nCopyright (c) 2000-2002,2004 Silicon Graphics, Inc.\nCopyright (c) 1994 X Consortium\nCopyright (c) 1995-1997, 2000-2007, 2009-2010 by Ulrich Drepper \ncopyrighted by the Free Software Foundation\n\nAuthors: Alexandre Oliva ; Andreas Gruenbacher; Andreas Grunbacher; Antonio Trueba; Bootstrap Authors; Brandon Philips ; Daniel Nylander; Dmitry V. Levin; Fran,cois Pinard; Frans Spiesschaert; Free Software Foundation; Free Software Foundation, Inc.; Free Software Foundation, Inc. Jakub Bogusz; French l10n team; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Guilhelm Panaget; Luk Claes; Peter Rosin ; Petr Pisar; Scott James Remnant; Silicon Graphics, Inc.; Tom Tromey ; Ulrich Drepper; Ulrich Drepper ; Ulrich Drepper , Bruno Haible ; Ulrich Drepper , Bruno Haible , Macro; X Consortium; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libattr/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libattr@2.5.2-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Bvp5CB5QuxeN4dePTCntMM3BgQ4zS90e58_xZJXEObw/attr-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://savannah.nongnu.org/projects/attr", "licenseConcluded" : "LGPL-2.1-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libattr", "versionInfo" : "2.5.2-r2" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libbsd-0.12.2-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2022 Free Software Foundation, Inc.\nCopyright 2013 John-Mark Gurney \nCopyright 2002 Niels Provos \nCopyright (c) 2009 Advanced Computing Technologies LLC\nCopyright (c) 2005 Aurelien Jarno\nCopyright (c) 2014 Bob Beck \nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2014 Brent Cook \nCopyright (c) 1997 Christos Zoulas\nCopyright (c) 2005 Colin Percival\nCopyright (c) 2007 Dag-Erling Coidan Smorgrav\nCopyright (c) 2007-2009 Dag-Erling Coidan Smorgrav\nCopyright (c) 2008 Damien Miller \nCopyright (c) 1996 David Mazieres \nCopyright (c) 2001 Dima Dorfman\nCopyright (c) 2007 Eric Anderson \nCopyright (c) 2018 Facebook, Inc.\nCopyright (c) 2001 FreeBSD Inc.\nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2014 Google Inc.\nCopyright (c) 2011, 2013, 2017, 2020 Guillem Jover\nCopyright (c) 2004-2024 Guillem Jover \nCopyright (c) 2005, 2008-2012, 2019 Guillem Jover \nCopyright (c) 2011 Guillem Jover \nCopyright (c) 2012 Guillem Jover \nCopyright (c) 2015, 2022 Guillem Jover \nCopyright (c) 2005 Hector Garcia Alvarez\nCopyright (c) 2013 John-Mark Gurney \nCopyright (c) 2009 Jukka Ruohonen \nCopyright (c) 1992 Keith Muller\nCopyright (c) 1999 Kelly Yancey \nCopyright (c) 1998, M. Warner Losh \nCopyright (c) 2013 Markus Friedl \nCopyright (c) 2015 Michael Felt \nCopyright (c) 2001 Mike Barcroft \nCopyright (c) 2002 Mike Barcroft \nCopyright (c) 2002 Networks Associates Technology, Inc.\nCopyright (c) 2002 Niels Provos \nCopyright (c) 2004 Otto Moerbeek \nCopyright (c) 2008, 2010-2011, 2016-2017 Otto Moerbeek \nCopyright (c) 2005 Pawel Jakub Dawidek \nCopyright (c) 2007 Pawel Jakub Dawidek \nCopyright (c) 2014 Pawel Jakub Dawidek \nCopyright (c) 1995 Peter Wemm \nCopyright (c) 1996 Peter Wemm \nCopyright (c) 2006 Robert Millan\nCopyright (c) 2004 Ted Unangst\nCopyright (c) 2004 Ted Unangst and Todd Miller\nCopyright (c) 1994, 1997-2000, 2002, 2008, 2010, 2014 The NetBSD Foundation, Inc.\nCopyright (c) 1999, 2005 The NetBSD Foundation, Inc.\nCopyright (c) 2014 The NetBSD Foundation, Inc.\nCopyright (c) 1980, 1982, 1986, 1989-1994 The Regents of the University of California\nCopyright (c) 1989, 1993 The Regents of the University of California\nCopyright (c) 2014 Theo de Raadt \nCopyright (c) 2002 Thomas Moestl \nCopyright (c) 1998, 2000-2002, 2004-2005, 2007, 2010, 2012-2015 Todd C. Miller \nCopyright (c) 2004-2005, 2007, 2010, 2012-2015, 2017-2018 Todd C. Miller \nCopyright (c) UNIX System Laboratories, Inc.\nCopyright (c) 2010 William Ahern\nCopyright (c) 1994 X Consortium\nCopyright (c) 1996 by Internet Software Consortium\n(c) UNIX System Laboratories, Inc.\n\nAuthors: Aaron Dierking ; Adam Lackorzynski ; Advanced Computing Technologies LLC; Alexander Miller ; Alexandre Oliva ; Aurelien Jarno; Aurelien Jarno ; Aurelien Jarno ; Baruch Siach ; Benjamin Baier ; Bob Beck; Bootstrap Authors; Brent Cook; Brent Cook ; Callum Davies ; Callum Farmer ; Callum Farmer ; Casper Dik ; Christian Svensson ; Christos Zoulas; Colin Percival; Colin Plumb; Dag-Erling Coidan Smorgrav; Damien Miller; David Mazieres; Dima Dorfman; Duncan Overbruck ; Eric Anderson; Eric Smith ; Fabrice Fontaine ; Facebook, Inc.; Faidon Liambotis ; Florian Weimer ; Fran,cois Pinard; Frank Schaefer ; Free Software Foundation, Inc.; FreeBSD Inc.; Gary V. Vaughan; Gerardo Exequiel Pozzi ; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit ; Guilherme Janczak ; Guillem Jover; Guillem Jover ; Hanno Boeck ; Hector Garcia ; Hector Garcia Alvarez; Helmut Grohne ; Hirokazu Takata ; Igor Gnatenko ; Internet Software Consortium; Jakub Wilk ; James Clarke ; James Cowgill ; Jason Duerstock ; John H. Baldwin ; John-Mark Gurney; Jukka Ruohonen; Kamil Rytarowski; Keith Muller; Kelly Yancey; Kevin McCarthy ; Khem Raj ; Lukas Fleischer ; M. Warner Losh; Marek Vasut ; Markus Friedl; Matthew Dempsky; Michael Felt; Michael Shigorin ; Mike Barcroft; Networks Associates Technology, Inc.; Niels Provos; Nobuhiro Iwamatsu ; Otto Moerbeek; Paul Vixie; Pawel Jakub Dawidek; Peter Rosin ; Peter Wemm; Petr Salinger ; Poul-Henning Kamp; Robert Millan; Robert Millan ; Robert Millan ; Rosen Penev ; Sam James ; Scott James Remnant; Sebastian ; Seth R Johnson ; Strake ; Szabolcs Nagy ; Ted Unangst; Ted Unangst and Todd Miller; The NetBSD Foundation, Inc.; The Regents of the University of California; Theo de Raadt; Thomas Moestl; Thorsten Glaser ; Tn RSA Data Security, Inc.; Todd C. Miller; Tom Tromey ; UNIX System Laboratories, Inc.; Victor Westerhuis ; WANG Xuerui ; William Ahern; William Ahern ; X Consortium; cptpcrd ; the FreeBSD Project", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libbsd/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libbsd@0.12.2-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eeRXl4GKcGdtB0aJX6WFO9_d3JEwByI8QWIFEkjVmIM/libbsd-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://libbsd.freedesktop.org/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libbsd", "versionInfo" : "0.12.2-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libbz2-1.0.8-r6-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1996-2011 Glyph & Cog, LLC\nCopyright (URW)++,Copyright 1999\nCopyright (c) 1997, 2009 American Mathematical Society\nCopyright (c) 1996-2019 Julian Seward \nCopyright (c) 1996-2019 by Julian Seward\nCopyright \ncopyright (c) 1996-2019 Julian R Seward\ncopyright (c) Julian Seward", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libbz2/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JQvQnfWjJ8JasMKmmkBB2MvwwC0-bRoG2HQ9PViTJlk/bzip2-~-6.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://sourceware.org/bzip2/", "licenseConcluded" : "bzip2-1.0.6", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libbz2", "versionInfo" : "1.0.8-r6" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libcrypto3-3.5.5-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2004-2014, Akamai Technologies\nCopyright 2017 BaishanCloud\nCopyright 2014 Cryptography Research, Inc.\nCopyright 2011 Google Inc.\nCopyright IBM Corp. 2018\nCopyright 2013 M. J. Dominus\nCopyright 2006 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright 2005 Nokia\nCopyright Patrick Powell 1995\nCopyright 2019 Red Hat, Inc.\nCopyright 2017 Ribose Inc.\nCopyright 2012, Samuel Neves \nCopyright Siemens AG 2015-2019\nCopyright 1998-2025 The OpenSSL Project Authors\nCopyright 2016 VMS Software, Inc.\nCopyright 1998-$YEAR The OpenSSL Authors\nCopyright (c) 2007\nCopyright (c) 2008 Andy Polyakov \nCopyright (c) 2023, Christoph Mullner \nCopyright (c) 2015 CloudFlare, Inc.\nCopyright (c) 2012-2014 Daniel J. Bernstein\nCopyright (c) 2004, EdelKey Project\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1989 Free Software Foundation, Inc.\nCopyright (c) 2022, Hongren (Zenithal) Zheng \nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2012-2016 Jean-Philippe Aumasson\nCopyright (c) 2023, Jerry Shih \nCopyright (c) 2004 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2017 National Security Research Institute\nCopyright (c) 2006, Network Resonance, Inc.\nCopyright (c) 2019, Oracle and/or its affiliates\nCopyright (c) 2023, Phoebe Chen \nCopyright (c) 2011, RTFM, Inc.\nCopyright (c) 2004, Richard Levitte \nCopyright (c) 1998-2026 The OpenSSL Project Authors\nCopyright (c) 2002 The OpenTSA Project\nCopyright (c) 2013-2014 Timo Teras \nCopyright (c) 2013 by Mark Jason Dominus \nCopyright 20xx-20yy The OpenSSL Project Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: 1995-$YEAR The OpenSSL Project Authors; 1998-$YEAR The OpenSSL Authors; 1998-$YEAR The OpenSSL Project Authors; 1999-$YEAR The OpenSSL Project Authors; 2000-$YEAR The OpenSSL Project Authors; 2020-$YEAR The OpenSSL Project Authors; 20xx-20yy The OpenSSL Project Authors; ; ; Akamai Technologies; Amitay Isaacs , Martin Schwenke & Alastair D'Silva for the OpenSSL project; Amitay Isaacs and Martin Schwenke for the OpenSSL project; Andy Polyakov; Andy Polyakov ; Antoon Bosselaers; BaishanCloud; Ben Avison ; Christoph Mullner; Christophe Renou and Peter Sylvester, for the EdelKey project; CloudFlare, Inc.; Cryptography Research, Inc.; Daniel J. Bernstein; Danny Tsen ; David S. Miller and Andy Polyakov; EdelKey Project; Emilia Kasper and Peter Schwabe; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; Eric Rescorla ; Fangming Fang ; Free Software Foundation, Inc.; Google Inc.; Hongren (Zenithal) Zheng; IBM Corp.; Intel Corporation; Jean-Philippe Aumasson; Jerry Shih; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); M. J. Dominus; Marc Bevand; Mark Jason Dominus; Mark Jason Dominus, Plover Systems; Michael Schout ; Mike Hamburg; Min Zhou ; NTT (Nippon Telegraph and Telephone Corporation); National Security Research Institute; Netscape Communications; Network Resonance, Inc.; Nokia; Oracle and/or its affiliates; Patrick Powell; Patrick Powell ; Patrick Steuer ; Paulo Barreto; Phoebe Chen; RTFM, Inc.; Red Hat, Inc.; Ribose Inc.; Richard Levitte; Rohan McLure ; Samuel Lee ; Samuel Neves; Sergey Kirillov and Andrey Matyukov; Sergey Kirillov and Andrey Matyukov Intel Corporation; Shay Gueron; Siemens AG; The OpenSSL Project Authors; The OpenTSA Project; Timo Teras; VMS Software, Inc.; Vincent Rijmen; Xiaokang Qian ; Zhiguo Zhou and Wangyang Guo ; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libcrypto3/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2NEo81tqWez4l1xkxqyKMDWvULmki610AvzF8Z-vAY4/openssl-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libcrypto3@3.5.5-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.openssl.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libcrypto3", "versionInfo" : "3.5.5-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libffi-3.5.2-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2008-2025 Anthony Green and Red Hat, Inc.\nCopyright 1985, 1986, 1988, 1990-2024 Free Software Foundation, Inc.\nCopyright (c) 2009, 2010, 2011, 2012 ARM Ltd.\nCopyright (c) 2012 Alan Hourihane\nCopyright (c) 2009 Alan Jenkins \nCopyright (c) 2012 Alexandre K. I. de Mendonca \nCopyright (c) 2012 Alexandre K. I. de Mendonca , Paulo Pizarro \nCopyright (c) 2017-2018 Alexey Kopytov\nCopyright (c) 1998, 2012 Andreas Schwab\nCopyright (c) 2004 Anthony Green\nCopyright (c) 1996-2025 Anthony Green, Red Hat, Inc and others\nCopyright (c) 2008-2025 Anthony Green and Red Hat, Inc.\nCopyright (c) 2005 Axis Communications AB\nCopyright (c) 2002 Bo Thorsen\nCopyright (c) 2002 Bo Thorsen \nCopyright (c) 2004-2019, 2021, 2023-2024 Bootstrap Authors\nCopyright (c) 2009 Bradley Smith \nCopyright (c) 2010 CodeSourcery\nCopyright (c) 1998 Cygnus Solutions\nCopyright (c) 2008 David Daney\nCopyright (c) 2011 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998 Geoffrey Keating\nCopyright (c) 2008 Guido U. Draheim \nCopyright (c) 2000 Hewlett Packard Company\nCopyright (c) 2018-2023 Hood Chatham, Brion Vibber, Kleis Auke Wolthuizen, and others\nCopyright (c) 2013 IBM\nCopyright (c) 2013 Imagination Technologies\nCopyright (c) 2013 Imagination Technologies Ltd.\nCopyright (c) 2003 Jakub Jelinek \nCopyright (c) 2000 John Hornkvist\nCopyright (c) 2018 John Zaitseff \nCopyright (c) 2018-19 John Zaitseff \nCopyright (c) 2020 Kalray\nCopyright (c) 2002, 2003, 2004, 2006, 2008 Kaz Kojima\nCopyright (c) 2011 Kyle Moffett\nCopyright (c) 2011 Maarten Bosmans \nCopyright (c) 2020 Madhavan T. Venkataraman\nCopyright (c) 2008 Matteo Frigo\nCopyright (c) 2015 Michael Knyszek 2015 Andrew Waterman 2018 Stef O'Rear \nCopyright (c) 2015 Michael Petch \nCopyright (c) 2019 Microsoft Corporation\nCopyright (c) 2021 Microsoft, Inc.\nCopyright (c) 2014 Mike Frysinger \nCopyright (c) 2013 Miodrag Vallat. \nCopyright (c) 2022 Oracle and/or its affiliates\nCopyright (c) 2011 Plausible Labs Cooperative, Inc.\nCopyright (c) 2002 Ranjit Mathew\nCopyright (c) 1998, 2001, 2007, 2008, 2011, 2014 Red Hat\nCopyright (c) 1996 Red Hat, Inc.\nCopyright (c) 2004 Renesas Technology\nCopyright (c) 2010 Rhys Ulerich \nCopyright (c) 2002 Roger Sayle\nCopyright (c) 2014 Sebastian Macke \nCopyright (c) 2004 Simon Posnjak\nCopyright (c) 2000 Software AG\nCopyright (c) 2008 Steven G. Johnson \nCopyright (c) 2013 Synopsys, Inc. (www.synopsys.com)\nCopyright (c) 2013 Synposys, Inc. (www.synopsys.com)\nCopyright (c) 2013 Tensilica, Inc.\nCopyright (c) 2013 The\nCopyright (c) 2012, 2016 Thorsten Glaser\nCopyright (c) 2011 Tilera Corp.\nCopyright (c) 2011 Timothy Wall\nCopyright (c) 2014 Tsukasa Oi\nCopyright (c) 1994 X Consortium\nCopyright (c) 2012, 2013 Xilinx, Inc\nCopyright (c) 2022 Xu Chenghua 2022 Cheng Lulu \nCopyright (c) 2009 the Initial Developer\n(c) 2011 Anthony Green\n(c) 2006 Free Software Foundation, Inc.\n(c) 2005-2022 John David Anglin \n(c) 2003-2004 Randolph Chung \n(c) 2008 Red Hat, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: A. Wilcox ; ARM Ltd.; Adam ; Alan Hourihane; Alan Jenkins; Alan Modra ; Alex Gaynor ; Alexander Kanavin ; Alexandre K. I. de Mendonca; Alexandre K. I. de Mendonca , Paulo Pizarro; Alexandre Oliva ; Alexey Kopytov; Alfred Wingate ; Anatoly Trosinenko ; Andre Miras ; AndreRH ; Andreas Bergmeier ; Andreas Krebbel <38103320+Andreas-Krebbel@users.noreply.github.com>; Andreas Schwab; Andreas Schwab ; Andreas Schwab ; Andrew Geissler ; Andrew Haley ; Andrew Pinski ; Anthony Green; Anthony Green ; Anthony Green ; Anthony Green and Red Hat, Inc.; Anthony Green, Red Hat, Inc and others; Axis Communications AB; Berker Peksag ; Bernd Edlinger ; Bill Roberts <152999275+billatarm@users.noreply.github.com>; Bo Thorsen; Bootstrap Authors; Bradley Smith; Brandon Bergren ; Carl Hurd ; Carl Perry ; Cheng Jin ; Chongyun Lee <45286352+licy183@users.noreply.github.com>; Claudiu Zissulescu ; Clement Chigot ; CodeSourcery; Cygnus Solutions; DJ Delorie ; Daiki Ueno ; Daily Price Depot Droid ; Dan Horak ; David Daney; David Schneider ; David Tenty ; David Tenty ; Dominik Vogt ; Dominik Vogt ; Ed Maste; Eddy S. ; Ehsan Akhgari ; Fangrui Song ; Filipe Brandenburger ; Florian ; Florian Weimer ; Fran,cois Pinard; Francis Ricci ; Francisco Boni ; Frederik Seiffert ; Free Software Foundation; Free Software Foundation, Inc.; Gary V. Vaughan; Geoffrey Keating; Gordon Matzigkeit; Gordon Matzigkeit ; Graham Ollis ; Gregory Pakosz ; Gregory Pakosz ; Guido U. Draheim; H.J. Lu ; Hallvard B Furuseth; Hans ; Hans Boehm, HP Labs; Hans-J. Boehm ; Harald van Dijk ; Havard Graff ; Heiher ; Hewlett Packard Company; Hood Chatham ; Hood Chatham ; Hood Chatham, Brion Vibber, Kleis Auke Wolthuizen, and others; IBM; Iain Sandoe ; Iain Sandoe ; Icecream95 ; Icenowy Zheng ; Imagination Technologies; Imagination Technologies Ltd.; Ivan Tadeu Ferreira Antunes Filho ; Ivan Tadeu Ferreira Antunes Filho ; Jakub Jelinek; Jakub Jelinek ; Jakub Kaszycki ; Jakub Wilk ; James Cowgill ; James Greenhalgh ; Jean-Luc Jumpertz ; Jens Timmerman ; Jeremie Knuesel ; Jeremy Huddleston Sequoia ; Jeremy Huddleston Sequoia ; Joerg Sonnenberger ; Johannes Goslar ; John David Anglin; John Ericson ; John Hornkvist; John Ralls ; John Zaitseff; Joseph Myers ; Josh Triplett ; Jules Maselbas <54854023+jmaselbas@users.noreply.github.com>; JupiterRider <60042618+JupiterRider@users.noreply.github.com>; KJ Tsanaktsidis ; Kalray; Kaz Kojima; Ken <21211439+kencu@users.noreply.github.com>; Kentaro Hayashi ; Kevin Bowling ; Khem Raj ; Kleis Auke Wolthuizen ; Kohei Tokunaga <43872416+ktock@users.noreply.github.com>; Konstantin Belousov ; Kresten Krab Thorup ; Kyle Moffett; Kylie McClain ; Landon Fuller ; Landon Fuller ; Lucas Pluvinage ; M. Herdiansyah ; Ma Jun; Maarten Bosmans; Madhavan T. Venkataraman; Madhavan T. Venkataraman <75220914+madvenka786@users.noreply.github.com>; Magnus Granberg ; Makoto Kato ; Marcin Wojdyr ; Marcus Comstedt ; Marcus Shawcroft ; Mark H Weaver ; Mark Kettenis ; Martin Bektchiev ; Martin Storsjo ; Martin v. Lowis; Matija Skala ; Matteo Frigo; Matthew Flatt ; Matthew Green <85970515+squidhacks@users.noreply.github.com>; Matthias Klose ; Max Filippov ; Michael Haubenwallner ; Michael Knyszek Andrew Waterman Stef O'Rear; Michael Osipov <1983-01-06@gmx.net>; Michael Petch; Mickael Salaun ; Microsoft Corporation; Microsoft, Inc.; Mike Frysinger; Mike Hommey ; Mike Hommey ; Mike Lewis ; Miodrag Vallat; Mischa Jonker ; Misu Moldovan ; Moritz Angermann ; Moxie Bot ; Nathan Froyd ; Niclas Zeising ; Nicolas Lelong; Nikita Samusev <127026067+Nikitf777@users.noreply.github.com>; Nobuyoshi Nakada ; Ole Andre Vadla Ravnas ; Ole Andre Vadla Ravnas ; Oracle and/or its affiliates; Pan7 ; Panayotis ; Paul Monson ; Paulo Pizarro ; Peter Bergner ; Peter Rosin ; Petr Sumbera ; Plausible Labs Cooperative, Inc.; Rafael Espindola ; Rainer Orth ; Ramon Garcia Fernandez ; Randolph Chung; Ranjit Mathew; Red Hat; Red Hat, Inc; Reini Urban ; Reini Urban ; Renesas Technology; Rhys Ulerich; Richard Barnes ; Richard Henderson ; Richard Henderson ; Roger Sayle; Roland Schatz ; Russ McManus ; Russell Keith-Magee ; Ryan C. Underwood ; Ryan Hill ; Ryan VanderMeulen ; Saleem Abdulrasool ; Sam James ; Sam James ; Samuel Holland ; Samuli Suominen ; Sandra Loosemore ; Satadru Pramanik, DO; Scott James Remnant; Sebastian Macke; Sebastian Macke ; Sergei Trofimovich ; Sergei Trofimovich ; Shoaib Meenai ; Simon Posnjak; Software AG; Stef O'Rear ; Stephen ; Steve R. Hastings; Steven G. Johnson; Stewart Brodie, and was found at https://sourceware.org/ml/libffi-discuss/2013/msg00144.html; Synopsys, Inc.; Synposys, Inc.; Tensilica, Inc.; Terry Moore ; Thomas Heller ; Thomas Klausner ; Thomas Petazzoni ; Thomas Schwinge ; Thorsten Glaser; Thorsten Glaser ; Tilera Corp.; Tim Gates ; Timothy Wall; Tobias Heider ; Tom Tromey ; Tom Tromey ; Tony Reix ; Tres Finocchiaro ; Tsukasa Oi; Ulrich Drepper ; Viktor Cherniakin <56512186+LocalSpook@users.noreply.github.com>; Vitaly Budovski ; Waldemar Brodkorb ; Weitian LI ; Word, Inc.; X Consortium; Xavier Claessens ; Xi Ruoyao ; Xilinx, Inc; Xu Chenghua Cheng Lulu; Yang Xiao Yu ; Yang Yu Jie <30362409+scylaac@users.noreply.github.com>; Yann Sionneau ; Yavor Georgiev ; Yen Chi Hsuan ; Yn0ga ; YongKang Zhou ; Yousong Zhou ; YunQiang Su ; YunQiang Su ; Yuriy Kolerov ; Yuriy Kolerov ; Yury V. Zaytsev ; Zachary Waldowski ; Zachary Waldowski ; Zhang Fuxin ; bartoli ; dabrain34 ; dependabot bot <49699333+dependabot bot @users.noreply.github.com>; driver1998 ; fossdd ; foxsen <2503799872@qq.com>; fwg ; hjl-tools ; jacobly0 ; jon ; kellda <59569234+kellda@users.noreply.github.com>; ksjogo ; matoro ; mikulas-patocka <94898783+mikulas-patocka@users.noreply.github.com>; musvaage <112724366+musvaage@users.noreply.github.com>; nielsAD ; ossdev07 <39188636+ossdev07@users.noreply.github.com>; petersn ; pichikaudaykiran <51439150+pichikaudaykiran@users.noreply.github.com>; pnallan <46887249+pnallan@users.noreply.github.com>; rofl0r ; rorth ; s1341 ; serge-sans-paille ; the Free Software Foundation; the Initial Developer; vhankala <81743325+vhankala@users.noreply.github.com>; zhangwenlong ; zhanhb <6323014+zhanhb@users.noreply.github.com>; zye2-sc <140619768+zye2-sc@users.noreply.github.com>", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libffi/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wDNo1VDn-PVFihyDjoXM0mFXC7_TxynX_USYUx7-zNg/libffi-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libffi@3.5.2-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://sourceware.org/libffi/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libffi", "versionInfo" : "3.5.2-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libjpeg-turbo-3.1.2-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2011 Alex Neundorf\nCopyright 2015 Alex Turbov\nCopyright 2016, 2019, 2024 D. R. Commander\nCopyright 2014 Daniele E. Domenichelli\nCopyright 1990, David Koblas\nCopyright 2013 Dimitri John Ledkov\nCopyright 2016, 2021 Dmitry Marakasov\nCopyright 2011 Eric NOULARD\nCopyright JS Foundation and other contributors, https://js.foundation\nCopyright 2011, 2013-2015 Kitware, Inc.\nCopyright 2018 Matthias Rancker\nCopyright 2011 Nikita\nCopyright OpenJS Foundation and other contributors, https://openjsf.org\nCopyright 2009 Pierre Ossman for Cendio AB\nCopyright 2016 Roger Leigh\nCopyright 2014 Rolf Eike Beer\nCopyright 2018 Tobias C. Berner\nCopyright (c) 2021 Alex Richardson\nCopyright (c) 2023, Aliaksiej Kandracienka\nCopyright (c) 2019-2020 Arm Limited\nCopyright (c) 2009-2025 D. R. Commander\nCopyright (c) 2022, Felix Hanau\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. \nCopyright (c) 2015, Google, Inc.\nCopyright (c) 2019, Google LLC.\nCopyright (c) 2015 Intel Corporation\nCopyright (c) 2014, Jay Foad\nCopyright (c) 1999 Ken Murchison\nCopyright (c) 2013, Linaro Limited\nCopyright (c) 2016-2017, Loongson Technology Corporation Limited, BeiJing\nCopyright (c) 2013-2014 MIPS Technologies, Inc.\nCopyright (c) 2013, MIPS Technologies, Inc., California\nCopyright (c) 1999-2006 MIYASAKA Masaru\nCopyright (c) 1998-2011 Marti Maria Saguer\nCopyright (c) 2018, Matthias Rancker\nCopyright (c) 2015, Matthieu Darbois\nCopyright (c) 2009-2011 Nokia Corporation and/or its subsidiary(-ies)\nCopyright (c) 2014, Olle Liljenzin\nCopyright (c) 2009, 2012 Pierre Ossman for Cendio AB\nCopyright (c) 2011-2016 Siarhei Siamashka\nCopyright (c) 2009-2016 Stuart Knightley, David Duponchel, Franz Buchinger, Antonio Afonso\nCopyright (c) 1991-2025 The libjpeg-turbo Project\nCopyright (c) 1991-1994, Thomas G. Lane\nCopyright (c) 1991-2012, Thomas G. Lane, Guido Vollbeding. Lossless JPEG\nCopyright (c) 1991-1996, Thomas G. Lane. Lossless JPEG\nCopyright (c) 1997-1998, Thomas G. Lane, Todd Newman\nCopyright (c) 2015 Viktor Szathmary\nCopyright (c) 1988 by Jef Poskanzer\nCopyright (c) 2014-2017 by Vitaly Puzrin and Andrei Tuputcyn\nCopyright jQuery Foundation and other contributors, https://jquery.org\nProcessors Copyright (c) 1996, 1997 by Agner Fog\n(c) 1995-2013 Jean-loup Gailly and Mark Adler\n(c) 2014-2017 Vitaly Puzrin and Andrey Tupitsin\ncopyright (c) 1991-2020, Thomas G. Lane, Guido Vollbeding\ncopyrighted by the Free Software Foundation\n\nAuthors: Alex Neundorf; Alex Richardson; Alex Turbov; Aliaksiej Kandracienka; Arm Limited; Colin Plumb; D. R. Commander; Daniele E. Domenichelli; David Koblas; David Rowley ; Dimitri John Ledkov; Dmitry Marakasov; Eric NOULARD; Felix Hanau; Free Software Foundation, Inc.; Google LLC.; Google, Inc.; Intel Corporation; JS Foundation and other contributors; Jay Foad; Jean-loup Gailly and Mark Adler; Jef Poskanzer; Ken Murchison; Kitware, Inc.; Linaro Limited; Loongson Technology Corporation Limited, BeiJing; MIPS Technologies, Inc.; MIPS Technologies, Inc., California; Marti Maria Saguer; Matthias Rancker; Matthieu Darbois; Miyasaka Masaru; Nikita; Nokia Corporation and/or its subsidiary(-ies); Olle Liljenzin; OpenJS Foundation and other contributors; Pierre Ossman for Cendio AB; Processors by Agner Fog; Ragesh Radhakrishnan ; Roger Leigh; Rolf Eike Beer; Siarhei Siamashka; Siarhei Siamashka ; Spencer, Keppel and Brader; Stuart Knightley, David Duponchel, Franz Buchinger, Antonio Afonso; Teodora Novkovic (teodora.novkovic@imgtec.com) Darko Laus (darko.laus@imgtec.com); Teodora Novkovic Darko Laus ; The libjpeg-turbo Project; Thomas G. Lane; Thomas G. Lane, Guido Vollbeding; Thomas G. Lane, Guido Vollbeding. Lossless JPEG; Thomas G. Lane, Todd Newman; Thomas G. Lane. Lossless JPEG; Tobias C. Berner; Viktor Szathmary; Vitaly Puzrin and Andrei Tuputcyn; Vitaly Puzrin and Andrey Tupitsin; jQuery Foundation and other contributors; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libjpeg-turbo/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/rS3PO7L1NDGm0QKV3vcfrFde_UrXlj9A-Eno434bQxE/libjpeg-turbo-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libjpeg-turbo@3.1.2-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://libjpeg-turbo.org/", "licenseConcluded" : "(Zlib AND BSD-3-Clause AND IJG)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libjpeg-turbo", "versionInfo" : "3.1.2-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libmd-1.1.0-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright Colin Plumb\nCopyright Colin Plumb Todd C. Miller\nCopyright 1992-2022 Free Software Foundation, Inc.\nCopyright Poul-Henning Kamp \nCopyright Steve Reid \nCopyright (c) 2000-2001, Aaron D. Gifford\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2009, 2011, 2016 Guillem Jover \nCopyright (c) 2001 Markus Friedl\nCopyright (c) 2001 The NetBSD Foundation, Inc.\nCopyright (c) 1997, 2003, 2004 Todd C. Miller \nCopyright (c) 1994 X Consortium\n\nAuthors: Aaron D. Gifford; Alexandre Oliva ; Bootstrap Authors; Colin Plumb; Colin Plumb Todd C. Miller; David Seifert ; Fran,cois Pinard; Free Software Foundation, Inc.; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Guillem Jover; Guillem Jover ; Markus Friedl; Michael Haubenwallner ; Peter Rosin ; Poul-Henning Kamp; Rainer Muller ; Scott James Remnant; Steve Reid; The NetBSD Foundation, Inc.; Tn RSA Data Security, Inc.; Todd C. Miller; Tom Tromey ; X Consortium", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libmd/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i6W9FXZYlBhVQXDvhlqb8DMI9OjwuUN6dAujHnj8zt0/libmd-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libmd@1.1.0-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.hadrons.org/software/libmd/", "licenseConcluded" : "(BSD-2-Clause AND BSD-3-Clause AND Beerware AND ISC AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libmd", "versionInfo" : "1.1.0-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libpng-1.6.56-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "COPYRIGHT 251 2013,2015 John Cunningham Bowler\nCOPYRIGHT Written by John Cunningham Bowler, 2011\nCopyright 1992-2025 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2015 The Chromium Authors\nCopyright (c) 2000-2008 Adam M. Costello and Cosmin Truta\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2017-2018 Arm Holdings\nCopyright (c) 2004-2019, 2021, 2023-2024 Bootstrap Authors\nCopyright (c) 2020 Cameron Cawley\nCopyright (c) 2025 Catena\nCopyright (c) 2006-11-28 Charles Poynton\nCopyright (c) 2001 Christoph Pfisterer\nCopyright (c) 2004 Cosmin Truta\nCopyright (c) 1995, 1996 Frank J. T. Wojcik\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2021 Gabor Kertesz\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2002, 2007, 2009 Glenn Randers-Pehrson and Andrey A. Chernov\nCopyright (c) 2012 Glenn Randers-Pehrson and Christopher M. Wheeler\nCopyright (c) 2023 Google LLC\nCopyright (c) 1998-2008 Greg Roelofs\nCopyright (c) 1998, 1999, 2002, 2006, 2008, 2010-2014 Greg Roelofs and Glenn Randers-Pehrson\nCopyright (c) 1995 Guy Eric Schalnat, Group\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) John Bowler, 2013\nCopyright (c) 2011-2013 John Cunningham Bowler\nCopyright (c) 2021 Kirk Roerig\nCopyright (c) 2001, Laurent\nCopyright (c) 2021 Loongson Technology Corporation Limited\nCopyright (c) 2000 Marc O. Gloor\nCopyright (c) 2002 Patrick R.L. Welche\nCopyright (c) 2000, Pawel Mrochen\nCopyright (c) 2004 Simon-Pierre Cadieux\nCopyright (c) 1995-2026 The\nCopyright (c) 1998 Tim Wegner\nCopyright (c) 1997 Tom Tanner\nCopyright (c) Willem van Schaik, 1999, 2011, 2012\nCopyright (c) 1995-2000 Wolf Faust\nCopyright (c) 1994 X Consortium\nCopyright (c) 1998 by Andreas R. Kleinert\n(c) Willem van Schaik\ncopyright Glenn Randers-Pehrson\ncopyright 1995 Guy Eric Schalnat, Group 42, Inc.\ncopyright Willem van Schaik, 1999-2019\ncopyright (c) 1999-2019 by Willem van Schaik\ncopyrighted by the Free Software Foundation\n(c) readpng2$ (c) PROGHDRS\n\nAuthors: ; Adam M. Costello and Cosmin Truta; Alexandre Oliva ; Andreas Dilger; Andreas R. Kleinert; Arm Holdings; Benjamin Buch; Bootstrap Authors; Cameron Cawley; Catena; Charles Poynton; Christian Ehrlicher; Christoph Pfisterer; Cosmin Truta; Dragos Tiselice ; Fran,cois Pinard; Frank J. T. Wojcik; Free Software Foundation, Inc.; Gabor Kertesz; Gary V. Vaughan; Glenn Randers-Pehrson; Glenn Randers-Pehrson and Andrey A. Chernov; Glenn Randers-Pehrson and Christopher M. Wheeler; Google Inc.; Google LLC; Gordon Matzigkeit; Gordon Matzigkeit ; Greg Roelofs; Greg Roelofs and Glenn Randers-Pehrson; Greg Roelofs and contributors; Guy Eric Schalnat, Group; Guy Eric Schalnat, Group 42, Inc.; James Yu; John Bowler; John Cunningham Bowler; Kirk Roerig; Laurent; Loongson Technology Corporation Limited; Mandar Sahastrabuddhe; Manfred SCHLAEGL; Mans Rullgard; Marc O. Gloor; Martin Zinser; Michal Zalewski ; Mike Klein and Matt Sarett; Mike Klein and Matt Sarett, Google, Inc.; Patrick R.L. Welche; Pawel Mrochen; Richard Townsend ; Roger Leigh; Scott James Remnant; Simon-Pierre Cadieux; The Chromium Authors; Tim Wegner; Tom Tanner; Tom Tromey ; Vadim Barkov; Willem van Schaik; Wolf Faust; X Consortium; default. Also; guxiwei; readpng2$ PROGHDRS; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libpng/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/P7nXwTapObMEYkmWH1GKMNPE1WPgxrtv-cNGTA1YfgM/libpng-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libpng@1.6.56-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.libpng.org", "licenseConcluded" : "(Libpng AND libpng-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libpng", "versionInfo" : "1.6.56-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libssl3-3.5.5-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2004-2014, Akamai Technologies\nCopyright 2017 BaishanCloud\nCopyright 2014 Cryptography Research, Inc.\nCopyright 2011 Google Inc.\nCopyright IBM Corp. 2018\nCopyright 2013 M. J. Dominus\nCopyright 2006 NTT (Nippon Telegraph and Telephone Corporation)\nCopyright 2005 Nokia\nCopyright Patrick Powell 1995\nCopyright 2019 Red Hat, Inc.\nCopyright 2017 Ribose Inc.\nCopyright 2012, Samuel Neves \nCopyright Siemens AG 2015-2019\nCopyright 1998-2025 The OpenSSL Project Authors\nCopyright 2016 VMS Software, Inc.\nCopyright 1998-$YEAR The OpenSSL Authors\nCopyright (c) 2007\nCopyright (c) 2008 Andy Polyakov \nCopyright (c) 2023, Christoph Mullner \nCopyright (c) 2015 CloudFlare, Inc.\nCopyright (c) 2012-2014 Daniel J. Bernstein\nCopyright (c) 2004, EdelKey Project\nCopyright (c) 1995-1998 Eric A. Young, Tim J. Hudson\nCopyright (c) 1989 Free Software Foundation, Inc.\nCopyright (c) 2022, Hongren (Zenithal) Zheng \nCopyright (c) 2012, Intel Corporation\nCopyright (c) 2012-2016 Jean-Philippe Aumasson\nCopyright (c) 2023, Jerry Shih \nCopyright (c) 2004 Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden)\nCopyright (c) 2017 National Security Research Institute\nCopyright (c) 2006, Network Resonance, Inc.\nCopyright (c) 2019, Oracle and/or its affiliates\nCopyright (c) 2023, Phoebe Chen \nCopyright (c) 2011, RTFM, Inc.\nCopyright (c) 2004, Richard Levitte \nCopyright (c) 1998-2026 The OpenSSL Project Authors\nCopyright (c) 2002 The OpenTSA Project\nCopyright (c) 2013-2014 Timo Teras \nCopyright (c) 2013 by Mark Jason Dominus \nCopyright 20xx-20yy The OpenSSL Project Authors\ncopyrighted by the Free Software Foundation\n\nAuthors: 1995-$YEAR The OpenSSL Project Authors; 1998-$YEAR The OpenSSL Authors; 1998-$YEAR The OpenSSL Project Authors; 1999-$YEAR The OpenSSL Project Authors; 2000-$YEAR The OpenSSL Project Authors; 2020-$YEAR The OpenSSL Project Authors; 20xx-20yy The OpenSSL Project Authors; ; ; Akamai Technologies; Amitay Isaacs , Martin Schwenke & Alastair D'Silva for the OpenSSL project; Amitay Isaacs and Martin Schwenke for the OpenSSL project; Andy Polyakov; Andy Polyakov ; Antoon Bosselaers; BaishanCloud; Ben Avison ; Christoph Mullner; Christophe Renou and Peter Sylvester, for the EdelKey project; CloudFlare, Inc.; Cryptography Research, Inc.; Daniel J. Bernstein; Danny Tsen ; David S. Miller and Andy Polyakov; EdelKey Project; Emilia Kasper and Peter Schwabe; Eric A. Young and Tim J. Hudson; Eric A. Young, Tim J. Hudson; Eric Rescorla ; Fangming Fang ; Free Software Foundation, Inc.; Google Inc.; Hongren (Zenithal) Zheng; IBM Corp.; Intel Corporation; Jean-Philippe Aumasson; Jerry Shih; Kungliga Tekniska Hogskolan (Royal Institute of Technology, Stockholm, Sweden); M. J. Dominus; Marc Bevand; Mark Jason Dominus; Mark Jason Dominus, Plover Systems; Michael Schout ; Mike Hamburg; Min Zhou ; NTT (Nippon Telegraph and Telephone Corporation); National Security Research Institute; Netscape Communications; Network Resonance, Inc.; Nokia; Oracle and/or its affiliates; Patrick Powell; Patrick Powell ; Patrick Steuer ; Paulo Barreto; Phoebe Chen; RTFM, Inc.; Red Hat, Inc.; Ribose Inc.; Richard Levitte; Rohan McLure ; Samuel Lee ; Samuel Neves; Sergey Kirillov and Andrey Matyukov; Sergey Kirillov and Andrey Matyukov Intel Corporation; Shay Gueron; Siemens AG; The OpenSSL Project Authors; The OpenTSA Project; Timo Teras; VMS Software, Inc.; Vincent Rijmen; Xiaokang Qian ; Zhiguo Zhou and Wangyang Guo ; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libssl3/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DHfSqmFf_EY8E_MfxATmmrJub__aZGxlWdayUJPNFCc/openssl-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libssl3@3.5.5-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.openssl.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libssl3", "versionInfo" : "3.5.5-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libtasn1-4.21.0-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "A. (c) B. (c)\nC. @copyright D. (c)\nCopyright 1990-2005, 2007-2009, 2025-2026 Free Software Foundation, Inc.\nCopyright 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. @uref http://fsf.org\nCopyright (c) 2013 Adam Sampson\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1990-2005, 2007-2009 Free Software Foundation, Inc.\nCopyright (c) 90,2005,2007-2009 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. \nCopyright (c) 1991, 1999 Free Software Foundation, Inc. \nCopyright (c) 2003 James Henstridge 2004-2007 Damon Chaplin 2007-2017 Stefan Sauer\nCopyright (c) 2003 James Henstridge 2007-2017 Stefan Sauer\nCopyright (c) 1998 Michael Zucchi\nCopyright (c) 2001, 2002 Nikos Mavrogiannopoulos\nCopyright (c) 2004 Scott James Remnant \nCopyright (c) 2002-2021 Simon Josefsson\nCopyright (c) 2007-2017 Stefan Sauer\nCopyright (c) 2017-2019 Tim Ruehsen\nCopyright (c) 1994 X Consortium\nCopyright d Free Software Foundation, Inc\n(c) Internal macro Tests\ncopyrighted by the Free Software Foundation\n\nAuthors: 90,2005,2007-2009 Free Software Foundation, Inc.; A. B.; Adam Sampson; Alexandre Duret-Lutz ; Alexandre Oliva ; Bootstrap Authors; Bruno Haible; Bruno Haible ; C. D.; Collin Funk; Cyril Holweck ; Dagobert Michelsen ; David Reiser ; Diego Flameeyes Petteno ; Eric Blake; Eric Blake ; Eric Blake and Bruno Haible; Eric Blake, Paul Eggert, and Jim Meyering; Fabio Fiorina; Fabio Fiorina Nikos Mavrogiannopoulos ; Fran,cois Pinard; Free Software Foundation, Inc.; Free Software Foundation, Inc. @uref; GNU Libtasn1; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Internal macro Tests; James Henstridge Damon Chaplin Stefan Sauer; James Henstridge Stefan Sauer; Jean-Francois Bignolles ; Jeff Cai ; Jim Meyering; Jim Meyering and Bruno Haible; Jim Meyering and Joel E. Denny; Max Vozeler ; Michael Zucchi; Mohit Agarwal; Nikos Mavrogiannopoulos; Paul Eggert; Paul Eggert and Bruno Haible; Paul Eggert and Jim Meyering; Paul Eggert and Martin Lambers; Paul Eggert, Bruno Haible, Derek Price; Paul Eggert, Bruno Haible, Sam Steingold, Peter Burwood; Paul Eggert, Bruno Haible, and Jim Meyering; Richard Stallman; Scott James Remnant; Simon Josefsson; Simon Josefsson and Bruno Haible; Simon Josefsson, Bruno Haible; Stefan Sauer; Stephen Wrobleski ; Tim Ruehsen; Tom Tromey ; Ulrich Drepper ; X Consortium; d Free Software Foundation, Inc; don't like it ; s, s, s, s, s, s, s, s, s, and others. , authors; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libtasn1/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libtasn1@4.21.0-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3I233BJBRxVK2F4d-fylg2_-gbk3_ix3TX3GsTxRoUg/libtasn1-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.gnu.org/software/gnutls/", "licenseConcluded" : "LGPL-2.1-or-later", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libtasn1", "versionInfo" : "4.21.0-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libx11-1.8.12-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2024 Free Software Foundation, Inc.\nCopyright IBM Corporation 1993\nCopyright 2006 Josh Triplett\nCopyright 2009 Red Hat, Inc.\nCopyright 1984-1994, 1998 The Open Group\nCopyright 2000 The XFree86 Project, Inc.\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1994, 1996 X Consortium\nCopyright 1999-2000 by Bruno Haible\nCopyright 1985, 1986, 1987, 1988, 1989, 1990, 1991 by Digital Equipment Corporation\nCopyright 1987, 1988, 1990 by Digital Equipment Corporation, Maynard\nCopyright 1987 by Digital Equipment Corporation, Maynard, Massachusetts\nCopyright 1990, 1991, 1992, 1993, 1994 by FUJITSU LIMITED\nCopyright 1991, 1992 by Fuji Xerox Co., Ltd.\nCopyright 1993 by Fujitsu Open Systems Solutions, Inc.\nCopyright 1990, 1991 by OMRON Corporation\nCopyright 1990, 1991 by OMRON Corporation, NTT Software Corporation, and Nippon Telegraph and Telephone Corporation\nCopyright 1992 by Oki Technosystems Laboratory, Inc.\nCopyright 1993, 1994 by Sony Corporation\nCopyright 1993 by SunSoft, Inc.\nCopyright 1992, 1993 by TOSHIBA Corp.\nCopyright 1988 by Wyse Technology, Inc., San Jose, Ca\nCopyright 1993 by the FUJITSU LIMITED\nCopyright 1991 by the Open Software Foundation\nCopyright 1993, 1994 by the Sony Corporation\nCopyright 1993 by the TOSHIBA Corp.\nCopyright (c) 2008 Alexandre Oliva\nCopyright (c) 2008 Andreas Schwab \nCopyright (c) 2004-2019, 2021, 2023-2024 Bootstrap Authors\nCopyright (c) 1985, 1986, 1987, 1988, 1989, 1991 Digital Equipment Corporation\nCopyright (c) 1999-2000 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto \nCopyright (c) 2008 Guido U. Draheim \nCopyright (c) 2003-2006,2008 Jamey Sharp, Josh Triplett\nCopyright (c) 2003 Keith Packard\nCopyright (c) 1990-1992, 1999, 2000, 2004, 2009, 2010, 2015, 2017, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek \nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 2008 Stepan Kasal \nCopyright (c) 2000 The XFree86 Project, Inc.\nCopyright (c) 2007-2009, Troy D. Hanson\nCopyright (c) 1993, 1994 X Consortium\nCopyright (c) 1993, 1995 by Silicon Graphics Computer Systems, Inc.\nPortions Copyright 1990, 1991 by Tektronix, Inc\n(c) 1996\n(c) Copyright 1995 FUJITSU LIMITED\n(c) Copyright 1990 1991 Tektronix, Inc.\n(c) Copyright 1996 by Sebastien Marineau and Holger Veit \n(c) U3269 CIRCLED\n\nAuthors: ; ; Aaron Muir Hamilton ; Aaron Plattner ; Abhishek Arya ; Adam Jackson ; Adam Jackson ; Adam Jackson ; Adam Sampson ; Alan Coopersmith; Alan Coopersmith ; Alan Coopersmith ; Alastair McKinstry, ; Albert Astals Cid ; Alejandros Diamandidis ; Alex Henrie ; Alex Richardson ; Alexander Gottwald; Alexander Gottwald ; Alexander Polakov ; Alexandre Oliva; Alexandre Oliva ; Ander Conselvan de Oliveira ; Andreas Schwab; Andreas Schwab ; Andreas Wettstein ; Anton Zinoviev ; Antti Savolainen ; Anuradha Ratnaweera ; ArenaL5 ; Arnaud Giersch ; Arthur Huillet ; Bart Massey ; Benno Schulenberg ; Benno Schulenberg ; Bhavi Dhingra ; Bodo Graumann ; Bootstrap Authors; Brian Rogers ; Brice Goglin ; Bruno Haible; Caolan McNamara ; Carlos Garnacho ; Carmina16 ; Choe Hwanjin ; Chris Ball ; Chris Lee ; Chris Less ; Christian Linhart ; Christian Weisgerber ; Christoph Pfister ; Christopher Chavez ; Colin Harrison; Colin Harrison ; Colin Walters ; Dan Nicholson ; Daniel Albers ; Daniel Kahn Gillmor ; Daniel Stone; Daniel Stone ; Daniel Stone ; Daniel Stone ; David Baron ; David Coppa ; David H. Gutteridge ; David Nusinow ; Denis Drakhnia ; Dennis Arellano ; Derek Buitenhuis ; Derek Wang ; Diego Flameeyes Petteno ; Digital Equipment Corporation; Digital Equipment Corporation, Maynard; Digital Equipment Corporation, Maynard, Massachusetts; Dirk Wallenstein ; Dirk Wallenstein ; Dmitry Osipenko ; Dominik Muth ; Donnie Berkholz; Donnie Berkholz ; Drew Moseley ; Egbert Eich; Egbert Eich ; Egbert Eich ; Emil Velikov ; Emilio Jesus Gallego Arias ; Emilio Pozuelo Monfort ; Eric Anholt ; Eric Anholt ; Eric Anholt ; Eric S. Raymond ; Erkki Seppala ; Eugene Konev ; FUJITSU LIMITED; Felix Yan ; Fernando Carrijo ; Fernando Carrijo ; Filippo Giunchedi ; Fran,cois Pinard; Frederic Boiteux ; Frediano Ziglio; Frediano Ziglio ; Free Software Foundation, Inc.; Fuji Xerox Co., Ltd.; Fuji Xerox Co.,Ltd.; Fujitsu Open Systems Solutions, Inc.; G. Branden Robinson ; Gabriel Souza Franco ; Gabriele Svelto; Gaetan Nadon; Gaetan Nadon ; Gary V. Vaughan; GaryOderNichts ; Gaurav Ujjwal ; Geoff Streeter ; Gioele Barabucci ; Giovanni Mascellani ; Gordon Matzigkeit; Gordon Matzigkeit ; Guido U. Draheim; Gunnar Hjalmarsson ; Gustavo Noronha Silva ; Harshula Jayasuriya ; Hideki Hiura (hhiura@Sun.COM) Sun Microsystems, Inc. Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp; Hidetoshi Tajima ; Hiroyuki Miyamoto Digital Equipment Corporation miyamoto@jrd.dec.com Modifier Takashi Fujiwara FUJITSU LIMITED; Hodong ; Hodong ; Hung-Chi Chu ; IBM Corporation; ISHIKAWA,chiaki ; Ian Osgood ; Ian Romanick ; Igor V. Kovalenko ; Ingo Schwarze ; Jacek Caban ; James Cloos ; James Su ; Jamey Sharp ; Jamey Sharp, Josh Triplett; Jan Tojnar ; Jan Willem Stumpel ; Jeff Smith ; Jens Herden ; Jens Herden ; Jens Petersen ; Jeremy C. Reed ; Jeremy C. Reed ; Jeremy Huddleston ; Jeremy Huddleston ; Jeremy Huddleston ; Jeremy Huddleston Sequoia ; Jeroen Hoek ; Jim Gettys ; Jim Gettys, of Digital Equipment Corporation; Joerg Sonnenberger ; John Tapsell ; Jon TURNEY ; Jonathan Belsewir ; Joonas Javanainen ; Jose Exposito ; Josh Triplett; Josh Triplett ; Josh Triplett ; Julien Cristau ; Juliusz Chroboczek ; Kaleb Keithley ; Kalman Kemenczy ; Karl Tomlinson ; Katsuhisa Yano TOSHIBA Corp. mopi@osa.ilab.toshiba.co.jp; Kazunori Nishihara Fuji Xerox; Kazunori Nishihara Fuji Xerox Modifier Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp; Kazunori Nishihara Fuji Xerox Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp; Kazunori Nishihara, Fuji Xerox Co.,Ltd. kaz@ssdev.ksp.fujixerox.co.jp Modifier Takashi Fujiwara FUJITSU LIMITED; Kean Johnson ; Kean Johnston ; Kees Cook ; Kees Cook ; Keith Packard; Keith Packard ; Keith Packard ; Kelly Roadkill ; Ken Lunde; Ken Moffat ; Ken Thomases ; Kevin E Martin ; Kevin E. Martin ; Khaled Hosny ; Kim Woelders ; Kirill Chibisov ; Kristian Hogsberg ; Kristian Hogsberg ; Krzesimir Nowak ; Kusanagi Kouichi ; Lars Knoll ; Lev Korol ; Li Yuhong OMRON Corporation Tatsuya Kato NTT Software Corporation Hiroshi Kuribayashi OMRON Coproration Muneiyoshi Suzuki Nippon Telegraph and Telephone Co.; Li Yuhong OMRON Corporation Tetsuya Kato NTT Software Corporation Hiroshi Kuribayashi OMRON Corporation; Liang Chang ; Lubos Lunak ; Lubos Lunak ; Lucien Gentis ; Magnus Kessler ; Makoto Wakamatsu Sony Corporation makoto@sm.sony.co.jp; Mark Brown ; Marko Myllynen ; Markus Duft ; Markus Kuhn ; Martin Jansa ; Martin Natano ; Mats Blakstad ; Matt Dew ; Matt Dew ; Matt Turner ; Matthew D. Fuller ; Matthias Clasen ; Matthias Dieter Wallnofer ; Matthias Hopf ; Matthieu Herrb; Matthieu Herrb ; Matthieu Herrb ; Matthieu Herrb ; Matthieu Herrb ; Maya Rashish ; Mayank Jain ; Michael Verret ; Michal Srb ; Michel Danzer ; Mihail Konev ; Mike FABIAN ; Mikko Niskanen ; Milos Komarcevic ; Mohamed Akram ; Nhat Minh Le ; Nia Alarie ; Nickolai Zeldovich ; Niclas Zeising ; Niveditha Rau ; OMRON Corporation; OMRON Corporation, NTT Software Corporation, and Nippon Telegraph and Telephone Corporation; Oki Technosystems Laboratory, Inc.; Oliver ; Olivier Blin ; Olivier Fourdan ; Oracle and/or its affiliates; Osamu Sayama ; Otto Moerbeek; Owen W. Taylor ; Pander ; Patrick Lerda ; Paul Bender ; Pauli Nieminen ; Paulo Cesar Pereira de Andrade ; Pavel Labath ; Peter Hutterer ; Peter Hutterer ; Peter Hutterer ; Petr Pisar ; Philipp Reh ; Pierre Le Marre ; Po Lu; Quentin Glidic ; Rafael Avila de Espindola ; Ran Benita ; Raul Fernandes ; Red Hat, Inc.; Reuben Thomas ; Richard Purdie ; Roland Mainz ; Ross Burton ; Ross Burton ; Ross Combs ; Ryan C. Gordon ; Ryan Pavlik ; Samuel Thibault ; Scott James Remnant; Scott Revelt ; Seamus O Ciardhuain ; Sean Chen ; Sean Perry ; Sebastien Marineau and Holger Veit; Seiji Kuwari OMRON Corporation kuwa@omron.co.jp kuwa omron.co.jp@uunet.uu.net; Sergey Udaltsov ; Siddhesh Poyarekar ; Silicon Graphics Computer Systems, Inc.; Simon McVittie ; Sony Corporation; Soren Sandmann Pedersen ; Soren Sandmann Pedersen ; Stefan Dirsch ; Stepan Kasal; Stephen Gildea; Stuart Anderson ; SunSoft, Inc.; TOSHIBA Corp.; Takao Fujiwara ; Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp; Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp Modifier Franky Ling Digital Equipment Corporation; Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp Modifier Makoto Wakamatsu Sony Corporation; Takashi Fujiwara FUJITSU LIMITED fujiwara@a80.tech.yk.fujitsu.co.jp Motifier Makoto Wakamatsu Sony Corporation; Tapani Palli ; Tatu Frisk ; Teemu Likonen ; Tektronix Inc.; Tektronix, Inc; The Open Group; The XFree86 Project, Inc.; Theppitak Karoonboonyanan ; Thien-Thi Nguyen ; Thomas E. Dickey ; Thomas Klausner ; Tilman Sauerbeck ; Tobias Stoeckmann ; Todd Carson ; Tollef Fog Heen ; Tom Tromey ; Tristan Miller ; Troy D. Hanson; U3269 CIRCLED; Ulrich Sibiller ; Vedran Ljubovic ; Vladimir Marek ; Walter Harms ; Will Thompson ; Wyse Technology, Inc., San Jose, Ca; X Consortium; Xake ; Xue Wei ; Yaakov Selkowitz ; Yaakov Selkowitz Cygwin Ports; Yair Mizrahi ; Yann Droneaud ; Yann Droneaud ; Yasuhiro Kawai Oki Technosystems Laboratory; Yichao Yu ; Yuxuan Shui ; an Xlib; eric.engestrom@imgtec.com; iyzana ; jmcwilliams403 ; ojab ; parag ; parag ; samuel.thibault@ens-lyon.org; the FUJITSU LIMITED; the IM Server; the Open Software Foundation; the Sony Corporation; the TOSHIBA Corp.; the Trace R D Center at the University of Wisconsin; the Xlib; vehemens ; wharms ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libx11/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libx11@1.8.12-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7FSJBEoyMu0geCZkCP3YbnLA3HzBPRx4GXCvdjT7Rhs/libx11-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://xorg.freedesktop.org/", "licenseConcluded" : "(X11 AND ICU)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libx11", "versionInfo" : "1.8.12-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxau-1.0.12-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2024 Free Software Foundation, Inc.\nCopyright 1988, 1993, 1994, 1998 The Open Group\nCopyright (c) 2004-2019, 2021, 2023-2024 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2023 Intel Corporation\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2010, Oracle and/or its affiliates\nCopyright (c) 1994 X Consortium\n\nAuthors: Adam Jackson ; Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alex Richardson ; Alexander Gottwald ; Alexandre Oliva ; Bootstrap Authors; Brice Goglin ; Chase Douglas ; Colin Walters ; Damien Th?bault ; Daniel Drake ; Daniel Stone ; Dylan Baker ; Egbert Eich ; Emil Velikov ; Eric Anholt ; Eric S. Raymond ; Fran,cois Pinard; Free Software Foundation, Inc.; Fuminobu TAKEYAMA ; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Intel Corporation; Jeremy Huddleston ; Jeremy Huddleston ; Jeremy Huddleston Sequoia ; Jesse Adkins ; Josh Triplett ; Julien Cristau ; Kaleb Keithley ; Keith Packard ; Keith Packard, Noah Levitt; Kevin E Martin ; Matt Turner ; Matthew D. Fuller ; Matthieu Herrb ; Mihail Konev ; Oracle and/or its affiliates; Paulo Cesar Pereira de Andrade ; Peter Hutterer ; Scott James Remnant; Soren Sandmann Pedersen ; The Open Group; Thierry LARONDE ; Tobias Stoeckmann ; Tom Tromey ; X Consortium", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxau/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxau@1.0.12-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/i7vpVlCSsm1c-0cC0ZUEwbVByGCoEeMl8Gh8rGDsjxg/libxau-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://xorg.freedesktop.org/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxau", "versionInfo" : "1.0.12-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxcb-1.17.0-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright (c) 2001-2006 Bart Massey, Jamey Sharp, and Josh Triplett\nCopyright (c) 2001-2004 Bart Massey and Jamey Sharp\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2009 Jatin Golani\nCopyright (c) 1994 X Consortium\n\nAuthors: A. Wilcox ; Aaron Plattner ; Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alexander Mezin ; Alexandre Oliva ; Arnaud Fontaine ; Arvind Umrao ; Bart Massey; Bart Massey ; Bart Massey and Jamey Sharp; Bart Massey, Jamey Sharp, and Josh Triplett; Bob Ham ; Bootstrap Authors; Carlos Garnacho ; Carsten Meier ; Chi-Thanh Christopher Nguyen ; Christian Konig ; Christian Linhart ; Christoph Pfister ; Christoph Reimann ; Colin Walters ; Daniel G ; Daniel Martin ; Daniel Stone ; Daphne Pfister ; David Coles ; David McFarland ; Demi Marie Obenour ; Demi Marie Obenour ; Diego Flameeyes Petteno ; Donnie Berkholz ; Eamon Walsh ; Eamon Walsh ; Eduardo Sanchez Munoz ; Egbert Eich ; Emil Velikov ; Eric Anholt ; Eric Anholt ; Erik Kurzinger ; Fergus Dall ; Fran,cois Pinard; Free Software Foundation, Inc.; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Henning Sten ; Hodong ; Ian Osgood ; Ian Osgood ; Ilya Pominov ; James Jones ; Jamey Sharp ; Jamey Sharp ; Jan Beich ; Jatin Golani; Jaya Tiwari ; Jeetu Golani ; Jeremy Huddleston ; Jeremy Huddleston ; Jeremy Huddleston Sequoia ; Jeremy Kolb ; Jeremy Kolb ; Jeremy Kolb jkolb@brandeis.edu; Jim Ingram ; Jon TURNEY ; Josh Triplett ; Josh Triplett ; Julien Cristau ; Julien Danjou ; Keith Packard ; Keith Packard ; Kenneth Graunke ; Marc Deslauriers ; Marcin Koscielnicki ; Mark Kettenis ; Markus Duft ; Martin Dorum ; Matt Turner ; Matthias Hopf ; Matthieu Herrb ; Michael Haubenwallner ; Michael Ost ; Michael Stapelberg ; Michel Danzer ; Mihail Konev ; Mike Sharov ; Nick Bowler ; Oswald Buddenhagen ; PaperChalice ; Patrick Caulfield ; Pauli Nieminen ; Paulo R. Zanoni ; Peter Harris ; Peter Harris ; Peter Hutterer ; Peter Hutterer ; Peter Williams ; Petr Salinger ; Povilas Kanapickas ; Rami Ylimaki ; Ran Benita ; Ran Benita ; Remi Cardona ; Remi Denis-Courmont ; Remi Denis-Courmont ; Ryan Pavlik ; Sam Varshavchik ; Samuel Thibault ; Scott James Remnant; TORRI Vincent; TORRI Vincent ; TORRI Vincent ; Thomas Anderson ; Thomas Coppi ; Thomas Hunger ; Thomas Klausner ; Thomas Klausner ; Tilman Sauerbeck ; Tobias Stoeckmann ; Tom Tromey ; Uli Schlachter ; Vincent Torri; Vincent Torri ; Vincent Torri, Thomas Hunger, Josh Triplett; X Consortium; Yaakov Selkowitz ; Zephaniah E. Hull ; elupus ; seanb@qnx.com", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxcb/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxcb@1.17.0-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ATRkINwQ-TagW440U8v4GLZ4q1MI0WxQKH0HyrHN11Y/libxcb-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://xcb.freedesktop.org/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxcb", "versionInfo" : "1.17.0-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxdmcp-1.1.5-r1-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright 1989 Network Computing Devices, Inc., Mountain View, California\nCopyright 1989, 1998 The Open Group\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 1994 X Consortium\n\nAuthors: Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alexander Gottwald ; Alexandre Oliva ; Benjamin Tissoires ; Bootstrap Authors; Cristian Rodriguez ; Daniel Stone ; Egbert Eich ; Emil Velikov ; Eric Eay@psych.psy.uq.oz.au; Fran,cois Pinard; Free Software Foundation, Inc.; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Guillem Jover ; Helmut Grohne ; Jeremy Huddleston ; Jim Gettys ; Jon TURNEY ; Josh Triplett ; Julien Cristau ; Kaleb Keithley ; Keith Packard; Keith Packard ; Keith Packard, Noah Levitt; Kevin E Martin ; Matt Dew ; Matt Dew ; Matthieu Herrb ; Mihail Konev ; Mikhail Gusarov ; Network Computing Devices, Inc., Mountain View, California; Paulo Cesar Pereira de Andrade ; Peter Hutterer ; Scott James Remnant; Soren Sandmann Pedersen ; Stuart Kreitman ; The Open Group; Tom Tromey ; X Consortium", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxdmcp/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxdmcp@1.1.5-r1?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/w2RnZijwkZmd_USE9tVgRo2Jok7HZElZPpghwUdWURk/libxdmcp-~-1.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://xorg.freedesktop.org/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxdmcp", "versionInfo" : "1.1.5-r1" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxext-1.3.6-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright Digital Equipment Corporation, 1996\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 1992 Network Computing Devices\nCopyright 1986, 1987, 1988, 1989, 1994, 1998 The Open Group\nCopyright 1991,1993 by Digital Equipment Corporation, Maynard, Massachusetts, and Olivetti Research Limited, Cambridge, England\nCopyright 1986, 1987, 1988 by Hewlett-Packard Corporation\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1996 Digital Equipment Corporation, Maynard, Massachusetts\nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2013 Gabriele Svelto \nCopyright (c) 1994, 1995 Hewlett-Packard Company\nCopyright (c) 1999, 2005, 2006, 2013, 2015, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek \nCopyright (c) 2007-2008 Peter Hutterer\nCopyright (c) 1997 Silicon Graphics, Inc.\nCopyright (c) 1989, 1994 X Consortium\nCopyright (c) 1991 X Consortium, Inc.\nCopyright (c) 1989 X Consortium, Inc. and Digital Equipment Corporation\nCopyright (c) 1994, 1995 X Consortium, Inc. and Hewlett-Packard Company\nCopyright (c) 1992 X Consortium, Inc. and Intergraph Corporation\nCopyright (c) 1993 X Consortium, Inc. and Silicon Graphics, Inc.\nCopyright (c) 1997 by Silicon Graphics Computer Systems, Inc.\n\nAuthors: Adam Jackson ; Adam Jackson ; Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alan Hourihane ; Alexander Gottwald ; Alexandre Oliva ; Alistair Leslie-Hughes ; Bob Scheifler and Keith Packard; Bootstrap Authors; Chase Douglas ; Colin Walters ; Daniel Stone ; David Nusinow ; Digital Equipment Corporation; Digital Equipment Corporation, Maynard, Massachusetts; Digital Equipment Corporation, Maynard, Massachusetts, and Olivetti Research Limited, Cambridge, England; Egbert Eich ; Emil Velikov ; Eric S. Raymond ; Fernando Carrijo ; Fran,cois Pinard; Free Software Foundation, Inc.; Gabriele Svelto; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Hewlett-Packard Company; Hewlett-Packard Corporation; Imranullah Syed ; James Cloos ; James Jones ; Jamey Sharp ; Jeremy Huddleston ; Jesse Adkins ; Jim Fulton; Jon TURNEY ; Julien Cristau ; Kaleb Keithley ; Keith Packard; Keith Packard ; Keith Packard, Network Computing Devices; Kevin E Martin ; Kim Woelders ; Matt Dew ; Matt Dew ; Matthieu Herrb ; Mihail Konev ; Nathan Kidd ; Network Computing Devices; Oracle and/or its affiliates; Otto Moerbeek; Paul TBBle Hampson ; Paulo Cesar Pereira de Andrade ; Paulo Zanoni ; Peter Hutterer; Peter Hutterer ; Peter Hutterer ; Peter Hutterer, University of South Australia; Rob Wu ; Sam James ; Sam Lau ; Scott James Remnant; Silicon Graphics Computer Systems, Inc.; Silicon Graphics, Inc.; Soren Sandmann Pedersen ; The Open Group; Thomas Klausner ; Tom Tromey ; X Consortium; X Consortium, Inc.; X Consortium, Inc. and Digital Equipment Corporation; X Consortium, Inc. and Hewlett-Packard Company; X Consortium, Inc. and Intergraph Corporation; X Consortium, Inc. and Silicon Graphics, Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxext/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k9J51B49xgH8qpVdq7UmkT_eCMEox-r67YjpzemvpGk/libxext-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxext@1.3.6-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://xorg.freedesktop.org/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxext", "versionInfo" : "1.3.6-r2" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxi-1.8.2-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2023 Free Software Foundation, Inc.\nCopyright 2008 Peter Hutterer\nCopyright 2006 Peter Hutterer \nCopyright 2009 Red Hat, Inc.\nCopyright 2005 Sun Microsystems, Inc.\nCopyright 1989, 1998 The Open Group\nCopyright 1989 by Hewlett-Packard Company, Palo Alto, California\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2009 Red Hat, Inc.\nCopyright (c) 1989, 1990, 1991, 1992 X Consortium\n\nAuthors: Adam Jackson ; Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alexander Bersenev ; Alexandre Oliva ; Arkadiusz Miskiewicz ; Benjamin Close ; Benjamin Tissoires ; Bernhard R. Link ; Bootstrap Authors; Carlos Garnacho ; Chase Douglas ; Colin Walters ; Cosimo Cecchi ; Cyril Brulebois ; Dan Nicholson ; Daniel Stone ; Daniel Stone ; David Weinehall ; Drew Parsons ; Egbert Eich ; Emil Velikov ; Emilio Pozuelo Monfort ; Eric Anholt ; Eric S. Raymond ; Fernando Carrijo ; Fran,cois Pinard; Free Software Foundation, Inc.; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Hewlett-Packard Company, Palo Alto, California; James Cloos ; Jamey Sharp ; Jasper St. Pierre ; Javier Pello ; Jeff Smith ; Jeremy Huddleston ; Jesse Adkins ; Julien Cristau ; Kaleb Keithley ; Keith Packard ; Kevin E Martin ; Matt Dew ; Matt Dew ; Matt Turner ; Matthias Hopf ; Matthieu Herrb ; Matthieu Herrb ; Michael Joost ; Michal Maslowski ; Michal Srb ; Mihail Konev ; Niels Ole Salscheider ; Owen W. Taylor ; Paul TBBle Hampson ; Pauli Nieminen ; Paulo Cesar Pereira de Andrade ; Paulo Ricardo Zanoni ; Paulo Zanoni ; Peter Hutterer; Peter Hutterer ; Peter Hutterer ; Peter Hutterer ; Philipp Reh ; Povilas Kanapickas ; Raphael Droz ; Red Hat, Inc.; Samanta Navarro ; Scott James Remnant; Shunichi Fuji ; Soren Sandmann Pedersen ; Sun Microsystems, Inc.; The Open Group; Thomas Klausner ; Tobias Stoeckmann ; Tom Tromey ; X Consortium; Zephaniah E. Hull; kyomawolf ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxi/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OMMMoA5Hamj1LZXF1XbTpLMx9c4zI3i1ai_LV5ovkMA/libxi-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxi@1.8.2-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://www.x.org", "licenseConcluded" : "(MIT AND ICU)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxi", "versionInfo" : "1.8.2-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxrender-0.9.12-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2024 Free Software Foundation, Inc.\nCopyright (c) 2004-2019, 2021, 2023-2024 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2001,2003 Keith Packard\nCopyright (c) 2003 Keith Packard, Noah Levitt\nCopyright (c) 2000 SuSE, Inc.\nCopyright (c) 1994 X Consortium\n\nAuthors: Aaron Plattner ; Adam Jackson ; Adam Jackson ; Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alex Richardson ; Alexander Gottwald ; Alexandre Oliva ; Bootstrap Authors; Clemens Eisserer ; Colin Walters ; Daniel Stone ; David Reveman ; Dmitry Karasik ; Egbert Eich ; Emanuele Giaquinta ; Emil Velikov ; Eric Anholt ; Fernando Carrijo ; Fran,cois Pinard; Free Software Foundation, Inc.; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; James Cloos ; Jamey Sharp ; Jeremy Huddleston ; Kaleb Keithley ; Keith Packard; Keith Packard ; Keith Packard, Noah Levitt; Keith Packard, SuSE, Inc.; Kevin E Martin ; Lars Knoll ; Lauri Kasanen ; Markus Kuhn ; Matthieu Herrb ; Michael Joost ; Mihail Konev ; Oliver Hattshire ; Paul Bender ; Paulo Cesar Pereira de Andrade ; Peter Hutterer ; Pierre-Loup Griffais ; Remi Cardona ; Robin Linden ; Scott James Remnant; Soren Sandmann Pedersen ; SuSE, Inc.; Thomas E. Dickey ; Tilman Sauerbeck ; Tobias Stoeckmann ; Tom Tromey ; Tomas Chvatal ; X Consortium; doxygen. Using", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxrender/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxrender@0.9.12-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mqYxt8G0nxB6TCrkuPePWaexVA9-Q0wDhQJvqGZHvh8/libxrender-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://xorg.freedesktop.org/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxrender", "versionInfo" : "0.9.12-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-libxtst-1.2.5-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1992-2024 Free Software Foundation, Inc.\nCopyright 1995 Network Computing Devices\nCopyright 1994 Network Computing Devices, Inc.\nCopyright 2005 Red Hat, Inc.\nCopyright 1992, 1993, 1995, 1998 The Open Group\nCopyright 1990, 1991 by UniSoft Group Limited\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, Inc.\nCopyright (c) 2007, Oracle and/or its affiliates\nCopyright (c) 1992, 1994, 1995 X Consortium\nCopyright (c) 1992 by UniSoft Group Ltd.\n\nAuthors: Adam Jackson ; Adam Jackson ; Alan Coopersmith ; Alan Coopersmith ; Alexander Gottwald ; Alexandre Oliva ; Bootstrap Authors; Christos Zoulas ; Colin Walters ; Daniel Stone ; Egbert Eich ; Egbert Eich ; Emil Velikov ; Fernando Carrijo ; Fran,cois Pinard; Free Software Foundation, Inc.; Gaetan Nadon ; Gary V. Vaughan; Gordon Matzigkeit; Gordon Matzigkeit ; Ian Romanick ; James Cloos ; Jeremy Huddleston ; Jesse Adkins ; Julien Cristau ; Kaleb Keithley ; Keith Packard ; Kevin E Martin ; Kieron Drake Generator DocBook XSL Stylesheets; Magnus Kessler ; Matt Dew ; Matthieu Herrb ; Michael Joost ; Mihail Konev ; Network Computing Devices; Network Computing Devices, Inc.; Oracle and/or its affiliates; Paulo Cesar Pereira de Andrade ; Paulo Zanoni ; Peter Hutterer ; Peter Hutterer ; Peter Hutterer ; Red Hat, Inc.; Scott James Remnant; Soren Sandmann Pedersen ; The Open Group; Tobias Koch ; Tobias Stoeckmann ; Tom Tromey ; UniSoft Group Limited; UniSoft Group Ltd.; X Consortium; zoka ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/libxtst/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/CsfIGHM1XVl-S-7M8F1CN0ZHKRZWpyVNmU5uK5ci4HI/libxtst-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/libxtst@1.2.5-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://wiki.freedesktop.org/xorg/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/libxtst", "versionInfo" : "1.2.5-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-musl-utils-1.2.5-r21-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2011-2012 Nicholas J. Kain\nCopyright 2004 Sun Microsystems, Inc.\nCopyright (c) 1999-2019, Arm Limited\nCopyright (c) 2017-2018 Arm Limited\nCopyright (c) 2003-2009 Bruce D. Evans\nCopyright (c) 2009-2011, Bruce D. Evans, Steven G. Kargl, David Schultz\nCopyright (c) 2005 Bruce D. Evans and Steven G. Kargl\nCopyright (c) 1994 David Burren\nCopyright (c) 2003-2011 David Schultz\nCopyright (c) 2005-2008 David Schultz \nCopyright (c) 2003 Poul-Henning Kamp\nCopyright (c) 2005-2020 Rich Felker\nCopyright (c) 1998-2014 Solar Designer\nCopyright (c) 2008 Stephen L. Moshier\nCopyright (c) 2008 Stephen L. Moshier \nCopyright (c) 2003-2009 Steven G. Kargl\nCopyright (c) 2008 Steven G. Kargl, David Schultz, Bruce D. Evans\nCopyright (c) 1993,2004 Sun Microsystems\nCopyright (c) 2008 The Android Open Source Project\nCopyright (c) 1996, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 2011 Valentin Ochs\nCopyright (c) 2001-2008 Ville Laurikari\nCopyright (c) 2001-2009 Ville Laurikari \nCopyright (c) 1993 by Sun Microsystems, Inc.\nCopyright (c) 2011 by Valentin Ochs", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/musl-utils/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5NEfbCJ-tYGbrneHSll6s7mFeP2FYNCGCoh3lm0AnAM/musl-~-21.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/musl-utils@1.2.5-r21?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://musl.libc.org/", "licenseConcluded" : "(BSD-2-Clause AND MIT AND GPL-2.0-or-later)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/musl-utils", "versionInfo" : "1.2.5-r21" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-musl-1.2.5-r21-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2011-2012 Nicholas J. Kain\nCopyright 2004 Sun Microsystems, Inc.\nCopyright (c) 1999-2019, Arm Limited\nCopyright (c) 2017-2018 Arm Limited\nCopyright (c) 2003-2009 Bruce D. Evans\nCopyright (c) 2009-2011, Bruce D. Evans, Steven G. Kargl, David Schultz\nCopyright (c) 2005 Bruce D. Evans and Steven G. Kargl\nCopyright (c) 1994 David Burren\nCopyright (c) 2003-2011 David Schultz\nCopyright (c) 2005-2008 David Schultz \nCopyright (c) 2003 Poul-Henning Kamp\nCopyright (c) 2005-2020 Rich Felker\nCopyright (c) 1998-2014 Solar Designer\nCopyright (c) 2008 Stephen L. Moshier\nCopyright (c) 2008 Stephen L. Moshier \nCopyright (c) 2003-2009 Steven G. Kargl\nCopyright (c) 2008 Steven G. Kargl, David Schultz, Bruce D. Evans\nCopyright (c) 1993,2004 Sun Microsystems\nCopyright (c) 2008 The Android Open Source Project\nCopyright (c) 1996, 1998 The NetBSD Foundation, Inc.\nCopyright (c) 2011 Valentin Ochs\nCopyright (c) 2001-2008 Ville Laurikari\nCopyright (c) 2001-2009 Ville Laurikari \nCopyright (c) 1993 by Sun Microsystems, Inc.\nCopyright (c) 2011 by Valentin Ochs", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/musl/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cvgHXAjAGZtkfdLif0pEkNMGYspuLn608d1MFKRHVD4/musl-~-21.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/musl@1.2.5-r21?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://musl.libc.org/", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/musl", "versionInfo" : "1.2.5-r21" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-openjdk17-17.0.18-p8-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2008, Google Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/community/openjdk17/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/openjdk17@17.0.18_p8-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6rnyrt7HkSQE2skpKs5B2xtSNNiYzDvZnBy39kYNAd0/openjdk17-~_p8-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/openjdk/jdk17u", "licenseConcluded" : "GPL-2.0-only WITH Classpath-exception-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/openjdk17", "versionInfo" : "17.0.18_p8-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-p11-kit-trust-0.25.5-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2006 Andreas Jellinghaus\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2017, 2021-2023 Red Hat, Inc.\nCopyright (c) 2020 Amazon.com, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Collabora Ltd\nCopyright (c) 1990, 1993 Copyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2003 Internet Software Consortium\nCopyright (c) 2004, 2005, 2007, 2011 Internet Systems Consortium, Inc.\nCopyright (c) 2001 Mike Barcroft \nCopyright (c) 2013 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Red Hat Inc\nCopyright (c) 2012 Stef Walter\nCopyright (c) 2004 Stefan Walter\nCopyright (c) 2002-2004 Tim J. Robbins\nCopyright (c) 2000-2002, 2007, 2010 Todd C. Miller \nCopyright (c) 1995-2000 Ulrich Drepper \nCopyright (c) 1994 X Consortium\nCopyright (c) 1996, 1998 by Internet Software Consortium\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) 1995 by International Business Machines, Inc.\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus\ncopyright 1997-2017 Simon Tatham\n\nAuthors: Adam Sampson ; Adam Williamson ; Albert Chin-A-Young ; Alexander Bokovoy ; Alexander Sosedkin ; Alexandre Oliva ; Alon Bar-Lev ; Alvin Chen ; Amazon.com, Inc.; Anders Kaseorg ; Anderson Toshiyuki Sasaki ; Andreas Jellinghaus; Andreas Metzler ; Andreas Metzler ; Andreas Metzler ; Antoine Jacoutot ; Antoine Jacoutot ; Balazs Ur ; Baruch Siach ; Benjamin Herrenschmidt ; Bootstrap Authors; Bruno Haible; Bruno Haible ; Claes Nasten ; Clemens Lang ; Colin Plumb; Colin Walters ; Collabora Ltd; Daiki Ueno; Daiki Ueno ; Daiki Ueno ; Dan Winship ; Daniel Black ; Daniel Engberg ; David Cook ; David Halls ; David Korczynski ; David Woodhouse ; David Woodhouse ; David Woodhouse ; Dmitry Eremin-Solenikov ; Doan Tran Cong Danh ; Dr. Volker Zell ; Eli Schwartz ; Emmanuel Dreyfus ; Erdem Meydanli ; Fabian Groffen ; Florian Weimer ; Fran,cois Pinard; Frederik Boster ; Free Software Foundation, Inc.; Free Software Foundation. Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit ; Gustavo Zacarias ; Harald Hoyer ; Ingo Franzki ; International Business Machines, Inc.; Internet Software Consortium; Internet Systems Consortium, Inc.; Issam E. Maghni ; Jakub Jelen ; Jan Alexander Steffens; John Hein ; Justin King-Lacroix ; Kai Engert ; Kai Kang ; Kai Takahashi ; Kalev Lember ; LGTM Migrator ; Laszlo Ersek ; Leonardo Brondani Schenkel ; Leonardo Brondani Schenkel ; Lew Palm ; Lubomir Rintel ; Ludovic Rousseau ; Mantas Mikulenas ; MaxHearnden ; Michael Cronenworth ; Michael Cronenworth ; Mike Barcroft; Milan Crha ; Nathan Barrett-Morrison ; Nathaniel McCallum ; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos ; Nikos Mavrogiannopoulos ; Pankaj ; Pankaj Sharma ; Pascal Ernster ; Pascal Terjan ; Pavel A; Pavel A ; Pino Toscano ; Pino Toscano ; Raphael Medaer ; Red Hat Inc; Red Hat, Inc; Redhat Inc.; Rob McMahon ; Robert Milasan ; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus; Roman Bogorodskiy ; Rosen Penev ; S-P Chan; Scott James Remnant; Simon Haggett ; Simon Josefsson ; Simon Tatham; Stanislav Brabec ; Stef Waler ; Stef Walter; Stef Walter ; Stef Walter , Daiki Ueno; Stef Walter , Daiki Ueno, Anderson Sasaki; Stef Walter Jakub Jelen ; Stef Walter ; Stef Walter , Daiki Ueno; Stef Walter , Daiki Ueno, Zoltan Fridrich ; Stef Walter Laszlo Ersek ; Stef Walter ; Stef Walter Jakub Jelen ; Stef Walter ; Stef Walter Jakub Jelen ; Stefan Walter; Stefano Garzarella ; Steve Reid ; Tavian Barnes ; The Regents of the University of California; Tim J. Robbins; Timo Jyrinki ; Todd C. Miller; Tom Sutcliffe ; Tom Tromey ; Tomas Tomecek ; Ulrich Drepper; Ulrich Drepper ; Ulrich Drepper , Bruno Haible ; Ulrich Drepper , Bruno Haible , Macro; Vincent JARDIN ; X Consortium; X Ruoyao ; Xi Ruoyao ; Yuri Chornoivan ; Zoltan Fridrich ; Zoltan Fridrich , Daiki Ueno; Zoltan Fridrich , Daiki Ueno ; g10 Code GmbH; manphiz@gmail.com ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/p11-kit-trust/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/p11-kit-trust@0.25.5-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0BBhxiluAE5noO8JvaJY-ipcf5MOpqYBzOyy3VqLaVs/p11-kit-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://p11-glue.freedesktop.org/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/p11-kit-trust", "versionInfo" : "0.25.5-r2" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-p11-kit-0.25.5-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2006 Andreas Jellinghaus\nCopyright 1992-2023 Free Software Foundation, Inc.\nCopyright 2016 Google Inc.\nCopyright 2017, 2021-2023 Red Hat, Inc.\nCopyright (c) 2020 Amazon.com, Inc.\nCopyright (c) 2004-2019, 2021 Bootstrap Authors\nCopyright (c) 2011 Collabora Ltd\nCopyright (c) 1990, 1993 Copyright (c) 1987, 1993 The Regents of the University of California\nCopyright (c) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.\nCopyright (c) 2000, 2001, 2003 Internet Software Consortium\nCopyright (c) 2004, 2005, 2007, 2011 Internet Systems Consortium, Inc.\nCopyright (c) 2001 Mike Barcroft \nCopyright (c) 2013 Nikos Mavrogiannopoulos\nCopyright (c) 2012 Red Hat Inc\nCopyright (c) 2012 Stef Walter\nCopyright (c) 2004 Stefan Walter\nCopyright (c) 2002-2004 Tim J. Robbins\nCopyright (c) 2000-2002, 2007, 2010 Todd C. Miller \nCopyright (c) 1995-2000 Ulrich Drepper \nCopyright (c) 1994 X Consortium\nCopyright (c) 1996, 1998 by Internet Software Consortium\nCopyright 2006, 2007 g10 Code GmbH\nPortions Copyright (c) 1995 by International Business Machines, Inc.\nPortions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus\ncopyright 1997-2017 Simon Tatham\n\nAuthors: Adam Sampson ; Adam Williamson ; Albert Chin-A-Young ; Alexander Bokovoy ; Alexander Sosedkin ; Alexandre Oliva ; Alon Bar-Lev ; Alvin Chen ; Amazon.com, Inc.; Anders Kaseorg ; Anderson Toshiyuki Sasaki ; Andreas Jellinghaus; Andreas Metzler ; Andreas Metzler ; Andreas Metzler ; Antoine Jacoutot ; Antoine Jacoutot ; Balazs Ur ; Baruch Siach ; Benjamin Herrenschmidt ; Bootstrap Authors; Bruno Haible; Bruno Haible ; Claes Nasten ; Clemens Lang ; Colin Plumb; Colin Walters ; Collabora Ltd; Daiki Ueno; Daiki Ueno ; Daiki Ueno ; Dan Winship ; Daniel Black ; Daniel Engberg ; David Cook ; David Halls ; David Korczynski ; David Woodhouse ; David Woodhouse ; David Woodhouse ; Dmitry Eremin-Solenikov ; Doan Tran Cong Danh ; Dr. Volker Zell ; Eli Schwartz ; Emmanuel Dreyfus ; Erdem Meydanli ; Fabian Groffen ; Florian Weimer ; Fran,cois Pinard; Frederik Boster ; Free Software Foundation, Inc.; Free Software Foundation. Inc.; Gary V. Vaughan; Google Inc.; Gordon Matzigkeit; Gordon Matzigkeit ; Gustavo Zacarias ; Harald Hoyer ; Ingo Franzki ; International Business Machines, Inc.; Internet Software Consortium; Internet Systems Consortium, Inc.; Issam E. Maghni ; Jakub Jelen ; Jan Alexander Steffens; John Hein ; Justin King-Lacroix ; Kai Engert ; Kai Kang ; Kai Takahashi ; Kalev Lember ; LGTM Migrator ; Laszlo Ersek ; Leonardo Brondani Schenkel ; Leonardo Brondani Schenkel ; Lew Palm ; Lubomir Rintel ; Ludovic Rousseau ; Mantas Mikulenas ; MaxHearnden ; Michael Cronenworth ; Michael Cronenworth ; Mike Barcroft; Milan Crha ; Nathan Barrett-Morrison ; Nathaniel McCallum ; Nikos Mavrogiannopoulos; Nikos Mavrogiannopoulos ; Nikos Mavrogiannopoulos ; Pankaj ; Pankaj Sharma ; Pascal Ernster ; Pascal Terjan ; Pavel A; Pavel A ; Pino Toscano ; Pino Toscano ; Raphael Medaer ; Red Hat Inc; Red Hat, Inc; Redhat Inc.; Rob McMahon ; Robert Milasan ; Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, Ben Harris, Malcolm Smith, Ahmad Khalifa, Markus; Roman Bogorodskiy ; Rosen Penev ; S-P Chan; Scott James Remnant; Simon Haggett ; Simon Josefsson ; Simon Tatham; Stanislav Brabec ; Stef Waler ; Stef Walter; Stef Walter ; Stef Walter , Daiki Ueno; Stef Walter , Daiki Ueno, Anderson Sasaki; Stef Walter Jakub Jelen ; Stef Walter ; Stef Walter , Daiki Ueno; Stef Walter , Daiki Ueno, Zoltan Fridrich ; Stef Walter Laszlo Ersek ; Stef Walter ; Stef Walter Jakub Jelen ; Stef Walter ; Stef Walter Jakub Jelen ; Stefan Walter; Stefano Garzarella ; Steve Reid ; Tavian Barnes ; The Regents of the University of California; Tim J. Robbins; Timo Jyrinki ; Todd C. Miller; Tom Sutcliffe ; Tom Tromey ; Tomas Tomecek ; Ulrich Drepper; Ulrich Drepper ; Ulrich Drepper , Bruno Haible ; Ulrich Drepper , Bruno Haible , Macro; Vincent JARDIN ; X Consortium; X Ruoyao ; Xi Ruoyao ; Yuri Chornoivan ; Zoltan Fridrich ; Zoltan Fridrich , Daiki Ueno; Zoltan Fridrich , Daiki Ueno ; g10 Code GmbH; manphiz@gmail.com ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/p11-kit/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/p11-kit@0.25.5-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/u7rD-VrYr9_k0HSDlpYojzoxhGk4hIht-jlkLwtCSZo/p11-kit-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://p11-glue.freedesktop.org/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/p11-kit", "versionInfo" : "0.25.5-r2" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-scanelf-1.3.8-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2007-2024 Gentoo Foundation\nCopyright 1999-2024 Gentoo Foundation Distributed\nCopyright 2004-2024 Mike Frysinger - \nCopyright 2005-2024 Mike Frysinger - 2008-2012 Fabian Groffen\nCopyright 2003-2012 Ned Ludd - \nCopyright 2012-2024 The ChromiumOS Authors\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\ncopyrighted by the Free Software Foundation\n\nAuthors: Free Software Foundation, Inc.; Gentoo Foundation; Gentoo Foundation Distributed; Mike Frysinger; Mike Frysinger - Fabian Groffen; Mike Frysinger ; Ned Ludd; Ned Ludd ; Ned Ludd Generator DocBook XSL Stylesheets; The ChromiumOS Authors; the Free Software Foundation", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/scanelf/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/scanelf@1.3.8-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/341jW5-0bovHc1A_e1R0sEzWUDUNkWuqyNFJWfRVaI0/pax-utils-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/scanelf", "versionInfo" : "1.3.8-r2" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-skalibs-libs-2.14.4.0-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright (c) 2011-2025 Laurent Bercot \nCopyright (c) 2005-2017 Rich Felker, Szabolcs Nagy, Timo Teras, Alexander Monakov\nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: Laurent Bercot; Laurent Bercot ; Rich Felker, Szabolcs Nagy, Timo Teras, Alexander Monakov; The Linux Foundation and its contributors; maintainer Laurent Bercot ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/skalibs-libs/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/skalibs-libs@2.14.4.0-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/d9hNn7UgyuwhVDU8AqV_DGQBfKHjXRlTDpatkU70_wA/skalibs-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://skarnet.org/software/skalibs/", "licenseConcluded" : "ISC", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/skalibs-libs", "versionInfo" : "2.14.4.0-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-ssl-client-1.37.0-r30-arch-x86-64-distro-3.23.3", "copyrightText" : "BusyBox (c) 2007 by Yuichi Nakamura \nCopyright 2002 Andi Kleen, SuSE Labs\nCopyright 2006 Bernhard Reutner-Fischer\nCopyright 2006 Bernhard Reutner-Fischer \nCopyright 1999 Dave Cinege\nCopyright 2010, Denys Vlasenko\nCopyright 1994-1996 Donald Becker\nCopyright 1999-2003 Donald Becker and Scyld Computing Corporation\nCopyright 2005 Frank Sorenson \nCopyright 1999 George Staikos\nCopyright 2001 Glenn McGrath\nCopyright 2005 H. Peter Anvin\nCopyright Joern Engel \nCopyright 1989 - 1991, Julianne Frances Haugh \nCopyright 2007 KaiGai Kohei \nCopyright 1997, 2000, 2001 Larry Doolittle \nCopyright 2002 Laurence Anderson\nCopyright 1996, 1997 Linux International\nCopyright 1996, 1997 Linux International. I've\nCopyright 2004 Matt Mackall \nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com)\nCopyright 1994 Matthew Dillon (dillon@apollo.west.oic.com) Vladimir Oleynik \nCopyright 1993 MicroWalt Corporation\nCopyright 1991-1997 Miquel van Smoorenburg\nCopyright 2005 Rob Landley \nCopyright 2006, 2007 Stefan Rompf \nCopyright 2003 Tito Ragusa \nCopyright 2004 Tony J. White\nCopyright 1998 by Albert Cahalan\nCopyright 2002 by Kai Germaschewski \nCopyright 1997,.. by Peter Hanecak \nCopyright 2006 by Rob Landley \nCopyright (c) 2000\nCopyright (c) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)\nCopyright (c) 2002 AYR Networks, Inc.\nCopyright (c) 2001 Aaron Lehmann \nCopyright (c) 2002 Al Stone\nCopyright (c) 1994,1996 Alessandro Rubini (rubini@ipvvis.unipv.it)\nCopyright (c) 2004 Alexander Guy \nCopyright (c) Andre Masella \nCopyright (c) Andreas Neuper\nCopyright (c) 1994-1998 Andries E. Brouwer \nCopyright (c) 1999 Anthony Towns \nCopyright (c) 2000 Arcom Control System Ltd\nCopyright (c) Arne Bernin \nCopyright (c) 2006 Aurelien Jacobs \nCopyright (c) 2014 Bartosz Golaszewski \nCopyright (c) 2003 Bastian Blank \nCopyright (c) 2003 Bernardo Innocenti \nCopyright (c) 2008 Bernhard Reutner-Fischer\nCopyright (c) 2008 Bernhard Reutner-Fischer Copyrihgt\nCopyright (c) 2006 Bernhard Reutner-Fischer \nCopyright (c) 2010 Bradley M. Kuhn \nCopyright (c) 1992 Branko Lankester\nCopyright (c) 1996 Brian Candler \nCopyright (c) 1995 Bruce Perens\nCopyright (c) 2008, BusyBox Team\nCopyright (c) 1994-1996 Charles L. Blake\nCopyright (c) 1998, 1999 Charles P. Wright\nCopyright (c) 2002-2009 Craig\nCopyright (c) 2008 Darius Augulis \nCopyright (c) 1998 Dave Cinege\nCopyright (c) 1994 David Burren\nCopyright (c) 1999 David Mosberger-Tang \nCopyright (c) 2001 David Schleef \nCopyright (c) 2006 Denys Vlasenko\nCopyright (c) 2010 Denys Vlasenko Split\nCopyright (c) 2017 Denys Vlasenko \nCopyright (c) 2007 Denys Vlasenko \nCopyright (c) 2000 Edward Betts \nCopyright (c) 2004,2005 Enrik Berkhan \nCopyright (c) 1998 Enrique Zanardi \nCopyright (c) 2003 Erik Andersen\nCopyright (c) 2001 Erik Andersen \nCopyright (c) 2001, 2002, 2003, 2004, 2005 Free Software Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1991,92,95,96,97,98,99,2000,01 Free Software Foundation, Inc.\nCopyright (c) 86, 1991-1997, 1999 Free Software Foundation, Inc.\nCopyright (c) 86, 89, 91, 1995-2002, 2004 Free Software Foundation, Inc.\nCopyright (c) 91, 1995-2002 Free Software Foundation, Inc.\nCopyright (c) 2006 Freescale Semiconductor, Inc \nCopyright (c) 1997, 1998, 1999, 2000 Frodo Looijaard \nCopyright (c) 2006 Gabriel Somlo\nCopyright (c) 2001-2006, Gerrit Pape\nCopyright (c) 2002,2003 Glenn Engel \nCopyright (c) 2003 Glenn L. McGrath\nCopyright (c) 2002 Glenn McGrath\nCopyright (c) 1996-1999 Guy Maor \nCopyright (c) 2003, 2004 Henning Brauer \nCopyright (c) 1997-2005 Herbert Xu \nCopyright (c) 1999 Hewlett-Packard Co\nCopyright (c) 2001, Hewlett-Packard Company\nCopyright (c) 2001 Hewlett-Packard Laboratories\nCopyright (c) 2013 INSIDE Secure Corporation\nCopyright (c) 1999-2005 Igor Pavlov\nCopyright (c) 2014 Isaac Dunham \nCopyright (c) 2000, Jan-Derk Bakker (J.D.Bakker@its.tudelft.nl)\nCopyright (c) 2022 Jason A. Donenfeld \nCopyright (c) 2000 Jean-Pierre Lefebvre and Remi Lefebvre \nCopyright (c) 1992-1993 Jean-loup Gailly\nCopyright (c) 2002 Jeff Angielski, The PTR Group \nCopyright (c) 1996 Jeff Noxon \nCopyright (c) 2000-2001 Jeff Tranter (tranter@pobox.com)\nCopyright (c) 2006 Jesse Dutton \nCopyright (c) 2017 Jo-Philipp Wich \nCopyright (c) 1996-2006 Julian Seward \nCopyright (c) 2016-2018 Kaarle Ritvanen\nCopyright (c) KaiGai Kohei \nCopyright (c) 2006 - 2007 KaiGai Kohei \nCopyright (c) 2004 Kay Sievers \nCopyright (c) 2010 Kevin Cernekee \nCopyright (c) 2002 Khalid Aziz\nCopyright (c) 2000,2001 Larry Doolittle \nCopyright (c) 2001 Larry Doolittle, \nCopyright (c) 2010 Lauri Kasanen\nCopyright (c) 2000 Lennert Buytenhek\nCopyright (c) 1991, 1992 Linus Torvalds\nCopyright (c) 2007 Loic Grenie \nCopyright (c) 2001 Magnus Damm \nCopyright (c) 2009 Maksym Kryzhanovskyy \nCopyright (c) 2009 Malek Degachi \nCopyright (c) 2001 Manuel Novoa III\nCopyright (c) 2001 Manuel Novoa III \nCopyright (c) Manuel Novoa III and Vladimir Oleynik \nCopyright (c) 2011 Marek Becka \nCopyright (c) 2010 Marek Polacek \nCopyright (c) 2002 Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG\nCopyright (c) 1996 Markus Franz Xaver Johannes Oberhumer\nCopyright (c) 2017 Markus Gothe \nCopyright (c) 2000,2001 Matt Kraai\nCopyright (c) 2000,2001 Matt Kraai \nCopyright (c) 2001 Matt Krai\nCopyright (c) 1999 Matthew Ramsay Chris Trew \nCopyright (c) 1992-1998 Michael K. Johnson\nCopyright (c) 2006 Michael Opdenacker \nCopyright (c) 2008 Michele Sanges \nCopyright (c) Michiel Huisjes\nCopyright (c) 2008 Natanael Copa \nCopyright (c) 2004 Nicholas Miell\nCopyright (c) 2008 Nokia Corporation\nCopyright (c) 2020 Norbert Lange \nCopyright (c) 2008 Nuovation System Designs, LLC\nCopyright (c) 2005 Odd Arild Olsen (oao at fibula dot no)\nCopyright (c) 2008 Pascal Bellard\nCopyright (c) 2003 Paul Mundt \nCopyright (c) 2003 Paul Sheer\nCopyright (c) PeerSec Networks, 2002-2011\nCopyright (c) 2011 Pere Orga \nCopyright (c) 2004 Peter Willis \nCopyright (c) 1987,1997, Prentice Hall\nCopyright (c) 1991-2, RSA Data Security, Inc.\nCopyright (c) 2002 Randy Dunlap\nCopyright (c) 1987, 1988 Regents of the University of California\nCopyright (c) 1992, 1993, 1994, 1995 Remy Card (card@masi.ibp.fr) Laboratoire MASI - Institut Blaise Pascal\nCopyright (c) 1993, 1994 Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris\nCopyright (c) 1997-1999 Richard Gooch\nCopyright (c) 1993 Rick Sladkey \nCopyright (c) 2006 Rob Landley\nCopyright (c) 2005, 2006 Rob Landley \nCopyright (c) 2002 Robert Griebl \nCopyright (c) 2005 Roberto A. Foglietta\nCopyright (c) 2005-6, Roberto A. Foglietta\nCopyright (c) 1992 Roger Binns\nCopyright (c) 2022 Roger Knecht \nCopyright (c) 2013 Rolf Fokkens \nCopyright (c) 2002-2003 Romain Lievin \nCopyright (c) 2002-2005 Roman Zippel \nCopyright (c) 2003 Russ Dill \nCopyright (c) 2012 S-G Bergh \nCopyright (c) 2002-2005 Sam Ravnborg \nCopyright (c) 2010 Sergey Naumov \nCopyright (c) 2000, 2001 Sterling Huxley \nCopyright (c) 2002 Steven J. Hill \nCopyright (c) 2001 Stuart Hughes \nCopyright (c) 2018 Sven-Goran Bergh \nCopyright (c) 1980 The Regents of the University of California\nCopyright (c) 1999, 2000 The ht://Dig Group\nCopyright (c) 1993, 1994 Theodore Ts'o. Also\nCopyright (c) 2008 Timo Teras \nCopyright (c) 2005 Tito Ragusa \nCopyright (c) 2005 Tobias Klauser \nCopyright (c) 2003 Todd C. Miller \nCopyright (c) University of Delaware 1992-2009\nCopyright (c) 1999 Uwe Ohse \nCopyright (c) 2008 Vladimir Dronnikov\nCopyright (c) 2009 Vladimir Dronnikov \nCopyright (c) Vladimir N. Oleynik \nCopyright (c) 2005 Vladimir Oleynik\nCopyright (c) 2001,2002 Vladimir Oleynik \nCopyright (c) 2005 W. Michael Petullo \nCopyright (c) 1993-2002 Werner Almesberger\nCopyright (c) 2003 Yang Xiaopeng\nCopyright (c) 2015 by Ari Sundholm \nCopyright (c) 2015 by Ari Sundholm and Tuxera Inc.\nCopyright (c) 2003 by Arthur van Hoff (avh@strangeberry.com)\nCopyright (c) 2002 by Bart Visscher \nCopyright (c) 2014 by Bartosz Golaszewski \nCopyright (c) 2008 by Bernhard Reutner-Fischer\nCopyright (c) 1995, 1996 by Bruce Perens \nCopyright (c) 2009 by Dan Fandrich \nCopyright (c) 2000 by Daniel Jacobowitz\nCopyright (c) 2004 by David Brownell\nCopyright (c) 1999 by David I. Bell\nCopyright (c) 2008 by Denys Vlasenko \nCopyright (c) 2007 by Denys Vlasenko \nCopyright (c) 2002 by Dmitry Zakharov \nCopyright (c) 2004 by Ed Clark\nCopyright (c) 2001 by Emanuele Aina \nCopyright (c) 1999-2004 by Erik Andersen \nCopyright (c) 1999-2004 by Erik Andersen Adjusted\nCopyright (c) 1999-2004 by Erik Andersen Fix\nCopyright (c) 1999-2004 by Erik Andersen and Ron Alder \nCopyright (c) 2014 by Fugro Intersite B.V. \nCopyright (c) 2000 by Gennady Feldman \nCopyright (c) 2001 by Gennady Feldman Changes Made\nCopyright (c) 2000 by Glenn McGrath\nCopyright (c) 2010 by Grigory Batalov \nCopyright (c) 2006 by Jan Kiszka \nCopyright (c) 2006 by Jason Schoon \nCopyright (c) 1999,2000,2001 by John Beppu \nCopyright (c) 2007 by KaiGai Kohei \nCopyright (c) 2000 by Karl M. Hegbloom \nCopyright (c) 2001 by Laurence Anderson\nCopyright (c) 1999,2000,2001 by Lineo, inc.\nCopyright (c) 1999 by Lineo, inc. and John Beppu\nCopyright (c) 1999,2000,2001 by Lineo, inc. and Mark Whitley\nCopyright (c) 2023 by LoveSy \nCopyright (c) 2005 by Marc Leeman \nCopyright (c) 1999,2000,2001 by Mark Whitley \nCopyright (c) 2010 by Matheus Izvekov \nCopyright (c) 2000 by Matt Kraai \nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it>\nCopyright (c) 2003 by Matteo Croce <3297627799@wind.it> Hacked\nCopyright (c) 2001 by Michael Habermann Copyrigjt (c)\nCopyright (c) 2005 by Mike Frysinger \nCopyright (c) 2008 by Patricia Muscalu \nCopyright (c) 1999 by Randolph Chung \nCopyright (c) 2003,2004 by Rob Landley \nCopyright (c) 2003 by Rob Landley , Joey Hess\nCopyright (c) 2006 by Rob Sullivan\nCopyright (c) 2005 by Rob Sullivan \nCopyright (c) 2005 by Robert Sullivan \nCopyright (c) 2006 by Robert Sullivan \nCopyright (c) 2007 by Stephane Billiart \nCopyright (c) 2012 by Sven Oliver SvOlli Moll \nCopyright (c) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 by Theodore Ts'o\nCopyright (c) 2008 by Timo Teras \nCopyright (c) 2003 by Tito Ragusa \nCopyright (c) 2005 by Tito Ragusa \nCopyright (c) 1994-2000 by Tomi Ollila\nCopyright (c) 2008 by Vladimir Dronnikov \nCopyright (c) 2002 by Vladimir Oleynik \nCopyright (c) 2021 by YU Jincheng \nCopyright (c) 2006 by Yoshinori Sato \nCopyright (c) 2017 by \nCopyright (c) 2000 by spoon \nCopyright (c) 2008 by \nCopyright (c) (c) 2003 Vladimir Oleynik \nCopyright (c) 1986-2003 may safely be consumed\nCopyright (c) 2006-2015 wolfSSL Inc.\nDenys Vlasenko (c) 2008\nMark Lord (c) 1994-2002\nPaul Mundt (c) 2004\nPortions copyright (c) 1990-1996 Free Software Foundation, Inc.\nTito Ragusa (c) 2004\nVladimir Oleynik 2001\nVladimir Oleynik (c) 2001-2005\n(c) 2002\n(c) Copyright 2000, Axis Communications AB\n(c) Eero Tamminen\n(c) 1995 Erik Andersen \n(c) 2007 Gabriel Somlo\n(c) 2018 Gavin D. Howard and contributors\n(c) 2002 Glenn McGrath\n(c) 2007 Hiroshi Shinji \n(c) 2006 Jac Goudsmit\n(c) Lauri Kasanen\n(c) 1991 Linus Torvalds\n(c) 2005 Martin Cracauer cracauer @ cons.org http://www.cons.org/cracauer/ http://www.cons.org/cracauer\n(c) 2002 Robert Griebl\n(c) 2009 Stefan Seyfried \n(c) 2008 Timo Teras \n(c) Vladimir Oleynik \n(c) 2007 Yuichi Nakamura \n(c) 1997 by Andi Kleen\n(c) 1995-1999 by Geert Uytterhoeven (Geert.Uytterhoeven@cs.kuleuven.ac.be)\n(c) 2007 by Tito Ragusa \n(c) 2002,2003 by Vladimir Oleynik \n(c) 2007 by Yuichi Nakamura \n(c) by a whole\n(c) 2003 - correct\n(c) 2001-2005 \n(c) $?i (c) Y\ncopyright (c) 2018 Gavin D. Howard and contributors\ncopyright (c) 1995 Ian Jackson \ncopyright (c) 1996-2006 Julian R Seward\ncopyright (c) 2002 Romain Lievin \ncopyright (c) 1997 by Vernon Hoxie\ncopyright (c) 2001 by glenn\ncopyrighted by many authors\ncopyrighted by the Free Software Foundation\n(c) 2009 \n\nAuthors: $?i Y; ; ; ; ; ; A. V. Le Blanc; AT&T; AYR Networks, Inc.; Aaron Lehmann; Adam Tkac; Adam Tkac ; Al Stone; Albert Cahalan; Alessandro Rubini; Alexander Guy; Alexander Shishkin; Alexander Shishkin ; Alexey Kuznetsov ; Alexey Kuznetsov, ; Alexey Kuznetsov, Patrick McHardy ; Andi Kleen; Andi Kleen, SuSE Labs; Andre Masella; Andreas Neuper; Andreas Schwab; Andries E. Brouwer; Anthony Towns; Arcom Control System Ltd; Ari Sundholm; Ari Sundholm and Tuxera Inc.; Arkadiusz Mickiewicz ; Arnd Bergmann ; Arne Bernin; Arnold Robbins; Arthur van Hoff; Aurelien Jacobs; Axis Communications AB; Bart Visscher; Bart Visscher ; Bartosz Golaszewski; Baruch Siach , Orex Computed Radiography; Bastian Blank; Ben Zeckel ; Bernardo Innocenti; Bernhard Reutner-Fischer; Bernhard Reutner-Fischer Copyrihgt; Bjorn Ekwall ; Bradley M. Kuhn; Branko Lankester; Breno Leitao ; Brian Candler; Bruce Perens; Bryan Rittmeyer ; BusyBox Team; BusyBox by Yuichi Nakamura; Charles L. Blake; Charles P. Wright; Charles P. Wright ; Chip Rosenthal Covad Communications ; Christopher Hoover ; Clifford Wolf (god@clifford.at); Craig; Dan Fandrich; Daniel Jacobowitz; Daniel Jacobowitz ; Darius Augulis; Dave Cinege; David Brownell; David Burren; David Burren ; David I. Bell; David Keppel ; David MacKenzie ; David MacKenzie, djm@gnu.ai.mit.edu; David Mosberger-Tang; David Schleef; David Schleef ; Denys Vlasenko; Denys Vlasenko ; Denys Vlasenko Split; Dmitry Zakharov; Donald Becker; Donald Becker ; Donald Becker and Scyld Computing Corporation; Donald Becker, http://www.scyld.com/ http://www.scyld.com/wakeonlan.html; Ed Clark; Edward Betts; Eero Tamminen; Emanuele Aina; Emanuele Caratti ; Enrik Berkhan; Enrique Zanardi; Eric Gisin; Eric Rasmussen ; Erik Andersen; Erik Andersen ; Erik Andersen ; Erik Andersen ; Erik Andersen ; Erik Andersen Adjusted; Erik Andersen Fix; Erik Andersen and Kent Robotti ; Erik Andersen and Ron Alder; Erik Baalbergen; Fernando Silveira ; Frank Sorenson; Fred N. van Kempen; Fred N. van Kempen, and others; Free Software Foundation; Free Software Foundation, Inc.; Freescale Semiconductor, Inc; Frodo Looijaard; Fugro Intersite B.V.; G. Somlo ; Gabriel Somlo; Gavin D. Howard and contributors; Geert Uytterhoeven; Gennady Feldman; Gennady Feldman Changes Made; George Staikos; Gerrit Pape; Gerrit Pape ; Glenn Engel; Glenn L. McGrath; Glenn McGrath; Grigory Batalov; Guy Maor; H. Peter Anvin; H. Peter Anvin I've; Henning Brauer; Herbert Xu; Hewlett-Packard Co; Hewlett-Packard Company; Hewlett-Packard Laboratories; Hiroshi Shinji; INSIDE Secure Corporation; Ian Jackson; Ignacio Garcia Perez (iggarpe at gmail dot com); Igor Pavlov; Isaac Dunham; J.T. Conklin; Jac Goudsmit; Jan Kiszka; Jan-Derk Bakker; Jason A. Donenfeld; Jason Schoon; Jean-Pierre Lefebvre and Remi Lefebvre; Jean-loup Gailly; Jeff Angielski, The PTR Group; Jeff Noxon; Jeff Tranter; Jesse Dutton; Jim McQuillan ; Jim Meyering. Busyboxed; Jo-Philipp Wich; Jody Bruchon (jody@jodybruchon.com); Joern Engel; John Beppu; Juan Quintela ; Julian R Seward; Julian R Seward (jseward@acm.org); Julian Seward; Julian Seward ; Julianne Frances Haugh; Kaarle Ritvanen; Kai Germaschewski; KaiGai Kohei; Karl M. Hegbloom; Kay Sievers; Kayvan Aghaiepour and David MacKenzie; Kevin Cernekee; Khalid Aziz; Larry Doolittle; Larry Doolittle ; Lasse Collin ; Lasse Collin Igor Pavlov ; Laurence Anderson; Lauri Kasanen; Lennert Buytenhek; Leonid Lisovskiy ; Lineo, inc.; Lineo, inc. and John Beppu; Lineo, inc. and Mark Whitley; Linus Torvalds; Linux International; Linux International. I've; Loic Grenie; LoveSy; Magnus Damm; Maintainer Gennady Feldman ; Maksym Kryzhanovskyy; Malek Degachi; Manuel Novoa III; Manuel Novoa III (mjn3@codepoet.org); Manuel Novoa III and Vladimir Oleynik; Marc Leeman; Marek Becka; Marek Michalkiewicz ; Marek Polacek; Mario Strasser , Zuercher Hochschule Winterthur, Netbeat AG; Mark Adler ; Mark Lord; Mark Whitley; Mark Whitley ; Markus Franz Xaver Johannes Oberhumer; Markus Gothe; Martin Cracauer cracauer @ cons.org; Martin Habets ; Matheus Izvekov; Matt Kraai; Matt Krai; Matt Mackall; Matt Mackall ; Matteo Croce; Matteo Croce Hacked; Matthew Dillon; Matthew Dillon Vladimir Oleynik; Matthew Ramsay Chris Trew; Maxime Coste ; Michael Habermann Copyrigjt; Michael K. Johnson; Michael Meskes; Michael Opdenacker; Michele Sanges; Michiel Huisjes; MicroWalt Corporation; Mike Frysinger; Miquel van Smoorenburg; Mrs. Brisby ; Natanael Copa; Nicholas Miell; Nico Erfurth ; Nokia Corporation; Norbert Lange; Nuovation System Designs, LLC; Odd Arild Olsen (oao at fibula dot no); Pascal Bellard; Pascal Bellard ; Patricia Muscalu; Paul Fox ; Paul Mackerras; Paul Mundt; Paul Sheer; Pedro Roque ; PeerSec Networks; Pere Orga; Pere Orga ; Peter Hanecak; Peter Orbaek ; Peter Willis; Prentice Hall; Quy Tonthat ; RSA Data Security, Inc.; Ralf Baechle ; Randolph Chung; Randy Dunlap; Regents of the University of California; Remy Card Laboratoire MASI - Institut Blaise Pascal; Remy Card Laboratoire MASI, Institut Blaise Pascal Universite Pierre et Marie Curie Paris; Rewritten by Vladimir Oleynik; Richard Gooch; Richard Henderson ; Richard Stallman; Rick Sladkey; Rob Landley; Rob Landley (rob@landley.net); Rob Landley , Joey Hess; Rob Sullivan; Robert Griebl; Robert Griebl ; Robert Sullivan; Roberto A. Foglietta; Roger Binns; Roger Knecht; Rolf Fokkens; Romain Lievin; Roman Zippel; Russ Dill; Russ Dill ; S-G Bergh; Sam Ravnborg; Savio Lam (lam836@cs.cuhk.hk); Sergey Naumov; Spencer Thomas, Joe Orost, James Woods, Jim McKie, Steve Davies, Ken Turkowski, Dave Mack and Peter Jannesen; Spencer W. Thomas; Stefan Rompf; Stefan Seyfried; Stephane Billiart; Sterling Huxley; Sterling Huxley ; Steve Reid ; Steven J. Hill; Stuart Herbert (S.Herbert@shef.ac.uk); Stuart Hughes; Sven Oliver SvOlli Moll; Sven Rudolph ; Sven-Goran Bergh; The Regents of the University of California; The ht://Dig Group; Theodore Ts'o; Theodore Ts'o, ; Theodore Ts'o. Also; Thomas Lundquist ; Tim Riker ; Timo Teras; Tito Ragusa; Tito Ragusa ; Tobias Klauser; Todd C. Miller; Tomi Ollila; Tomi Ollila ; Tony J. White; Ulrich Drepper ; Ulrich Drepper ; University of Delaware; Uwe Ohse; Vernon Hoxie; Vladimir Dronnikov; Vladimir Dronnikov ; Vladimir N. Oleynik; Vladimir N. Oleynik ; Vladimir Oleynik; Vladimir Oleynik ; W. Michael Petullo; Werner Almesberger; William Roadcap (roadcap@cfw.com); William Roadcap (roadcapw@cfw.com); YU Jincheng; Yang Xiaopeng; Yoichi Hariguchi ; Yoshinori Sato; Yuichi Nakamura; Yuichi Nakamura ; content Ken A; correct; dhankins@isc.org; glenn; hobbit@avian.org; hush. Also; many authors; may safely be consumed; spoon; the Free Software Foundation; the University of California, Berkeley and its contributors; the University of California, Lawrence Berkeley Laboratory and its contributors; whole; wolfSSL Inc.", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/ssl_client/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/csQgz_1iJJkFs2r3Ca1hFE2IYm1-H7J34lkrA2754HE/busybox-~-30.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/ssl_client@1.37.0-r30?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://busybox.net/", "licenseConcluded" : "GPL-2.0-only", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/ssl_client", "versionInfo" : "1.37.0-r30" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-utmps-libs-0.1.3.1-r0-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 2020-2021 Laurent Bercot for Alpine Linux Distributed\nCopyright (c) 2018-2025 Laurent Bercot \nCopyright (c) 2004, 2006 The Linux Foundation and its contributors\n\nAuthors: Laurent Bercot; Laurent Bercot ; Laurent Bercot for Alpine Linux Distributed; The Linux Foundation and its contributors; maintainer Laurent Bercot ", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/utmps-libs/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/utmps-libs@0.1.3.1-r0?arch=x86_64&distro=3.23.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/DaT0Lth76FL_PtJ8V3Rq0_e1mFP_mFYRw3e8zQmXmDw/utmps-~-0.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://skarnet.org/software/utmps/", "licenseConcluded" : "ISC", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/utmps-libs", "versionInfo" : "0.1.3.1-r0" }, { "SPDXID" : "SPDXRef-pkg-apk-alpine-zlib-1.3.1-r2-arch-x86-64-distro-3.23.3", "copyrightText" : "Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll\nCopyright Jean-loup Gailly Osma Ahvenlampi \nCopyright 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright 1995-2024 Mark Adler\nCopyright 1995-2024 Mark Adler GCC Alpine\nCopyright (c) 1997,99 Borland Corp.\nCopyright (c) 1997,99 Borland Corporation\nCopyright (c) 1997 Christian Michelsen Research AS Advanced Computing\nCopyright (c) 2003 Cosmin Truta\nCopyright (c) 2002-2003 Dmitriy Anisimkov\nCopyright (c) 2007-2008 Even Rouault\nCopyright (c) 1998-2005 Gilles Vollant\nCopyright (c) 1998 - 2010 Gilles Vollant, Even Rouault, Mathias Svensson\nCopyright (c) 1998-2010 Gilles Vollant (minizip) http://www.winimage.com/zLibDll/minizip.html\nCopyright (c) Henrik Ravn 2004\nCopyright (c) 1990-2000 Info-ZIP.\nCopyright (c) 1995-1998 Jean-loup Gailly\nCopyright (c) 1995-2010 Jean-loup Gailly, Brian Raiter and Gilles Vollant\nCopyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler\nCopyright (c) 1995-2003 Jean-loup Gailly and Mark Adler\nCopyright (c) 1996 L. Peter Deutsch\nCopyright (c) 1996 L. Peter Deutsch and Jean-Loup Gailly\nCopyright (c) 1995-2003 Mark Adler\nCopyright (c) 2009-2010 Mathias Svensson http://result42.com\nCopyright (c) 1998 by Andreas R. Kleinert\nCopyright (c) 1998 by Bob Dellaca\nCopyright (c) 2003 by Cosmin Truta\nCopyright (c) 1998-2010 - by Gilles Vollant\nCopyright (c) 2004 by Henrik Ravn\nCopyright (c) 1998,1999,2000 by Jacques Nomssi Nzali\nCopyright (c) 1995-2003 by Jean-loup Gailly\n(c) Copyright Henrik Ravn 2004\n(c) 1995-2022 Jean-loup Gailly & Mark Adler\n(c) 1995-2017 Jean-loup Gailly and Mark Adler", "downloadLocation" : "https://git.alpinelinux.org/aports/tree/main/zlib/APKBUILD?h=3.23-stable", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/E10ePlk0UD-kRIALagU5nFim55kWvzcn_Qbl-2JEsX8/zlib-~-2.src.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:apk/alpine/zlib@1.3.1-r2?arch=x86_64&distro=3.23.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://zlib.net/", "licenseConcluded" : "Zlib", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "apk/alpine/zlib", "versionInfo" : "1.3.1-r2" }, { "SPDXID" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://download.cumulocity.com/maven/repository/com/nsn/cumulocity/dependencies/svenson/1.5.8-1020.88.0/svenson-1.5.8-1020.88.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IU5qsgcu_GZnnJo3ZYyV22N0UWMlQkXzoq_B0_LEl3A/svenson-~-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:generic/com.nsn.cumulocity.dependencies/svenson@1.5.8", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/SoftwareAG/cumulocity-clients-java/tree/develop/svenson", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "generic/com.nsn.cumulocity.dependencies/svenson", "versionInfo" : "1.5.8" }, { "SPDXID" : "SPDXRef-pkg-github-openjdk-jdk17u-jdk-17.0.18-ga", "attributionTexts" : [ "The notice/license texts shown below apply to certain parts of this component. \n\nSee the /legal/ directory of the JRE/JDK to view the full third party licenses.\n\n==========\n### Additional Freetype Attributions\n```\n\n---------------------------------\nThe below applies to the following file(s):\nlibfreetype/src/psaux/psarrst.c\nlibfreetype/src/psaux/psarrst.h\nlibfreetype/src/psaux/psblues.c\nlibfreetype/src/psaux/psblues.h\nlibfreetype/src/psaux/pserror.c\nlibfreetype/src/psaux/pserror.h\nlibfreetype/src/psaux/psfixed.h\nlibfreetype/src/psaux/psfont.c\nlibfreetype/src/psaux/psfont.h\nlibfreetype/src/psaux/psft.c\nlibfreetype/src/psaux/psft.h\nlibfreetype/src/psaux/psglue.h\nlibfreetype/src/psaux/pshints.c\nlibfreetype/src/psaux/pshints.h\nlibfreetype/src/psaux/psintrp.c\nlibfreetype/src/psaux/psintrp.h\nlibfreetype/src/psaux/psread.c\nlibfreetype/src/psaux/psread.h\nlibfreetype/src/psaux/psstack.c\nlibfreetype/src/psaux/psstack.h\nlibfreetype/src/psaux/pstypes.h\n\nCopyright (C) 2006-2014 Adobe Systems Incorporated.\n\nThis software, and all works of authorship, whether in source or\nobject code form as indicated by the copyright notice(s) included\nherein (collectively, the \"Work\") is made available, and may only be\nused, modified, and distributed under the FreeType Project License,\nLICENSE.TXT. Additionally, subject to the terms and conditions of the\nFreeType Project License, each contributor to the Work hereby grants\nto any individual or legal entity exercising permissions granted by\nthe FreeType Project License and this section (hereafter, \"You\" or\n\"Your\") a perpetual, worldwide, non-exclusive, no-charge,\nroyalty-free, irrevocable (except as stated in this section) patent\nlicense to make, have made, use, offer to sell, sell, import, and\notherwise transfer the Work, where such license applies only to those\npatent claims licensable by such contributor that are necessarily\ninfringed by their contribution(s) alone or by combination of their\ncontribution(s) with the Work to which such contribution(s) was\nsubmitted. If You institute patent litigation against any entity\n(including a cross-claim or counterclaim in a lawsuit) alleging that\nthe Work or a contribution incorporated within the Work constitutes\ndirect or contributory patent infringement, then any patent licenses\ngranted to You under this License for that Work shall terminate as of\nthe date such litigation is filed.\n\nBy using, modifying, or distributing the Work you indicate that you\nhave read and understood the terms and conditions of the\nFreeType Project License as well as those provided in this section,\nand you accept them fully.\n\n\n```\n\n###\n\n==========\nPNG Reference Library License version 2\n---------------------------------------\n\nCopyright (C) 1995-2025 The PNG Reference Library Authors.\nCopyright (C) 2018-2025 Cosmin Truta\nCopyright (C) 1998-2018 Glenn Randers-Pehrson\nCopyright (C) 1996-1997 Andreas Dilger\nCopyright (C) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\n\nThe software is supplied \"as is\", without warranty of any kind,\nexpress or implied, including, without limitation, the warranties\nof merchantability, fitness for a particular purpose, title, and\nnon-infringement. In no event shall the Copyright owners, or\nanyone distributing the software, be liable for any damages or\nother liability, whether in contract, tort or otherwise, arising\nfrom, out of, or in connection with the software, or the use or\nother dealings in the software, even if advised of the possibility\nof such damage.\n\nPermission is hereby granted to use, copy, modify, and distribute\nthis software, or portions hereof, for any purpose, without fee,\nsubject to the following restrictions:\n\n 1. The origin of this software must not be misrepresented; you\n must not claim that you wrote the original software. If you\n use this software in a product, an acknowledgment in the product\n documentation would be appreciated, but is not required.\n\n 2. Altered source versions must be plainly marked as such, and must\n not be misrepresented as being the original software.\n\n 3. This Copyright notice may not be removed or altered from any\n source or altered source distribution.\n\n\nPNG Reference Library License version 1 (for libpng 0.5 through 1.6.35)\n-----------------------------------------------------------------------\n\nlibpng versions 1.0.7, July 1, 2000, through 1.6.35, July 15, 2018 are\nCopyright (c) 2000-2002, 2004, 2006-2018 Glenn Randers-Pehrson, are\nderived from libpng-1.0.6, and are distributed according to the same\ndisclaimer and license as libpng-1.0.6 with the following individuals\nadded to the list of Contributing Authors:\n\n Simon-Pierre Cadieux\n Eric S. Raymond\n Mans Rullgard\n Cosmin Truta\n Gilles Vollant\n James Yu\n Mandar Sahastrabuddhe\n Google Inc.\n Vadim Barkov\n\nand with the following additions to the disclaimer:\n\n There is no warranty against interference with your enjoyment of\n the library or against infringement. There is no warranty that our\n efforts or the library will fulfill any of your particular purposes\n or needs. This library is provided with all faults, and the entire\n risk of satisfactory quality, performance, accuracy, and effort is\n with the user.\n\nSome files in the \"contrib\" directory and some configure-generated\nfiles that are distributed with libpng have other copyright owners, and\nare released under other open source licenses.\n\nlibpng versions 0.97, January 1998, through 1.0.6, March 20, 2000, are\nCopyright (c) 1998-2000 Glenn Randers-Pehrson, are derived from\nlibpng-0.96, and are distributed according to the same disclaimer and\nlicense as libpng-0.96, with the following individuals added to the\nlist of Contributing Authors:\n\n Tom Lane\n Glenn Randers-Pehrson\n Willem van Schaik\n\nlibpng versions 0.89, June 1996, through 0.96, May 1997, are\nCopyright (c) 1996-1997 Andreas Dilger, are derived from libpng-0.88,\nand are distributed according to the same disclaimer and license as\nlibpng-0.88, with the following individuals added to the list of\nContributing Authors:\n\n John Bowler\n Kevin Bracey\n Sam Bushell\n Magnus Holmgren\n Greg Roelofs\n Tom Tanner\n\nSome files in the \"scripts\" directory have other copyright owners,\nbut are released under this license.\n\nlibpng versions 0.5, May 1995, through 0.88, January 1996, are\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\n\nFor the purposes of this copyright and license, \"Contributing Authors\"\nis defined as the following set of individuals:\n\n Andreas Dilger\n Dave Martindale\n Guy Eric Schalnat\n Paul Schmidt\n Tim Wegner\n\nThe PNG Reference Library is supplied \"AS IS\". The Contributing\nAuthors and Group 42, Inc. disclaim all warranties, expressed or\nimplied, including, without limitation, the warranties of\nmerchantability and of fitness for any purpose. The Contributing\nAuthors and Group 42, Inc. assume no liability for direct, indirect,\nincidental, special, exemplary, or consequential damages, which may\nresult from the use of the PNG Reference Library, even if advised of\nthe possibility of such damage.\n\nPermission is hereby granted to use, copy, modify, and distribute this\nsource code, or portions hereof, for any purpose, without fee, subject\nto the following restrictions:\n\n 1. The origin of this source code must not be misrepresented.\n\n 2. Altered versions must be plainly marked as such and must not\n be misrepresented as being the original source.\n\n 3. This Copyright notice may not be removed or altered from any\n source or altered source distribution.\n\nThe Contributing Authors and Group 42, Inc. specifically permit,\nwithout fee, and encourage the use of this source code as a component\nto supporting the PNG file format in commercial products. If you use\nthis source code in a product, acknowledgment is not required but would\nbe appreciated.\n\nTRADEMARK\n=========\n\nThe name \"libpng\" has not been registered by the Copyright owners\nas a trademark in any jurisdiction. However, because libpng has\nbeen distributed and maintained world-wide, continually since 1995,\nthe Copyright owners claim \"common-law trademark protection\" in any\njurisdiction where common-law trademark is recognized.\n\n\n\n###\n\n==========\n## Independent JPEG Group: JPEG release 6b\n\n### JPEG License\n\n```\n****************************************************************************\n\nCopyright (C) 1991-1998, Thomas G. Lane.\n\nThis software is the work of Tom Lane, Philip Gladstone, Jim Boucher,\nLee Crocker, Julian Minguillon, Luis Ortiz, George Phillips, Davide Rossi,\nGuido Vollbeding, Ge' Weijers, and other members of the Independent JPEG\nGroup.\n\nIJG is not affiliated with the official ISO JPEG standards committee. \n\nThe authors make NO WARRANTY or representation, either express or implied,\nwith respect to this software, its quality, accuracy, merchantability, or\nfitness for a particular purpose. This software is provided \"AS IS\",\nand you, its user, assume the entire risk as to its quality and accuracy.\n\nThis software is copyright (C) 1991-1998, Thomas G. Lane.\nAll Rights Reserved except as specified below.\n\nPermission is hereby granted to use, copy, modify, and distribute\nthis software (or portions thereof) for any purpose, without fee,\nsubject to these conditions:\n\n(1) If any part of the source code for this software is distributed,\nthen this README file must be included, with this copyright and no-warranty\nnotice unaltered; and any additions, deletions, or changes to the original\nfiles must be clearly indicated in accompanying documentation.\n\n(2) If only executable code is distributed, then the accompanying documentation\nmust state that \"this software is based in part on the work of the\nIndependent JPEG Group\".\n\n(3) Permission for use of this software is granted only if the user accepts\nfull responsibility for any undesirable consequences; the authors accept\nNO LIABILITY for damages of any kind.\n\nThese conditions apply to any software derived from or based on the IJG code,\nnot just to the unmodified library. If you use our work, you ought to\nacknowledge us.\n\nPermission is NOT granted for the use of any IJG author's name or company name\nin advertising or publicity relating to this software or products derived\nfrom it. This software may be referred to only as \"the Independent JPEG\nGroup's software\".\n\nWe specifically permit and encourage the use of this software as the basis\nof commercial products, provided that all warranty or liability claims are\nassumed by the product vendor.\n\nIt appears that the arithmetic coding option of the JPEG spec is covered\nby patents owned by IBM, AT&T, and Mitsubishi. Hence arithmetic coding\ncannot legally be used without obtaining one or more licenses. For this\nreason, support for arithmetic coding has been removed from the free\nJPEG software. (Since arithmetic coding provides only a marginal gain\nover the unpatented Huffman mode, it is unlikely that very many\nimplementations will support it.) So far as we are aware, there are\nno patent restrictions on the remaining code.\n\nThe IJG distribution formerly included code to read and write GIF files.\nTo avoid entanglement with the Unisys LZW patent, GIF reading support\nhas been removed altogether, and the GIF writer has been simplified to\nproduce \"uncompressed GIFs\". This technique does not use the LZW algorithm;\nthe resulting GIF files are larger than usual, but are readable by all\nstandard GIF decoders.\n\nWe are required to state that \"The Graphics Interchange Format(c) is\nthe Copyright property of CompuServe Incorporated. GIF(sm) is a\nService Mark property of CompuServe Incorporated.\"\n\n****************************************************************************\n```\n\n==========\n## International Components for Unicode (ICU4J) v67.1\n\n### ICU4J License\n```\n\nCOPYRIGHT AND PERMISSION NOTICE (ICU 58 and later)\n\nCopyright © 1991-2020 Unicode, Inc. All rights reserved.\nDistributed under the Terms of Use in https://www.unicode.org/copyright.html.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of the Unicode data files and any associated documentation\n(the \"Data Files\") or Unicode software and any associated documentation\n(the \"Software\") to deal in the Data Files or Software\nwithout restriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, and/or sell copies of\nthe Data Files or Software, and to permit persons to whom the Data Files\nor Software are furnished to do so, provided that either\n(a) this copyright and permission notice appear with all copies\nof the Data Files or Software, or\n(b) this copyright and permission notice appear in associated\nDocumentation.\n\nTHE DATA FILES AND SOFTWARE ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF\nANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT OF THIRD PARTY RIGHTS.\nIN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS\nNOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL\nDAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,\nDATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER\nTORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\nPERFORMANCE OF THE DATA FILES OR SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale,\nuse or other dealings in these Data Files or Software without prior\nwritten authorization of the copyright holder.\n\n---------------------\n\nThird-Party Software Licenses\n\nThis section contains third-party software notices and/or additional\nterms for licensed third-party software components included within ICU\nlibraries.\n\n1. ICU License - ICU 1.8.1 to ICU 57.1\n\nCOPYRIGHT AND PERMISSION NOTICE\n\nCopyright (c) 1995-2016 International Business Machines Corporation and others\nAll rights reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, and/or sell copies of the Software, and to permit persons\nto whom the Software is furnished to do so, provided that the above\ncopyright notice(s) and this permission notice appear in all copies of\nthe Software and that both the above copyright notice(s) and this\npermission notice appear in supporting documentation.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT\nOF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR\nHOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR ANY\nSPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER\nRESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF\nCONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN\nCONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\nExcept as contained in this notice, the name of a copyright holder\nshall not be used in advertising or otherwise to promote the sale, use\nor other dealings in this Software without prior written authorization\nof the copyright holder.\n\nAll trademarks and registered trademarks mentioned herein are the\nproperty of their respective owners.\n\n\n——————————————————————————————————————————————————————————————————————\n\n\nFrom: https://www.unicode.org/copyright.html:\n\n Unicode® Copyright and Terms of Use\n\n For the general privacy policy governing access to this site, see the Unicode Privacy Policy.\n\n Unicode Copyright\n Copyright © 1991-2020 Unicode, Inc. All rights reserved.\n Definitions\n\n Unicode Data Files (\"DATA FILES\") include all data files under the directories:\n https://www.unicode.org/Public/\n https://www.unicode.org/reports/\n https://www.unicode.org/ivd/data/\n\n Unicode Data Files do not include PDF online code charts under the directory:\n https://www.unicode.org/Public/\n\n Unicode Software (\"SOFTWARE\") includes any source code published in the Unicode Standard\n or any source code or compiled code under the directories:\n https://www.unicode.org/Public/PROGRAMS/\n https://www.unicode.org/Public/cldr/\n http://site.icu-project.org/download/\n\n Terms of Use\n Certain documents and files on this website contain a legend indicating that \"Modification is permitted.\" Any person is hereby authorized, without fee, to modify such documents and files to create derivative works conforming to the Unicode® Standard, subject to Terms and Conditions herein.\n Any person is hereby authorized, without fee, to view, use, reproduce, and distribute all documents and files, subject to the Terms and Conditions herein.\n Further specifications of rights and restrictions pertaining to the use of the Unicode DATA FILES and SOFTWARE can be found in the Unicode Data Files and Software License.\n Each version of the Unicode Standard has further specifications of rights and restrictions of use. For the book editions (Unicode 5.0 and earlier), these are found on the back of the title page.\n The Unicode PDF online code charts carry specific restrictions. Those restrictions are incorporated as the first page of each PDF code chart.\n All other files, including online documentation of the core specification for Unicode 6.0 and later, are covered under these general Terms of Use.\n No license is granted to \"mirror\" the Unicode website where a fee is charged for access to the \"mirror\" site.\n Modification is not permitted with respect to this document. All copies of this document must be verbatim.\n Restricted Rights Legend\n Any technical data or software which is licensed to the United States of America, its agencies and/or instrumentalities under this Agreement is commercial technical data or commercial computer software developed exclusively at private expense as defined in FAR 2.101, or DFARS 252.227-7014 (June 1995), as applicable. For technical data, use, duplication, or disclosure by the Government is subject to restrictions as set forth in DFARS 202.227-7015 Technical Data, Commercial and Items (Nov 1995) and this Agreement. For Software, in accordance with FAR 12-212 or DFARS 227-7202, as applicable, use, duplication or disclosure by the Government is subject to the restrictions set forth in this Agreement.\n Warranties and Disclaimers\n This publication and/or website may include technical or typographical errors or other inaccuracies. Changes are periodically added to the information herein; these changes will be incorporated in new editions of the publication and/or website. Unicode, Inc. may make improvements and/or changes in the product(s) and/or program(s) described in this publication and/or website at any time.\n If this file has been purchased on magnetic or optical media from Unicode, Inc. the sole and exclusive remedy for any claim will be exchange of the defective media within ninety (90) days of original purchase.\n EXCEPT AS PROVIDED IN SECTION E.2, THIS PUBLICATION AND/OR SOFTWARE IS PROVIDED \"AS IS\" WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. UNICODE, INC. AND ITS LICENSORS ASSUME NO RESPONSIBILITY FOR ERRORS OR OMISSIONS IN THIS PUBLICATION AND/OR SOFTWARE OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS PUBLICATION OR THE UNICODE WEBSITE.\n Waiver of Damages\n In no event shall Unicode, Inc. or its licensors be liable for any special, incidental, indirect or consequential damages of any kind, or any damages whatsoever, whether or not Unicode, Inc. was advised of the possibility of the damage, including, without limitation, those resulting from the following: loss of use, data or profits, in connection with the use, modification or distribution of this information or its derivatives.\n Trademarks & Logos\n The Unicode Word Mark and the Unicode Logo are trademarks of Unicode, Inc. “The Unicode Consortium” and “Unicode, Inc.” are trade names of Unicode, Inc. Use of the information and materials found on this website indicates your acknowledgement of Unicode, Inc.’s exclusive worldwide rights in the Unicode Word Mark, the Unicode Logo, and the Unicode trade names.\n The Unicode Consortium Name and Trademark Usage Policy (“Trademark Policy”) are incorporated herein by reference and you agree to abide by the provisions of the Trademark Policy, which may be changed from time to time in the sole discretion of Unicode, Inc.\n All third party trademarks referenced herein are the property of their respective owners.\n Miscellaneous\n Jurisdiction and Venue. This website is operated from a location in the State of California, United States of America. Unicode, Inc. makes no representation that the materials are appropriate for use in other locations. If you access this website from other locations, you are responsible for compliance with local laws. This Agreement, all use of this website and any claims and damages resulting from use of this website are governed solely by the laws of the State of California without regard to any principles which would apply the laws of a different jurisdiction. The user agrees that any disputes regarding this website shall be resolved solely in the courts located in Santa Clara County, California. The user agrees said courts have personal jurisdiction and agree to waive any right to transfer the dispute to any other forum.\n Modification by Unicode, Inc. Unicode, Inc. shall have the right to modify this Agreement at any time by posting it to this website. The user may not assign any part of this Agreement without Unicode, Inc.’s prior written consent.\n Taxes. The user agrees to pay any taxes arising from access to this website or use of the information herein, except for those based on Unicode’s net income.\n Severability. If any provision of this Agreement is declared invalid or unenforceable, the remaining provisions of this Agreement shall remain in effect.\n Entire Agreement. This Agreement constitutes the entire agreement between the parties. \n\n```\n\n==========\n## Harfbuzz 11.2.0\n\n### Harfbuzz License\n\n
\n\nHarfBuzz is licensed under the so-called \"Old MIT\" license.  Details follow.\nFor parts of HarfBuzz that are licensed under different licenses see individual\nfiles names COPYING in subdirectories where applicable.\n\nCopyright © 2010-2024  Google, Inc.\nCopyright © 2018-2020  Ebrahim Byagowi\nCopyright © 2004-2013  Red Hat, Inc.\nCopyright © 2019  Facebook, Inc.\nCopyright (C) 2012 Zilong Tan (eric.zltan@gmail.com)\nCopyright © 2007  Chris Wilson\nCopyright © 2018-2019 Adobe Inc.\nCopyright © 2006-2025 Behdad Esfahbod\nCopyright © 1998-2004  David Turner and Werner Lemberg\nCopyright © 2009  Keith Stribley\nCopyright © 2018  Khaled Hosny\nCopyright © 2016  Elie Roux \nCopyright © 2016  Igalia S.L.\nCopyright © 2015  Mozilla Foundation.\nCopyright © 1999  David Turner\nCopyright © 2005  Werner Lemberg\nCopyright © 2013-2015  Alexei Podtelezhnikov\nCopyright © 2022 Matthias Clasen\nCopyright © 2011  Codethink Limited\n\nFor full copyright notices consult the individual files in the package.\n\n\nPermission is hereby granted, without written agreement and without\nlicense or royalty fees, to use, copy, modify, and distribute this\nsoftware and its documentation for any purpose, provided that the\nabove copyright notice and the following two paragraphs appear in\nall copies of this software.\n\nIN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE TO ANY PARTY FOR\nDIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES\nARISING OUT OF THE USE OF THIS SOFTWARE AND ITS DOCUMENTATION, EVEN\nIF THE COPYRIGHT HOLDER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH\nDAMAGE.\n\nTHE COPYRIGHT HOLDER SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING,\nBUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND\nFITNESS FOR A PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED HEREUNDER IS\nON AN \"AS IS\" BASIS, AND THE COPYRIGHT HOLDER HAS NO OBLIGATION TO\nPROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.\n\nAll source code, except for one section, is licensed as above. The one\nexception is licensed with a slightly different MIT variant:\nThe contents of this directory are licensed under the following terms:\n\n---------------------------------\nThe below applies to the following file(s):\nlibharfbuzz/hb-ucd.cc\n\nCopyright (C) 2012 Grigori Goronzy \n\nPermission to use, copy, modify, and/or distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n\n---------------------------------\nThe below applies to the following file(s):\nlibharfbuzz/hb-unicode-emoji-table.hh\n\n© 2024 Unicode®, Inc.\n\nUnicode and the Unicode Logo are registered trademarks of Unicode, Inc.\nin the U.S. and other countries.\nFor terms of use and license, see https://www.unicode.org/terms_of_use.html\n\n
\n\n### AUTHORS File Information\n```\n\nBehdad Esfahbod\nDavid Corbett\nDavid Turner\nEbrahim Byagowi\nGarret Rieger\nJonathan Kew\nKhaled Hosny\nLars Knoll\nMartin Hosken\nOwen Taylor\nRoderick Sheeter\nRoozbeh Pournader\nSimon Hausmann\nWerner Lemberg\n\n```\n\n==========\n## Mesa 3-D Graphics Library v21.0.3\n\n### Mesa License\n\n```\nCopyright (C) 1999-2007 Brian Paul All Rights Reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining a\ncopy of this software and associated documentation files (the \"Software\"),\nto deal in the Software without restriction, including without limitation\nthe rights to use, copy, modify, merge, publish, distribute, sublicense,\nand/or sell copies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included\nin all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\nOR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL\nTHE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\nAttention, Contributors\n\nWhen contributing to the Mesa project you must agree to the licensing terms\nof the component to which you're contributing.\nThe following section lists the primary components of the Mesa distribution\nand their respective licenses.\nMesa Component Licenses\n\n\n\nComponent Location License\n------------------------------------------------------------------\nMain Mesa code src/mesa/ MIT\nDevice drivers src/mesa/drivers/* MIT, generally\n\nGallium code src/gallium/ MIT\n\nExt headers GL/glext.h Khronos\n GL/glxext.h Khronos\n GL/wglext.h Khronos\n KHR/khrplatform.h Khronos\n\n*****************************************************************************\n\n----\ninclude/GL/gl.h :\n\n\n Mesa 3-D graphics library\n\n Copyright (C) 1999-2006 Brian Paul All Rights Reserved.\n Copyright (C) 2009 VMware, Inc. All Rights Reserved.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and associated documentation files (the \"Software\"),\n to deal in the Software without restriction, including without limitation\n the rights to use, copy, modify, merge, publish, distribute, sublicense,\n and/or sell copies of the Software, and to permit persons to whom the\n Software is furnished to do so, subject to the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Software.\n\n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\n OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL\n THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR\n OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,\n ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\n OTHER DEALINGS IN THE SOFTWARE.\n\n *****************************************************************************\n\n----\ninclude/GL/glext.h\ninclude/GL/glxext.h\ninclude/GL/wglxext.h :\n\n\n Copyright (c) 2013 - 2018 The Khronos Group Inc.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and/or associated documentation files (the\n \"Materials\"), to deal in the Materials without restriction, including\n without limitation the rights to use, copy, modify, merge, publish,\n distribute, sublicense, and/or sell copies of the Materials, and to\n permit persons to whom the Materials are furnished to do so, subject to\n the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Materials.\n\n THE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\n IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\n CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\n TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.\n\n *****************************************************************************\n\n----\ninclude/KHR/khrplatform.h :\n\n Copyright (c) 2008 - 2018 The Khronos Group Inc.\n\n Permission is hereby granted, free of charge, to any person obtaining a\n copy of this software and/or associated documentation files (the\n \"Materials\"), to deal in the Materials without restriction, including\n without limitation the rights to use, copy, modify, merge, publish,\n distribute, sublicense, and/or sell copies of the Materials, and to\n permit persons to whom the Materials are furnished to do so, subject to\n the following conditions:\n\n The above copyright notice and this permission notice shall be included\n in all copies or substantial portions of the Materials.\n\n THE MATERIALS ARE PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\n IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\n CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\n TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS.\n\n *****************************************************************************\n\n```\n\n==========\n## PC/SC Lite v1.9.9\n\n### PC/SC Lite Notice\n```\nMUSCLE SmartCard Development ( https://pcsclite.apdu.fr/ )\n\nOnly 3 header files are included in this distribution: winscard.h, wintypes.h, pcsclite.h\n\nCopyright for winscard.h:\n * Copyright (C) 1999-2003\n * David Corcoran \n * Copyright (C) 2002-2009\n * Ludovic Rousseau \n\nCopyright for wintypes.h:\n * Copyright (C) 1999\n * David Corcoran \n * Copyright (C) 2002-2011\n * Ludovic Rousseau \n\nCopyright for pcsclite.h:\n * Copyright (C) 1999-2004\n * David Corcoran \n * Copyright (C) 2002-2011\n * Ludovic Rousseau \n * Copyright (C) 2005\n * Martin Paljak \n\n```\n\n### PC/SC Lite License\n```\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions\nare met:\n\n1. Redistributions of source code must retain the above copyright\n notice, this list of conditions and the following disclaimer.\n2. Redistributions in binary form must reproduce the above copyright\n notice, this list of conditions and the following disclaimer in the\n documentation and/or other materials provided with the distribution.\n3. The name of the author may not be used to endorse or promote products\n derived from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR\nIMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES\nOF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.\nIN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,\nINCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT\nNOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF\nTHIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n```\n\n==========\n## OASIS PKCS #11 Cryptographic Token Interface v3.1\n\n### OASIS PKCS #11 Cryptographic Token Interface License\n
\n\nCopyright © OASIS Open 2023. All Rights Reserved.\n\nAll capitalized terms in the following text have the meanings\nassigned to them in the OASIS Intellectual Property Rights Policy (the\n\"OASIS IPR Policy\"). The full Policy may be found at the OASIS website:\n[https://www.oasis-open.org/policies-guidelines/ipr/].\n\nThis document and translations of it may be copied and furnished to\nothers, and derivative works that comment on or otherwise explain it or\nassist in its implementation may be prepared, copied, published, and\ndistributed, in whole or in part, without restriction of any kind,\nprovided that the above copyright notice and this section are included\non all such copies and derivative works. However, this document itself\nmay not be modified in any way, including by removing the copyright\nnotice or references to OASIS, except as needed for the purpose of\ndeveloping any document or deliverable produced by an OASIS Technical\nCommittee (in which case the rules applicable to copyrights, as set\nforth in the OASIS IPR Policy, must be followed) or as required to\ntranslate it into languages other than English.\n\nThe limited permissions granted above are perpetual and will not be\nrevoked by OASIS or its successors or assigns.\n\nThis document and the information contained herein is provided on an\n\"AS IS\" basis and OASIS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED,\nINCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE\nINFORMATION HEREIN WILL NOT INFRINGE ANY OWNERSHIP RIGHTS OR ANY IMPLIED\nWARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. OASIS\nAND ITS MEMBERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR\nCONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THIS DOCUMENT OR ANY\nPART THEREOF.\n\nAs stated in the OASIS IPR Policy, the following three paragraphs in\nbrackets apply to OASIS Standards Final Deliverable documents (Committee\nSpecifications, OASIS Standards, or Approved Errata).\n\n[OASIS requests that any OASIS Party or any other party that\nbelieves it has patent claims that would necessarily be infringed by\nimplementations of this OASIS Standards Final Deliverable, to notify\nOASIS TC Administrator and provide an indication of its willingness to\ngrant patent licenses to such patent claims in a manner consistent with\nthe IPR Mode of the OASIS Technical Committee that produced this\ndeliverable.]\n\n[OASIS invites any party to contact the OASIS TC Administrator if it\nis aware of a claim of ownership of any patent claims that would\nnecessarily be infringed by implementations of this OASIS Standards\nFinal Deliverable by a patent holder that is not willing to provide a\nlicense to such patent claims in a manner consistent with the IPR Mode\nof the OASIS Technical Committee that produced this OASIS Standards\nFinal Deliverable. OASIS may include such claims on its website, but\ndisclaims any obligation to do so.]\n\n[OASIS takes no position regarding the validity or scope of any\nintellectual property or other rights that might be claimed to pertain\nto the implementation or use of the technology described in this OASIS\nStandards Final Deliverable or the extent to which any license under\nsuch rights might or might not be available; neither does it represent\nthat it has made any effort to identify any such rights. Information on\nOASIS' procedures with respect to rights in any document or deliverable\nproduced by an OASIS Technical Committee can be found on the OASIS\nwebsite. Copies of claims of rights made available for publication and\nany assurances of licenses to be made available, or the result of an\nattempt made to obtain a general license or permission for the use of\nsuch proprietary rights by implementers or users of this OASIS Standards\nFinal Deliverable, can be obtained from the OASIS TC Administrator.\nOASIS makes no representation that any information or list of\nintellectual property rights will at any time be complete, or that any\nclaims in such list are, in fact, Essential Claims.]\n\n
\n\n==========\n## Eastman Kodak Company: Portions of color management and imaging software\n\n### Eastman Kodak Notice\n
\nPortions Copyright Eastman Kodak Company 1991-2003\n
" ], "copyrightText" : "Copyright 2012-2020, Bert Belder \nCopyright 1994 Hewlett-Packard Co.\nCopyright 2012-2024 JP Aumasson\nCopyright OpenJS Foundation and other contributors, https://openjsf.org\nCopyright 1999-2022 The Apache Software Foundation\nCopyright 1996, 1998 The Open Group\nCopyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright 1996-2003 by Elliot Joel Berk and C. Scott Ananian\nCopyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter\nCopyright (c) 2006-2014 Adobe Systems Incorporated\nCopyright (c) 1996-1997 Andreas Dilger\nCopyright (c) 2009-2013, Attila Szegedi\nCopyright (c) 2021 Collabora Ltd.\nCopyright (c) 2000 Computing Research Labs, New Mexico State University\nCopyright (c) 2018-2025 Cosmin Truta\nCopyright (c) 1997 Eric S. Raymond\nCopyright (c) 2000-2011 France Telecom\nCopyright (c) 2001-2015 Francesco Zappa Nardelli\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1998-2000 Glenn Randers-Pehrson\nCopyright (c) 2000-2002, 2004, 2006-2018 Glenn Randers-Pehrson\nCopyright (c) 2002 Graz University of Technology\nCopyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.\nCopyright (c) 2016 Jean-Philippe Aumasson \nCopyright (c) 1995-2024 Jean-loup Gailly and Mark Adler\nCopyright (c) 1998-2025 Marti Maria Saguer\nCopyright (c) 1998 National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government\nCopyright (c) 2007, Oracle and/or its affiliates\nCopyright (c) 2008, 2019, Oracle and/or its affiliates\nCopyright (c) 2016, 2018, Oracle and/or its affiliates\nCopyright (c) 2008 Otto Moerbeek \nCopyright (c) 2004-2015 Paul R. Holser, Jr\nCopyright (c) 2023 PipeWire authors\nCopyright (c) 2021 Red Hat, Inc.\nCopyright (c) 1995-2025 The\nCopyright (c) 1995-2005 The Cryptix Foundation Limited\nCopyright (c) 1982 The Royal Institute, Thai Royal Government\nCopyright (c) 1991-2020 Unicode, Inc.\nCopyright (c) 2018-2023 Wim Taymans\nCopyright (c) 2004 World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University)\nCopyright (c) YEARS Oracle and/or its affiliates\nCopyright (c) 2007-2024 by David Turner\nCopyright (c) 2018-2024 by David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, George Williams\nCopyright (c) 1996-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches\nCopyright (c) 2004-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and George Williams\nCopyright (c) 2022-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti\nCopyright (c) 2008-2024 by David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya\nCopyright (c) 2007-2024 by Dereg Clegg and Michael Toftdal\nCopyright (c) 2007-2024 by Derek Clegg and Michael Toftdal\nCopyright (c) 2013-2024 by Google, Inc.\nCopyright (c) 1996-2024 by Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2003-2024 by Masatake YAMATO, Red Hat K.K.\nCopyright (c) 2004-2024 by Masatake YAMATO and Redhat K.K.\nCopyright (c) 2019-2024 by Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg\nCopyright (c) 2009-2024 by Oran Agra and Mickey Gabel\nCopyright (c) 2007-2024 by Rahul Bhalerao \nCopyright (c) 2001, softSurfer (www.softsurfer.com)\nCopyright (c) 2002-2023, the original author or authors\nCopyright property of CompuServe Incorporated\nat iClick, Inc., software copyright (c) 1999\n(c) 1995-2024 Jean-loup Gailly and Mark Adler\n(c) 2009 by Remo Dentato (rdentato@gmail.com)\ncopyright by M.I.T.\ncopyright by the Free Software Foundation\ncopyright (c) 1999, IBM Corporation., http://www.ibm.com\ncopyright (c) 2001, Institute\ncopyright (c) 1999-2002, Lotus Development Corporation., http://www.lotus.com\ncopyright (c) 1999, Sun Microsystems., http://www.sun.com\ncopyright (c) The FreeType Project (www.freetype.org)\ncopyright (c) 1991-1998, Thomas G. Lane\ncopyright (c) 1996-2000 by David Turner, Robert Wilhelm, and Werner Lemberg\ncopyrighted by the Free Software Foundation\ncopyright holder, Aladdin Enterprises of Menlo Park\n\nAuthors: A.M. Kuchling ; Adobe Systems Incorporated; Aladdin Enterprises of Menlo Park; Andreas Dilger; Attila Szegedi; Bert Belder; Collabora Ltd.; CompuServe Incorporated; Computing Research Labs, New Mexico State University; Cosmin Truta; David Turner; David Turner, Robert Wilhelm, Dominik Rottsches, and Werner Lemberg; David Turner, Robert Wilhelm, Werner Lemberg, George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Dominik Rottsches; David Turner, Robert Wilhelm, Werner Lemberg, and George Williams; David Turner, Robert Wilhelm, Werner Lemberg, and Moazin Khatti; David Turner, Robert Wilhelm, Werner Lemberg, and suzuki toshiya; David Turner, Robert Wilhelm, and Werner Lemberg; Dereg Clegg and Michael Toftdal; Derek Clegg and Michael Toftdal; Elliot Joel Berk and C. Scott Ananian; Eric S. Raymond; France Telecom; Francesco Zappa Nardelli; Free Software Foundation, Inc.; Gilles Vollant ; Glenn Randers-Pehrson; Google, Inc.; Graz University of Technology; Guy Eric Schalnat, Group 42, Inc.; Hewlett-Packard Co.; IBM Corporation; Institute; JP Aumasson; Jean-Philippe Aumasson; Jean-loup Gailly and Mark Adler; Just van Rossum, David Turner, Robert Wilhelm, and Werner Lemberg; L. Peter Deutsch; Lotus Development Corporation; M.I.T.; Marti Maria Saguer; Masatake YAMATO and Redhat K.K.; Masatake YAMATO, Red Hat K.K.; National Electronics and Computer Technology Center, National Science and Technology Development Agency, Ministry of Science Technology and Environment, Thai Royal Government; Nikhil Ramakrishnan, David Turner, Robert Wilhelm, and Werner Lemberg; OpenJS Foundation and other contributors; Oracle and/or its affiliates; Oran Agra and Mickey Gabel; Otto Moerbeek; Ovidiu Predescu (ovidiu@cup.hp.com); Paul Marquess ; Paul R. Holser, Jr; PipeWire authors; Rahul Bhalerao; Red Hat, Inc.; Remo Dentato; Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter; Sun Microsystems; The Apache Software Foundation; The Apache Software Foundation (http://www.apache.org/); The Cryptix Foundation Limited; The FreeType Project; The Open Group; The Royal Institute, Thai Royal Government; Thomas G. Lane; Unicode, Inc.; Wim Taymans; World Wide Web Consortium, (Massachusetts Institute of Technology, European Research Consortium for Informatics and Mathematics, Keio University); YEARS Oracle and/or its affiliates; contributors. The jdk17u (https://github.com/openjdk/jdk17u); iClick, Inc., software; softSurfer; the Free Software Foundation; the PVRG group at Stanford; the original author or authors", "downloadLocation" : "https://github.com/openjdk/jdk17u/archive/refs/tags/jdk-17.0.18-ga.tar.gz", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wYFEsGAPreOcZCU2WcU7WzsRfxrN9lQ9GYwJEKRBVzs/jdk17u-git-source.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:github/openjdk/jdk17u@jdk-17.0.18-ga", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/openjdk/jdk17u", "licenseConcluded" : "(Zlib AND Libpng AND LicenseRef-GPL-2.0-with-oracle-classpath-exception AND W3C AND IJG AND BSD-3-Clause AND BSD-2-Clause AND W3C-19980720 AND Unicode-TOU AND UPL-1.0 AND softSurfer AND MIT-open-group AND LicenseRef-scancode-unicode AND MPL-2.0 AND Apache-1.1 AND Apache-2.0 AND CC0-1.0 AND MIT AND SMLNJ AND FTL)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "github/openjdk/jdk17u", "versionInfo" : "jdk-17.0.18-ga" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.18", "copyrightText" : "Copyright (c) 1999-2010, QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.5.18/logback-classic-1.5.18.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0yA6fka_SqNsLHYNf7NpSqnoc-RSzmG4PdCeMZbqGA8/logback-classic-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.logback/logback-classic@1.5.18", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.logback/logback-classic", "versionInfo" : "1.5.18" }, { "SPDXID" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.18", "copyrightText" : "Copyright (c) 1999-2002, QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/ch/qos/logback/logback-core/1.5.18/logback-core-1.5.18.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/ch.qos.logback/logback-core@1.5.18", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/eAqpjXnaPojYOADWB-IhGc4KPEI1ubqT-YP8sletSoc/logback-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(EPL-1.0 AND LGPL-2.1-only)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/ch.qos.logback/logback-core", "versionInfo" : "1.5.18" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.19.2", "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.19.2/jackson-annotations-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wkxidXgUle4L7HQLU-Al1X2h0-SbxK6Hi-g6o6Xc10g/jackson-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-annotations", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-annotations", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.19.2", "copyrightText" : "Copyright 2018-2020 Raffaello Giulietti\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright 2020 Tim Buktu\nCopyright 2022 Tim Buktu\nCopyright (c) 2022 Daniel Lemire. BSL\nCopyright (c) 2007- Tatu Saloranta, tatu.saloranta@iki.fi\nCopyright (c) 2021 The\nCopyright (c) 2023 Werner Randelshofer, Switzerland\nCopyright (c) 2024 Werner Randelshofer, Switzerland", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.19.2/jackson-core-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/PLPFosBDCvnJ1_H7fsSH659v_0bfGfOmBsCvKObrVmQ/jackson-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-core", "licenseConcluded" : "(BSD-2-Clause AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-core", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.19.2", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.19.2/jackson-databind-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/o34HcBY_rZxkbjHlrrhYEv942EjYWYz3xIKL41vFyQE/jackson-databind-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.core/jackson-databind", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.19.2", "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.19.2/jackson-datatype-jdk8-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6IT3STFs-SCYnf_aMakpq6xxPY21s-drVfxOU_-9m0Q/jackson-datatype-jdk8-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-java8", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.19.2", "copyrightText" : "Copyright (c) 2012 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.19.2/jackson-datatype-joda-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oDXMfGm1_Ya1dl6SS9NpcBb5rur-kMKlAYPzhIw4dAY/jackson-datatype-joda-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.19.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-datatype-joda", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-joda", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.19.2", "copyrightText" : "Copyright 2013 FasterXML.com", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.19.2/jackson-datatype-jsr310-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/aS0R0jwN3a6A6eKFr_PgPRxNqQ_x42EZ3GyawR_nW-8/jackson-datatype-jsr310-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.19.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.19.2", "copyrightText" : "Copyright 2013 FasterXML.com\nCopyright (c) 2017 http://fasterxml.com/ FasterXML", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.19.2/jackson-module-parameter-names-2.19.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wqfTIIBLXXhmDgVt4d9s4FLuwlkG9lpdombipaB5UYE/jackson-module-parameter-names-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.19.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/jackson-modules-java8", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml.jackson.module/jackson-module-parameter-names", "versionInfo" : "2.19.2" }, { "SPDXID" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.0", "copyrightText" : "Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)", "downloadLocation" : "https://repo1.maven.org/maven2/com/fasterxml/classmate/1.7.0/classmate-1.7.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/KFoYmob4IielwcBbSODPwx8bCZb0Wm6Ld6f9GEz7bHo/classmate-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.fasterxml/classmate@1.7.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/FasterXML/java-classmate", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.fasterxml/classmate", "versionInfo" : "1.7.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1", "copyrightText" : "Copyright 2013 Stephen Connolly", "downloadLocation" : "https://repo1.maven.org/maven2/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/T3RxVpunqiGuBA0KfR3vP5GJ-nvyG4QAHLDQwlAWMMk/jcip-annotations-~-1-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://stephenc.github.com/jcip-annotations", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.github.stephenc.jcip/jcip-annotations", "versionInfo" : "1.0-1" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1", "copyrightText" : "Copyright 2008 Google LLC\nCopyright (c) 2018 Google Inc.\nCopyright (c) 2010 The Android Open Source Project\nCopyright (c) 2017 The Gson authors\n\nAuthors: Bob Lee; Google Inc.; Google LLC; Inderjeet Singh; Inderjeet Singh, Joel Leitch; Inderjeet Singh, Joel Leitch, Jesse Wilson; Jesse Wilson; Joel Leitch; Kevin Bourrillion; Sven Mawson; The Android Open Source Project; The Gson authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/gson/gson/2.13.1/gson-2.13.1.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/A_YJEqCXCoORGISt1zFe9oOoA9uSxQNVmTl22V2OiKo/gson-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.code.gson/gson@2.13.1", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.code.gson/gson", "versionInfo" : "2.13.1" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8", "copyrightText" : "Copyright (c) 2008, Sven Helmberger", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/code/svenson/svenson/1.5.8/svenson-1.5.8.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.code.svenson/svenson@1.5.8", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jB537AYlvMTCi_TokoqSNWKU9SpGgkjdd2m_xzFX_EM/svenson-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://code.google.com/p/svenson/", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.code.svenson/svenson", "versionInfo" : "1.5.8" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0", "copyrightText" : "Copyright 2015 The Error Prone Authors\n\nAuthors: The Error Prone Authors; benyu@google.com", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.36.0/error_prone_annotations-2.36.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9bWGnK58Q_0GOKefs5N_WRrO3saRKkdOB8y5ybh6oOg/error_prone_annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.errorprone/error_prone_annotations", "versionInfo" : "2.36.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3", "copyrightText" : "Copyright (c) 2024 The Guava Authors\n\nAuthors: The Guava Authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/failureaccess@1.0.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ox5cmQ0cQpNSEgC9zSXUAqZf1ginlsxzjF7fQeeFp_Q/failureaccess-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/failureaccess", "versionInfo" : "1.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre", "copyrightText" : "Copyright 2011 Google Inc.\nCopyright 2019 The Guava Authors\nCopyright (c) 2008 The Guava Authors\n\nAuthors: Adam Winer; Alan Green; Alex Matevossian; Anthony Zana; Apple Chow; Atkinson, et al; Austin Appleby; Ben Yu; Bin Zhu; Bob Lee; Brian Milch; Catherine Berry; Charles Fry; Chris Nokleberg; Chris Povirk; Christopher Swenson; Clement Roux; Cliff Biffle; Cliff L. Biffle; Colin Decker; Colin Evans; Craig Berry; Daniel J. Bernstein; Darick Tong; David Beaumont; Dimitris Andreou; Doug Lea; Doug Lea and Martin Buchholz; Emily Soldal; Eric Fellheimer; Erik Kline; Geoff Pike; Google Inc.; Gregory Kick; Harry Heymann; Hayward Chan; Hiroshi Yamauchi; Isaac Shum; James Sexton; Jared Levy; Jason Lee; Jayaprabhakar Kadarkarai; Jean-Philippe Aumasson; Jens Nyman; Jesse Wilson; Johannes Henkel; Jon Noack; Joshua O'Madadhain; Julien Silland; Justin Mahoney; Justin T. Sampson; Keith Bottner; Kevin Bourrillion; Kevin Damm; Kurt Alfred Kluever; Kyle Littlefield; Kyle Maddison; Laurence Gonsalves; Louis Wasserman; Luke Sandberg; Marcin Mikosik; Mark Davis; Martin Buchholz; Michael Lancaster; Mick Killianey; Mike Bostock; Mike Ward; Miles Barr; Nick Kralevich; Nishant Thakkar; Omar Darwish; Paul Marks; Pete Gillin; Qian Huang; Raimundo Mirisola; Robert Konigsberg; Sebastian Kanthak; Shardul Deo; Steve McKay; Sven Mawson; Sverre Sundsdal; The Guava Authors; Torbjorn Gannholm; Warren Dukes; Zoe Piepmeier; code CacheBuilder; gpike@google.com (Geoff Pike); kylemaddison@google.com (Kyle Maddison)", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/guava@33.4.8-jre", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZLurYp0g5vxo46JddeJKfKbAytnqX70avfLjULSG3gg/guava-~-jre-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/guava", "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND CC0-1.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/guava", "versionInfo" : "33.4.8-jre" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava", "copyrightText" : "Copyright (C) 2007 The Guava Authors", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3xYmaL0126qs6ASIPR9t5r58zrpp-wKNxWmB0BuSOFc/listenablefuture-~-empty-to-avoid-conflict-with-guava.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.guava/listenablefuture", "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava" }, { "SPDXID" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0", "copyrightText" : "Copyright 2012 Google Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/g74NPOJQsuLZjqpdujfuNir1OZnmugNgvpansVra5hQ/j2objc-annotations-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/google/j2objc/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.google.j2objc/j2objc-annotations", "versionInfo" : "3.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6", "copyrightText" : "Copyright 2012-2016, Connect2id Ltd.\nCopyright 2012-2016, Connect2id Ltd and contributors\nCopyright 2008 Google LLC\nCopyright 2013 Stephen Connolly\n\nAuthors: Aleksei Doroganov; Alexander Martynov; Andreas Huber; Artun Subasi; Axel Nennker; Ben Arena; Brian Campbell; Cedric Staub; Connect2id Ltd and contributors; Connect2id Ltd.; David Ortiz; Dimitar A. Stoikov; Egor Puzanov; Eugene Kuleshov; Fernando Gonzalez Callejas; Google LLC; Imre Paladji; Joey Zhao; Josh Cummings; Jun Yu; Junya Hayashi; Justin Cranford; Justin Richer; Marco Vermeulen; Melisa Halsband; Misagh Moayyed; Nathaniel Hart; Omer Levi Hevroni; Pankaj Yadav; Pere Bueno Yerbes; Peter Laurina; Rob Winch; Sarvesh Sharma; Simon Kissane; Stefan Larsson; Stephen Connolly; Thomas Rorvik Skjolberg; Tim McLean; Toma Velev; Ulrich Winter; Vedran Pavic; Vladimir Dzhuvinov", "downloadLocation" : "https://repo1.maven.org/maven2/com/nimbusds/nimbus-jose-jwt/10.6/nimbus-jose-jwt-10.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/s5CzC5UPQfCya0w6T9tVplJoiSuLf36E7C7Dc3SSZSs/nimbus-jose-jwt-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/com.nimbusds/nimbus-jose-jwt", "versionInfo" : "10.6" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0", "copyrightText" : "Copyright 2000-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ArjtmsXZcGuFjKGUuQT4NagD2uSGExQAm4VGozkREYg/commons-beanutils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-beanutils", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-beanutils/commons-beanutils", "versionInfo" : "1.11.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation\nCopyright (c) 2004-2006 Intel Corporation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-codec/commons-codec/1.18.0/commons-codec-1.18.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/k8pM1DHZ-WlY4QVlqL72L0DrDf6wWZAO2dt1zTn9Q-Y/commons-codec-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-codec/commons-codec@1.18.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-codec/", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-codec/commons-codec", "versionInfo" : "1.18.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2", "copyrightText" : "Copyright 2001-2015 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ZSP6WrGeSEF9J53GWb0sl_ZoOgwA2SAhHTc5AFk_2I4/commons-collections-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-collections/commons-collections@3.2.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://commons.apache.org/collections/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-collections/commons-collections", "versionInfo" : "3.2.2" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0", "copyrightText" : "Copyright 2002-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NlO8kR0Jl5QXiVtvjDRvRkRZKDcpxujTSIzpdY_P8yI/commons-io-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-io/commons-io@2.20.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-io/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-io/commons-io", "versionInfo" : "2.20.0" }, { "SPDXID" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2", "copyrightText" : "Copyright 2003-2014 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/commons-logging/commons-logging/1.2/commons-logging-1.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/commons-logging/commons-logging@1.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YEsO0wEV22BXvwXMcYIR6zdrwvnRai3_dErN8ue7Qxs/commons-logging-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://commons.apache.org/proper/commons-logging/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/commons-logging/commons-logging", "versionInfo" : "1.2" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.3", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Christian Schwerdtfeger; Google Inc.; Johnny Lim; Jon Schneider; Juergen Hoeller; Maciej Walkowiak; Marcin Grzejszczak; QOS.ch; Sebastien Deleuze; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-commons/1.15.3/micrometer-commons-1.15.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-commons@1.15.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WS1WZ5ZjM4GHTKebwUZXJovNIbeZ8PiSpRg7ZWDQvm0/micrometer-commons-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-commons", "versionInfo" : "1.15.3" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.3", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright (c) 2004-2011 QOS.ch\nCopyright 2002-2019 the original author or authors\n\nAuthors: Ali Dehghani; Aliaksandr Valialkin; Andrew Krasny; Andy Wilkinson; Ben Hubert; Ben Manes; Benjamin Hubert; Benjamin Hubert (benjamin.hubert@willhaben.at); Bjarte S. Karlsen; Brian Clozel; Chao Chang; Chris Bono; Christian Schwerdtfeger; Christophe Bornet; Clint Checketts; Daniel Theuke (daniel.theuke@heuboe.de); David J. M. Karlsen; Dmytro Nosan; Erin Schnabel; Francois Staudt; Google Inc.; Gustavo Monarin; Jeonggi Kim; John Karp; Johnny Lim; Johnny Lim https://docs.confluent.io/current/kafka/monitoring.html; Jon Schneider; Jonatan Ivanov; Jorge Quilcate https://docs.confluent.io/current/kafka/monitoring.html; Juergen Hoeller; Kristof Depypere; Lenin Jaganathan; Maciej Walkowiak; Maksym Symonov; Manabu Matsuzaki; Marcin Grzejszczak; Markus Dobel; Marten Deinum; Matthieu Borgraeve; Michael Weirauch; Nejc Korasa; Nikolay Ustinov; Nurettin Yilmaz; Oleksii Bondar; Pawel Stepien; Philippe Marschall; QOS.ch; Ruth Kurniawati; Samuel Cox; Sebastian Lovdahl; Sebastien Deleuze; Steven Sheehy; Tadaya Tsuyukubo; The Apache Software Foundation; The Netty Project; Tommy Ludwig; Trustin Heuiseung Lee; VMware, Inc.; Vladimir Bukhtoyarov; Wardha Perinkadakattu; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-core/1.15.3/micrometer-core-1.15.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-core@1.15.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/sta_DcFtEd-XYhNBh4l-Vaw51i-mxhlCCPrS12EZPVI/micrometer-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-core", "versionInfo" : "1.15.3" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.3", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2023 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Brian Clozel; Google Inc.; The Apache Software Foundation; The Netty Project; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-jakarta9/1.15.3/micrometer-jakarta9-1.15.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-jakarta9@1.15.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/4-j0-UpmoBCPneGLHe3seMyb0w-cBwbKIBr2x0S8m6k/micrometer-jakarta9-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-jakarta9", "versionInfo" : "1.15.3" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.3", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2021 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Google Inc.; Jeonggi Kim; Jonatan Ivanov; Marcin Grzejszczak; OpenTelemetry Authors; OpenZipkin Brave; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-observation/1.15.3/micrometer-observation-1.15.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/uOs3RTeb3uMKLOO43Xpjg5d3NzhSv8z_i0mau7zUy70/micrometer-observation-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-observation@1.15.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-observation", "versionInfo" : "1.15.3" }, { "SPDXID" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.3", "copyrightText" : "Copyright 2010 Google Inc.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright 2013 The Netty Project\nCopyright 2017 VMware, Inc.\nCopyright (c) 2017-Present VMware, Inc.\nCopyright 2002-2019 the original author or authors\n\nAuthors: Clint Checketts; Google Inc.; Johnny Lim; Jon Schneider; Jonatan Ivanov; The Apache Software Foundation; The Netty Project; Tommy Ludwig; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/micrometer/micrometer-registry-prometheus/1.15.3/micrometer-registry-prometheus-1.15.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/nOOgj3OzJp8CNBh7ckhqUXcUocjr-XJmvyxMyUw7gk0/micrometer-registry-prometheus-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/micrometer-metrics/micrometer", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.micrometer/micrometer-registry-prometheus", "versionInfo" : "1.15.3" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-buffer/4.1.124.Final/netty-buffer-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MXnpWoMjwx5c_aNYBxqxfeBzD8qL0le1XMkKjLri8Zs/netty-buffer-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-buffer@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-buffer/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-buffer", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.124.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-dns/4.1.124.Final/netty-codec-dns-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Awx_yv9vuGY8HLeOCwycF_jEhkEYFKY2oeet_DyAlEc/netty-codec-dns-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-dns@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-dns/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-dns", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.124.Final", "copyrightText" : "Copyright 2014 The Netty Project\nCopyright 2014 Twitter, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http2/4.1.124.Final/netty-codec-http2-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/e23qlPN5dEAs8kNm9Ug5LWyWz16RossWDrcvA9tjYg0/netty-codec-http2-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-http2@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-http2/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-http2", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2008-2009 Bjoern Hoehrmann \nCopyright (c) 2011, Joe Walnes and contributors\n\nAuthors: Bjoern Hoehrmann; Joe Walnes and contributors; The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-http/4.1.124.Final/netty-codec-http-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xdVDnVYY2-hAlnbWWYSK4MQfASCF1yzAaItw_fENF_4/netty-codec-http-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-http@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-http/", "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-http", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec-socks/4.1.124.Final/netty-codec-socks-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/j6q3-Md48PmEW4lguWg94qJNrmjM7GvYxYcJgzFssZ0/netty-codec-socks-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec-socks@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec-socks/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec-socks", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-codec/4.1.124.Final/netty-codec-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-codec@4.1.124.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VIyJEqvtqeFAU_BfFC63aRoHDophJbjkFbEnZqWS4f4/netty-codec-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-codec/", "licenseConcluded" : "(CC-PDDC AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-codec", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project\nCopyright (c) 2004-2011 QOS.ch", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-common/4.1.124.Final/netty-common-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-common@4.1.124.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/XHEjLsE8TSE5PPrzD5ySrPaUVNpER7_cjoHP8TPwLxg/netty-common-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND CC0-1.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-common", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.124.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler-proxy/4.1.124.Final/netty-handler-proxy-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-handler-proxy@4.1.124.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/3a7pdX9uyJgQOXkFMC0i_DB-4wzl73CRj1Dfcpa5Jzc/netty-handler-proxy-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-handler-proxy/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-handler-proxy", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.124.Final/netty-handler-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/WGpIPGqDalnyUder7VfPtdsnVN3ESgXbVHn5RSYTgDc/netty-handler-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-handler@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-handler/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-handler", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.124.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver-dns/4.1.124.Final/netty-resolver-dns-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/n0syTg6vGGfVaStHEfOwr5mh2-_fwSPwiVa3xDtNYpw/netty-resolver-dns-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-resolver-dns@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-resolver-dns/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-resolver-dns", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.124.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-resolver/4.1.124.Final/netty-resolver-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/hyFqN6NGnUC_bmqS7Pq1Bg9lDYLTC0TdsP-HQQvqlLA/netty-resolver-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-resolver@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-resolver/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-resolver", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.124.Final", "copyrightText" : "Copyright 2021 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-classes-epoll/4.1.124.Final/netty-transport-classes-epoll-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/04loao7DlGkRCNRTLB_zdRWs4oLOerEBfUb19z1EiBA/netty-transport-classes-epoll-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport-classes-epoll/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-classes-epoll", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.124.Final", "copyrightText" : "Copyright 2014 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-epoll/4.1.124.Final/netty-transport-native-epoll-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wYopfjUlkNZMZVYvj6LKhwlaBgWiC2CUQ3smWxPN_jM/netty-transport-native-epoll-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-native-epoll", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.124.Final", "copyrightText" : "Copyright 2016 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common/4.1.124.Final/netty-transport-native-unix-common-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wwq6VcC2j0QVlye0zCEPn1ZVaB_sA7erdonW1CBfW9w/netty-transport-native-unix-common-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport-native-unix-common/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport-native-unix-common", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.124.Final", "copyrightText" : "Copyright 2012 The Netty Project", "downloadLocation" : "https://repo1.maven.org/maven2/io/netty/netty-transport/4.1.124.Final/netty-transport-4.1.124.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/75osm_TsA9f9HDpuZ_iV_Uy1orQb9K6d0CZhX3XJw08/netty-transport-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.netty/netty-transport@4.1.124.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://netty.io/netty-transport/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.netty/netty-transport", "versionInfo" : "4.1.124.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.2.9", "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-core/1.2.9/reactor-netty-core-1.2.9.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QyRHYmmN6rIfG3YQDcZt9cPyoIvxfIF17l2b-94TloA/reactor-netty-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.9", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/reactor/reactor-netty", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.projectreactor.netty/reactor-netty-core", "versionInfo" : "1.2.9" }, { "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.2.9", "copyrightText" : "Copyright (c) 2011-2021 VMware, Inc. or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-http/1.2.9/reactor-netty-http-1.2.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/IH5RGqlYqTuJU1TdwkThhFXZp0TkKcFZfiUlXFxwcvE/reactor-netty-http-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/reactor/reactor-netty", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.projectreactor.netty/reactor-netty-http", "versionInfo" : "1.2.9" }, { "SPDXID" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.7.9", "copyrightText" : "Copyright (c) 2019-2021 VMware Inc. or its affiliates\nCopyright 2002-2017 the original author or authors\n\nAuthors: Animesh Chaturvedi; David Karnok; DoHyung Kim; Injae Kim; Injae Kim https://github.com/reactor/reactive-streams-commons; Jon Brisbin; Juergen Hoeller; Oleh Dokuka; Rossen Stoyanchev; Sebastien Deleuze; Sergei Egorov; Simon Basle; Simon Basle https://github.com/reactor/reactive-streams-commons; Stephane Maldini; VMware Inc. or its affiliates; Violeta Georgieva; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/io/projectreactor/reactor-core/3.7.9/reactor-core-3.7.9.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.projectreactor/reactor-core@3.7.9", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8yCEEQod93vgeF2NqeLr74PZ8bm5t1z37ABvGO_nbmE/reactor-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/reactor/reactor-core", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.projectreactor/reactor-core", "versionInfo" : "3.7.9" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-config/1.3.10/prometheus-metrics-config-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/UHTzQ-XwDKf_cEWqR-cvpcQlcwU-pfvxbBTS_IAhu94/prometheus-metrics-config-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-config", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-core/1.3.10/prometheus-metrics-core-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I8gCRyk7q7mtrGouy3qx9_L_d9J22Q7fniMuGpQdoIA/prometheus-metrics-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-core", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10", "copyrightText" : "Copyright 2008 Google Inc.\nCopyright 2024 Google LLC.", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-formats/1.3.10/prometheus-metrics-exposition-formats-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/cBUYYlLazSiCq49QjFQGEv_0IoMLV1IgNZxx6wXDkhs/prometheus-metrics-exposition-formats-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-exposition-formats", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-exposition-textformats/1.3.10/prometheus-metrics-exposition-textformats-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/5uEL0F2qPRr2_DzJKJNPnpkMtK_rrhzF-Bo4Ja8Nn5U/prometheus-metrics-exposition-textformats-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-exposition-textformats", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-model/1.3.10/prometheus-metrics-model-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6zzDlJBJZO1fyuySffEYb1Hs4jRARYm1_TBjE8L2pSs/prometheus-metrics-model-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-model", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10", "copyrightText" : "Copyright 2012 Andrew Wang (andrew@umbrant.com)\nCopyright 2012-2015 The Prometheus Authors\n\nAuthors: Andrew Stuart; Andrew Stuart ; Andrew Wang; Christian Kaltepoth; Max Vetrenko, Ruslan Diachenko, Roman Ivanov; The Prometheus Authors; the OpenTelemetry", "downloadLocation" : "https://repo1.maven.org/maven2/io/prometheus/prometheus-metrics-tracer-common/1.3.10/prometheus-metrics-tracer-common-1.3.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/pmnxX5WNpK2YLcGxlRBkzm_zwzBqXlXjNJiqRVmC9tA/prometheus-metrics-tracer-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/io.prometheus/prometheus-metrics-tracer-common", "versionInfo" : "1.3.10" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3", "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 1997, 2023 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2021 Oracle and/or its affiliates\nCopyright (c) 2019, current.year Eclipse Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1CMH1-0fwpXMh12KbPGj4IeTF6BCjS2_qs-uVluiHQE/jakarta.activation-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/jakartaee/jaf-api", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.activation/jakarta.activation-api", "versionInfo" : "2.1.3" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1", "copyrightText" : "Copyright (C) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2019, 2021 Eclipse Foundation\nCopyright (c) 2005, 2020 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oMx8zOYU_3L2cm10ZCdnKFsb6ICLjEzb3rctNKXTSk4/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://projects.eclipse.org/projects/ee4j.ca", "licenseConcluded" : "(GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.annotation/jakarta.annotation-api", "versionInfo" : "2.1.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1", "copyrightText" : "Copyright (c) 2018,2020 Eclipse Foundation\nCopyright (c) 2009 The JSR-330 Expert Group", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/7l1fPwts-F0X9Nl-mDk9uRrYv-L2GYOcIX01hpH5yqM/jakarta.inject-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/injection-api", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.inject/jakarta.inject-api", "versionInfo" : "2.0.1" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2", "copyrightText" : "Copyright (c) 2019,2020 Eclipse Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NA-vINKxODilOfJFhMZt7frREieCkTHGattM2ePqCWw/sources", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://beanvalidation.org", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.validation/jakarta.validation-api", "versionInfo" : "3.0.2" }, { "SPDXID" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0", "copyrightText" : "Copyright (c) 2018, 2020 Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2018 Markus KARG.\nCopyright (c) 2011, 2021 Oracle and/or its affiliates\nCopyright (c) 2017, 2021 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jkb8IPiaCIedgpEyDAR1i3xIdrxacuPH8WIZ_DhFlKI/jakarta.ws.rs-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/jaxrs-api", "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/jakarta.ws.rs/jakarta.ws.rs-api", "versionInfo" : "3.1.0" }, { "SPDXID" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14", "copyrightText" : "Copyright 2001-2005 Stephen Colebourne", "downloadLocation" : "https://repo1.maven.org/maven2/joda-time/joda-time/2.10.14/joda-time-2.10.14.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/joda-time/joda-time@2.10.14", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/JInxze8u98sAfK9eamfJ-aDF73e32dtbvWHxWmbGGQY/joda-time-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.joda.org/joda-time/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/joda-time/joda-time", "versionInfo" : "2.10.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.13.0", "copyrightText" : "Copyright 2005-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-csv/1.13.0/commons-csv-1.13.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-csv@1.13.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zDNPdqIdCFCd97an4LrAGhnhAsAD44ng3qONd0eQs74/commons-csv-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-csv/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-csv", "versionInfo" : "1.13.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0", "copyrightText" : "Copyright 2001-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9eochM14yrkqLnznuFYMSC1kM3Te9L2qDj4N3rurRm4/commons-lang3-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-lang/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-lang3", "versionInfo" : "3.17.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.14.0", "copyrightText" : "Copyright 2014-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.14.0/commons-text-1.14.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.commons/commons-text@1.14.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/I_uMV1RMs0HO_RiX4MK1_9K91ek-AQ01VL16aof-Lf4/commons-text-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://commons.apache.org/proper/commons-text", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.commons/commons-text", "versionInfo" : "1.14.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.2", "copyrightText" : "Copyright 2011-2016 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/fluent-hc/4.5.2/fluent-hc-4.5.2.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.2", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/0gnd7UrdQ2m74VwrksA4BkvXdFdHKSPkBOlH-P6H0SQ/fluent-hc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/fluent-hc", "versionInfo" : "4.5.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14", "copyrightText" : "Copyright 1999-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EKs-vtX3bdPGRcvOdpX_H6KDUBpCC-I3gdEDG4iAsQc/httpclient-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-client-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpclient", "versionInfo" : "4.5.14" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16", "copyrightText" : "Copyright 2005-2022 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QfA3bI84AREa9Wake5pLM84a_CkXhVf-Wy68EhcpBiU/httpcore-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://hc.apache.org/httpcomponents-core-ga", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.httpcomponents/httpcore", "versionInfo" : "4.4.16" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3", "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Wg3RDMSXOkovmZOE6TzoPq2GOY-pDBvux6HUxUigXHc/log4j-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.logging.log4j/log4j-api", "versionInfo" : "2.24.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3", "copyrightText" : "Copyright 1999-2024 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/2np-EPMNFKgRljkZyYT4YFmre_p-UwLK6f2I0PF4K1E/log4j-to-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.logging.log4j/log4j-to-slf4j", "versionInfo" : "2.24.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.44", "copyrightText" : "Copyright 2003-2007 Sun Microsystems, Inc.\nCopyright 1999-2025 The Apache Software Foundation\nCopyright (c) 1999-2025, Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\nCopyright (c) 1999-2025, The Apache Software Foundation\n(c) Copyright International Business Machines Corporation 2002", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/10.1.44/tomcat-embed-core-10.1.44.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/9tU3CeSiRZ45EjhP5shtpOcqCQwzqirMuXwmV02d4yA/tomcat-embed-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.44", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "(CDDL-1.1 AND W3C AND Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-core", "versionInfo" : "10.1.44" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.44", "copyrightText" : "Copyright 1999-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/10.1.44/tomcat-embed-el-10.1.44.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/oFtbf2txJMmJphknP4D9-qVy1YVitcQ8dmY8LONfJqg/tomcat-embed-el-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.44", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-el", "versionInfo" : "10.1.44" }, { "SPDXID" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.44", "copyrightText" : "Copyright 1999-2025 The Apache Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.44/tomcat-embed-websocket-10.1.44.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.44", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VjrW-smu5rxZa7e4fq8oiR7dbFxa_mIAn9g_5OOuqh4/tomcat-embed-websocket-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://tomcat.apache.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.apache.tomcat.embed/tomcat-embed-websocket", "versionInfo" : "10.1.44" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.83/bcpkix-jdk18on-1.83.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.83", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcpkix-jdk18on", "versionInfo" : "1.83" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.83/bcprov-jdk18on-1.83.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.83", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/zE8V1-GtU4SiFszz3rR-PeuXrmkONULdAL_Juj_q9EQ/bcprov-jdk18on-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.bouncycastle.org/download/bouncy-castle-java/", "licenseConcluded" : "(CC0-1.0 AND MIT AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcprov-jdk18on", "versionInfo" : "1.83" }, { "SPDXID" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83", "copyrightText" : "Copyright Dr B. R Gladman (gladman@seven77.demon.co.uk) and Sam Simpson (s.simpson@mia.co.uk)\nCopyright 2008-2023 Ping Identity Corporation\nCopyright 1997-2007 Sun Microsystems, Inc.\nCopyright (c) 2001 Company\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2009-2010 Jason Mehrens\nCopyright (c) 1997, 2019 Oracle and/or its affiliates\nCopyright (c) 1997-2011 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2000-2023 The Legion Of The Bouncy Castle Inc. (https://www.bouncycastle.org)\nCopyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org)\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.83/bcutil-jdk18on-1.83.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.83", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/EP-xSaGatn2qgVvZS4M_MWeOJBrIbPPu_dOR3YlmyJM/r1rv83.tar.gz", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CDDL-1.1 AND W3C AND BSD-3-Clause AND Apache-2.0 AND MIT AND CC0-1.0 AND CDDL-1.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.bouncycastle/bcutil-jdk18on", "versionInfo" : "1.83" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/bayeux-api/3.0.10/bayeux-api-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/bayeux-api@3.0.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bNSQicOOxWFNMGQLpSPvVML34ck2lf2XVQ8tS-m4gAg/bayeux-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/bayeux-api", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-client/3.0.10/cometd-java-client-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-client@3.0.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/C64FMKN1VgWjMza_dyRIAnDo7n8CDrH63-SeoF8QYWE/cometd-java-client-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/cometd-java-client", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10", "copyrightText" : "Copyright (c) 2008-2016 the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/cometd/java/cometd-java-common/3.0.10/cometd-java-common-3.0.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.cometd.java/cometd-java-common@3.0.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/AdNZ21-ee7so68ApSv_2IOr62ZLxpoMbmud6XqhKxPs/cometd-java-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.cometd.java/cometd-java-common", "versionInfo" : "3.0.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25", "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ], "copyrightText" : "Copyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util-ajax/12.0.25/jetty-util-ajax-12.0.25.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MlBdgH06sFwFG34mdFmktMfqBaBZVME3axZ1TNJ5fec/jetty-util-ajax-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@12.0.25", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.jetty/jetty-util-ajax", "versionInfo" : "12.0.25" }, { "SPDXID" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25", "attributionTexts" : [ "The UnixCrypt.java code implements the one way cryptography used by Unix systems for simple password protection. \nCopyright 1996 Aki Yoshida, modified April 2001 by Iris Van den Broeke, Daniel Deville. \nPermission to use, copy, modify and distribute UnixCrypt for non-commercial or commercial purposes and without fee is granted provided that the copyright notice appears in all copies." ], "copyrightText" : "Copyright (c) 1996 Aki Yoshida\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd\nCopyright (c) 1995 Mort Bay Consulting Pty Ltd and others.", "downloadLocation" : "https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-util/12.0.25/jetty-util-12.0.25.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fyRe10si-Sp2CYEl8KFav6V6nFhhnN6Ii1XfzmRPsYw/jetty-util-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.25", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(UnixCrypt AND Apache-2.0 AND EPL-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.eclipse.jetty/jetty-util", "versionInfo" : "12.0.25" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2013, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/external/aopalliance-repackaged/3.0.6/aopalliance-repackaged-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/VAixaCJSy3seS-HKhJ8FIj4D8KO_anXgXrAuYaGbFZM/aopalliance-repackaged-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2.external/aopalliance-repackaged", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6", "copyrightText" : "Copyright (c) 2024 Contributors to Eclipse Foundation\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2023 Payara Foundation and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\nCopyright (c) 2019 Payara Services and/or its affiliates\ncopyrighted by the Free Software Foundation\n\nAuthors: Contributors to Eclipse Foundation; David Matejcek; Free Software Foundation, Inc.; Jerome Dochez; Jerome Dochez, Jeff Trent, Mason Taube; Kohsuke Kawaguchi; Marek Potociar (marek.potociar at oracle.com); Mason Taube; Mason Taube (mason.taube at oracle.com); Oracle and/or its affiliates; Payara Foundation and/or its affiliates; Payara Services Ltd.; Payara Services and/or its affiliates; Tom Beerbower; the Eclipse GlassFish project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-api/3.0.6/hk2-api-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bT0dzPEadsenrpKcPXe2sVRSPjV7oZChYa8QETEmLig/hk2-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-api", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019 Payara Service Ltd. and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-locator/3.0.6/hk2-locator-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/LRUoMWFEWxMztx4sLTyeYbUtyxUYHuu78KppCkPf1Dk/hk2-locator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-locator", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6", "copyrightText" : "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2010, 2018 Oracle and/or its affiliates\nCopyright (c) 2019, 2020 Payara Services Ltd.\ncopyrighted by the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/hk2-utils/3.0.6/hk2-utils-3.0.6.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jbXXVnITSw6ESOpnibFT7a4KG5NFbpEJ7BrUqy_7feU/hk2-utils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/hk2-utils", "versionInfo" : "3.0.6" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3", "copyrightText" : "Copyright (c) 2009, 2018 Oracle and/or its affiliates\nCopyright (c) 2010, 2018 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gBxa3CSd7FmPe_GaAFeFAAgGrrSAVTi_zJGD65_3tsk/osgi-resource-locator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "EPL-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.hk2/osgi-resource-locator", "versionInfo" : "1.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Arul Dhesiaseelan (aruld at acm.org); Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Maksim Mukosey (mmukosey at gmail.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; jorgeluisw at mac.com; jorgeluisw@mac.com; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/connectors/jersey-apache-connector/3.1.11/jersey-apache-connector-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@3.1.11", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/6SQGAvKCLb_YeIGpdm5DjRAFzHDlA3HXaKH0uoJhOIE/jersey-apache-connector-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND GPL-2.0-only WITH Classpath-exception-2.0 AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.connectors/jersey-apache-connector", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2011, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; Libor Kramolis; Marek Potociar; Martin Matula; Michal Gajdos; Miroslav Fuksa; OSGi Alliance; Oracle and/or its affiliates; Patrik Dudits; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; Stefan Katerkamp (stefan@katerkamp.de); Stepan Kopriva; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; raphael.jolivet@gmail.com; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-client/3.1.11/jersey-client-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/BFjkdmYyZIHDOWs70Y5lX-e5ktE_v-nP68lBbE6IWc0/jersey-client-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND GPL-2.0-only WITH Classpath-exception-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.core/jersey-client", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 2024 Markus KARG and others\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2010, 2025 Oracle and/or its affiliates\nCopyright (c) 2018 Payara Foundation and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Adam Lindenthal; Alexey Stashok; Anthony Zana; Antonello Pasella; Austin Appleby; Bean Validation API; Ben Yu; Bill Shannon; Bob Lee; Bruno Harbulot; Charles Fry; Chris Povirk; Coda Hale and Yammer, Inc.; Doug Lea; Eric Fellheimer; Eric Rowell; Erik Kline; FasterXML, LLC.; Free Software Foundation, Inc.; Gaurav Gupta; Gerard Davison; Gerard Davison (gerard.davison at oracle.com); Gili Tzabari; Google, Inc.; Gregory Kick; Gustav Trede; Hubert Iwaniuk; INRIA, France Telecom; Isaac Shum; Jakub Podlesak; Jared Levy; Jason Lee; Jesse Wilson; John Mani; John Wells (john.wells at oracle.com); Justin Mahoney; Kevin Bourrillion; Kohsuke Kawaguchi; Kurt Alfred Kluever; Kyle Littlefield; Laurence Gonsalves; Libor Kramolis; Louis Wasserman; Marc Hadley; Marek Potociar; Mark Reinhold; Markus KARG; Markus KARG and others; Martin Matula; Max Spivak; Michal Gajdos; Mick Killianey; Mike Bostock; Miroslav Fuksa; Nishant Thakkar; OSGi Alliance; Ondrej Kosatka; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Payara Foundation and/or its affiliates; Petr Bouda; Petr Janouch; Red Hat, Inc.; Robert Konigsberg; Ryan Lubke (ryan.lubke at oracle.com); Santiago Pericas-Geertsen; Santiago Pericas-Geertsen (Santiago.PericasGeertsen at oracle.com); Shigeru Chiba; Stepan Vavra; Stepan Vavra (stepan.vavra@oracle.com); Sven Mawson; The Guava Authors; The JSR-330 Expert Group; Tom Beerbower; Twitter, Inc; Vetle Leinonen-Roeim (vetle at roeim.net); WS Development Team; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); Yegor Bugayenko (yegor256 at java.net); code CacheBuilder; hubick@java.net; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/core/jersey-common/3.1.11/jersey-common-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Z3lGNO9mwu28Bux_-Nu4u-Z-oHnHcwzF4DrIghQIHeY/jersey-common-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(CC-PDDC AND W3C AND BSD-3-Clause AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain AND GPL-2.0-only WITH Classpath-exception-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.core/jersey-common", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2017, 2025 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Jakub Podlesak; John Wells (john.wells at oracle.com); Marek Potociar; OSGi Alliance; Oracle and/or its affiliates; Petr Bouda; Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/inject/jersey-hk2/3.1.11/jersey-hk2-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/TebQJATQdwGRUPpC7VduvmcqQ2dc1hXux_4MMMU9sA0/jersey-hk2-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.inject/jersey-hk2", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11", "copyrightText" : "Copyright 2010-2013 Coda Hale and Yammer, Inc.\nCopyright Eric Rowell\nCopyright 2009, Red Hat, Inc.\nCopyright 2011-2016 Twitter, Inc\nCopyright (c) 2009 Antonello Pasella antonello.pasella@gmail.com\nCopyright (c) 2009-2024 FasterXML, LLC.\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) OSGi Alliance (2005, 2008)\nCopyright (c) 2012, 2025 Oracle and/or its affiliates\nCopyright (c) 2015-2018 Oracle and/or its affiliates\nCopyright (c) 1999- Shigeru Chiba\nCopyright (c) 2009, 2024 The Guava Authors\nCopyright (c) 2009, 2021 The JSR-330 Expert Group\nCopyright (c) 1994-2001 World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University)\nCopyright (c) jQuery Foundation\n(c) 2010-2017 Google, Inc.\ncopyright Bean Validation API\ncopyright Written by Doug Lea\ncopyrighted by the Free Software Foundation\n\nAuthors: Antonello Pasella; Bean Validation API; Coda Hale and Yammer, Inc.; Craig McClanahan; Doug Lea; Eric Rowell; FasterXML, LLC.; Free Software Foundation, Inc.; Google, Inc.; INRIA, France Telecom; Imran M Yousuf (imran at smartitengineering.com); Marek Potociar; Michal Gajdos; OSGi Alliance; Oracle and/or its affiliates; Paul Sandoz; Pavel Bucek; Pedro Kowalski (pallipp at gmail.com); Red Hat, Inc.; Shigeru Chiba; The Guava Authors; The JSR-330 Expert Group; Twitter, Inc; World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University); imran@smartitengineering.com; jQuery Foundation; the Eclipse Jersey project; the Free Software Foundation", "downloadLocation" : "https://repo1.maven.org/maven2/org/glassfish/jersey/media/jersey-media-multipart/3.1.11/jersey-media-multipart-3.1.11.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/l7JeW-thtrqp3-KRhvIyVi8fupF-HoJOx5jPiVp5Bv8/jersey-media-multipart-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11", "referenceType" : "purl" } ], "filesAnalyzed" : false, "licenseConcluded" : "(W3C AND BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only WITH Classpath-exception-2.0 AND Apache-2.0 AND CC0-1.0 AND MIT AND EPL-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.glassfish.jersey.media/jersey-media-multipart", "versionInfo" : "3.1.11" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2", "copyrightText" : "Copyright (c) 2012, 2013, 2014, 2015, 2016 Gil Tene\nCopyright (c) 2014 Matt Warren\nCopyright (c) 2014 Michael Barker", "downloadLocation" : "https://repo1.maven.org/maven2/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QYDieGy10LzephjRqpYOykEgbKdtPQhDkcQMDEgYjRg/HdrHistogram-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://hdrhistogram.github.io/HdrHistogram/", "licenseConcluded" : "(BSD-2-Clause AND CC0-1.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hdrhistogram/HdrHistogram", "versionInfo" : "2.2.2" }, { "SPDXID" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final", "copyrightText" : "Copyright 2009 IIZUKA Software Technologies Ltd\n(c) 2011 SERLI", "downloadLocation" : "https://repo1.maven.org/maven2/org/hibernate/validator/hibernate-validator/8.0.3.Final/hibernate-validator-8.0.3.Final.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xGDFrb_wMfreSEhbwws_H9EC2UHSwbM5qieHyeehJ2U/hibernate-validator-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.3.Final", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://hibernate.org/validator", "licenseConcluded" : "(CC-PDDC AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.hibernate.validator/hibernate-validator", "versionInfo" : "8.0.3.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0", "copyrightText" : "Copyright (c) 2010-2020 Nathan Rajlich", "downloadLocation" : "https://repo1.maven.org/maven2/org/java-websocket/Java-WebSocket/1.6.0/Java-WebSocket-1.6.0.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/gdRREzYBjRxN56LA2CMGJSehBVbimVRDogPiYKlIjzw/Java-WebSocket-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.java-websocket/Java-WebSocket@1.6.0", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/TooTallNate/Java-WebSocket", "licenseConcluded" : "(MIT AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.java-websocket/Java-WebSocket", "versionInfo" : "1.6.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA", "copyrightText" : "Copyright (c) 2004 Bill Burke\nCopyright (c) 1999- Shigeru Chiba", "downloadLocation" : "https://repo1.maven.org/maven2/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.javassist/javassist@3.30.2-GA", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jwkITDqr9qCeQPKqPWN8R3NiZV3uey-ZaV1oaP_ditk/javassist-~-GA-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://www.javassist.org/", "licenseConcluded" : "(LGPL-2.1-only AND MPL-1.1 AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.javassist/javassist", "versionInfo" : "3.30.2-GA" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.1.Final", "copyrightText" : "Copyright 2023 Red Hat, Inc.", "downloadLocation" : "https://repo1.maven.org/maven2/org/jboss/logging/jboss-logging/3.6.1.Final/jboss-logging-3.6.1.Final.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/8bKGfuaPmMQ4m34FF5a68eRXtBOYCa4Z33_fdOtSy94/jboss-logging-~.Final-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://www.jboss.org", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jboss.logging/jboss-logging", "versionInfo" : "3.6.1.Final" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jctools-jctools-core-4.0.5", "copyrightText" : "Copyright 2012 ACM\nCopyright 2012 Real Logic Ltd.\nCopyright (c) 1977, Association for Computing Machinery, Inc. General", "downloadLocation" : "https://repo1.maven.org/maven2/org/jctools/jctools-core/4.0.5/jctools-core-4.0.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jctools/jctools-core@4.0.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/NtCEfcLMdY_9bYHDXI4vY7Uv7WtQkxez-HFtZgZgxnY/jctools-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/JCTools", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jctools/jctools-core", "versionInfo" : "4.0.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0", "copyrightText" : "Copyright 2018-2020 The JSpecify", "downloadLocation" : "https://repo1.maven.org/maven2/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jspecify/jspecify@1.0.0", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wY3TlQ1yjGM-rs9dEto4mwhgSJk9HtRnoSaYVSkWVVM/jspecify-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "http://jspecify.org/", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jspecify/jspecify", "versionInfo" : "1.0.0" }, { "SPDXID" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15", "copyrightText" : "Copyright (c) 1997, 2021 Oracle and/or its affiliates\nCopyright (c) 2012, 2021 Oracle and/or its affiliates\nCopyright (c) 2018 Oracle and/or its affiliates\nCopyright (c) 2018, 2021 Oracle and/or its affiliates", "downloadLocation" : "https://repo1.maven.org/maven2/org/jvnet/mimepull/mimepull/1.9.15/mimepull-1.9.15.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/bzFFzlsYDW-n0MlargycNDK8rcT9VxYbU3i6VsaBwO8/mimepull-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/eclipse-ee4j/metro-mimepull", "licenseConcluded" : "BSD-3-Clause", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.jvnet.mimepull/mimepull", "versionInfo" : "1.9.15" }, { "SPDXID" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3", "copyrightText" : "Copyright (c) 2012, 2013, 2014 Gil Tene", "downloadLocation" : "https://repo1.maven.org/maven2/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ph6l2KRnE-6aYuzDYFRUoVu1i1jFhtVHKrR45hLUEpI/LatencyUtils-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://latencyutils.github.io/LatencyUtils/", "licenseConcluded" : "CC0-1.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.latencyutils/LatencyUtils", "versionInfo" : "2.0.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4", "copyrightText" : "Copyright 2014 Reactive Streams", "downloadLocation" : "https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lzlZKD1w0srcX7HUjm-dlT3mVAU0KPihSho4sZTZnm4/reactive-streams-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.reactive-streams.org/", "licenseConcluded" : "MIT-0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.reactivestreams/reactive-streams", "versionInfo" : "1.0.4" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17", "copyrightText" : "Copyright 2001-2004 The Apache Software Foundation\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/1mO6Pnkg3rDZtGNJ80GySWliWUpNQitqq6M17TZKtuY/jcl-over-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "(Apache-2.0 AND MIT)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/jcl-over-slf4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/fQc2eKipjY0kpA5RY8tMSF1CmGwn1uqL1jZo391dDj4/jul-to-slf4j-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/jul-to-slf4j", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17", "copyrightText" : "Copyright (c) 2004-2011 QOS.ch\nCopyright (c) 2004-2022 QOS.ch Sarl (Switzerland)", "downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/W-x9NwL28XQ6c003HiuzRhgCkhI4AoiTh_LK7QKIMt0/slf4j-api-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.slf4j/slf4j-api@2.0.17", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "http://www.slf4j.org", "licenseConcluded" : "MIT", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.slf4j/slf4j-api", "versionInfo" : "2.0.17" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.5", "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexander Abramov; Andy Wilkinson; Andy Wilkinson Nicoll; Antonin Arquey; Arthur Kalimullin; Artsiom Yudovin; Brian Clozel; Chao Chang; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Dave Syer; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Eric Spiegelberg; Georg Pirklbauer; Glenn Oppegard; Greg Turnquist; HaiTao Zhang; Hatef Palizgar; Johannes Edmeier; Johannes Graf; Jon Schneider; Jonatan Ivanov; Julien Dubois; Julio Gomez; Leo Li; Madhura Bhave; Marcin Grzejszczak; Mark Bonnekessel; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Simons; Michael Weirauch; Mikalai Lushchytski; Moritz Halbritter; Neil Powell; Nikolay Rybak; Raheela Aslam; Richard Santana; Rui Figueira; Safeer Ansari; Scott Frederick; Stefan Bratanov; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Wick Dynex; Yanming Zhou; Yongjun Hong; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator-autoconfigure/3.5.5/spring-boot-actuator-autoconfigure-3.5.5.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/jPFWsZiQXkrcl3xITk8-zi3R_0LcSlO1PeexMKs6boA/spring-boot-actuator-autoconfigure-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@3.5.5", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-actuator-autoconfigure", "versionInfo" : "3.5.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.5", "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aleksander Lech; Alexandre Dutra; Andy Wilkinson; Arnaud Cogoluegnes; Arthur Kalimullin; Artsiom Yudovin; Ben Hale; Brian Clozel; Chao Chang; Chris Bono; Christian Dupuis; Christoph Dreis; Dave Syer; David Good; David J. M. Karlsen; Dmytro Nosan; Eddu Melendez; Emily Tsanova; Eric Spiegelberg; Filip Hrisafov; HaiTao Zhang; Jens Wilke; Johannes Edmeier; Johnny Lim; Jon Schneider; Jonatan Ivanov; Joseph Beeton; Julio Jose Gomez Diaz; Lari Hotari; Madhura Bhave; Mark Paluch; Mattias Severson; Meang Akira Tanaka; Michael J. Simons; Michael Pratt; Mikalai Lushchytski; Moritz Halbritter; Nicolas Lejeune; Nikolay Rybak; Olivier Bourgain; Raja Kolli; Richard Santana; Rohan Goyal; Scott Frederick; Stephane Nicoll; Tadaya Tsuyukubo; Tim Ysewyn; Tomasz Lelek; Tommy Karlsson; Toshiaki Maki; VMware, Inc.; Vedran Pavic; Venil Noronha; Wallace Wadge; Xiong Tang; Young Jae; Yulin Qin; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-actuator/3.5.5/spring-boot-actuator-3.5.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-actuator@3.5.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/QsxBqMclfXv8ccrgXIfmiPev4LYhljMWGgbodnbAkWI/spring-boot-actuator-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-actuator", "versionInfo" : "3.5.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.5", "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Aarti Gupta; Ahmed Ashour; Akshay Dubey; Alen Turkovic; Alex Derkach; Alexander Preuss; Anastasiia Losieva; Andras Deak; Andreas Ahlenstorf; Andreas Killaitis; Andrew McGhie; Andrii Hrytsiuk; Andy Wilkinson; Arjen Poutsma; Arstiom Yudovin; Artem Bilan; Artsiom Yudovin; Artur Konczak; Aurelien Leboulanger; Benedikt Ritter; Brian Clozel; Bruce Brouwer; Camille Vienot; Chris Bono; Christian Dupuis; Christoph Strobl; Christophe Bornet; Claudio Nave; Dan Zheng; Dang Zhicairang; Daniel Fernandez; Dave Syer; David Liu; Dennis Melzer; Dirk Deyne; Dmitry Sulman; Dmytro Nosan; Dominic Gunn; Eddu Melendez; Eneias Silva; Evgeniy Cheban; Fabio Grassi; Ferenc Gratzer; Filip Hrisafov; Florian Lemaire; Florian Storz; Franjo Zilic; Gary Russell; Gaurav Pareek; Greg Turnquist; Grzegorz Poznachowski; HaiTao Zhang; Henning Pottker; Ittay Stern; Ivan Golovko; Ivan Sopov; Jacques-Etienne Beaudet; Jakub Kubrynski; Jaromir Hamala; Jean-Pierre Bergamin; Jens Schauder; Jens Wilke; Johannes Edmeier; Jonas Geiregat; Josh Long; Josh Thornhill; Julien Dubois; Justin Bertram; Kazuki Shimizu; Kedar Joshi; Kristine Jetzke; Lars Uffmann; Lasse Lindqvist; Lasse Wulff; Leo Li; Lukas Eder; Maciej Walkowiak; Madhura Bhave; Mahmoud Ben Hassine; Manuel Doninger; Marc Becker; Marcel Overdijk; Marco Aust; Marcos Barbero; Mark Paluch; Marten Deinum; Matej Nedic; Mathieu Ouellet; Michael Hunger; Michael J. Simons; Michael Nitschinger; Michael Simons; Michael Stummvoll; Michael Weidmann; Misagh Moayyed; Mohsin Husen; Moritz Halbritter; Mukul Kumar Chaundhyan; Mushtaq Ahmed; MyeongHyeon Lee; Nakul Mishra; Nasko Vasilev; Nishant Raut; Olga Maciaszek-Sharma; Oliver Drotbohm; Oliver Gierke; Olivier Lamy; Parviz Rozikov; Patrick Bray; Patryk Kostrzewa; Pedro Xavier Leite Cavadas; Philipp Kessler; Piotr Maj; Quinten De Swaef; Rafael Carvalho; Rafiullah Hamedy; Raheela Asalm; Raheela Aslam; Raja Kolli; Ralf Ueberfuhr; Ramil Saetov; Rob Winch; Rodolpho S. Couto; Roman Golovin; Rossen Stoyanchev; Roy Clarkson; Ryon Day; Safeer Ansari; Scott Frederick; Scott Fredericks; Sebastien Deleuze; Semyon Danilov; Sergey Serdyuk; Soby Chacko; Soohyun Lim; Stefano Cordio; Steffen F. Qvistgaard; Stephane Nicoll; Steve Riesenberg; Swamy Mavuri; Tadaya Tsuyukubo; Taeik Lim; Thiago Hirata; Thomas Kasene; Tomaz Fernandes; Tommy Ludwig; Toshiaki Maki; Uladzislau Seuruk; VMware, Inc.; Vedran Pavic; Venil Noronha; Victor Mandujano; Vince Bickers; Yan Kardziyaka; Yanming Zhou; Yong-Hyun Kim; Yulin Qin; Yunkun Huang; Zisis Pavloudis; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-autoconfigure/3.5.5/spring-boot-autoconfigure-3.5.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/qUxv9VNEVfTcwfYuXEAs6QqkuJdL9xPisFNvAzcbtiU/spring-boot-autoconfigure-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-autoconfigure", "versionInfo" : "3.5.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-jarmode-tools-3.5.5", "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\n\nAuthors: Madhura Bhave; Moritz Halbritter; Scott Frederick; Stephane Nicoll; VMware, Inc.; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-jarmode-tools/3.5.5/spring-boot-jarmode-tools-3.5.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot-jarmode-tools@3.5.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/omWc4qBOrO5acnqaQRdp_yI0OPrakX_WkeP3_S16Rlo/spring-boot-jarmode-tools-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot-jarmode-tools", "versionInfo" : "3.5.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.5", "copyrightText" : "Copyright (c) 2012-2025 VMware, Inc.\nCopyright 2012-present the original author or authors\nCopyright 2012-2024 the original author or authors\n\nAuthors: Alexander Heusingfeld; Andrey Hihlovskiy; Andrey Litvitski; Andy Clement; Andy Wilkinson; Anton Telechev; Arjen Poutsma; Artsiom Yudovin; Ben Hale; Brian Clozel; Brock Mills; Chris Bono; Christian Carriere-Tisseur; Christian Dupuis; Christoffer Sawicki; Christoph Dreis; Christoph Strobl; Craig Burke; Cyril Dangerville; Daeho Kwon; Daniel Fullarton; Dave Syer; David Liu; Dawid Antecki; Dmytro Danilenkov; Dmytro Nosan; Drummond Dawson; Eddu Melendez; Edson Chavez; Eric Bottard; Ethan Rubinson; Fabio Grassi; Filip Hrisafov; Geoffrey Chandler; HaiTao Zhang; Hendrig Sellik; Henri Kerola; Ilya Lukyanovich; Ivan Sopov; Jakub Kubrynski; Jared Bates; Jean de Klerk; Jeremy Rickard; Joao Pedro Evangelista; Jonatan Ivanov; Josh Long; Kevin Strijbos; Kristine Jetzke; Krzysztof Krason; Lasse Wulff; Maciej Walkowiak; Madhura Bhave; Marcos Barbero; Mark Paluch; Marten Deinum; Matt Benson; Michael Simons; Michael Stummvoll; Michal Mlak; Michele Mancioppi; Moritz Halbritter; Nguyen Bao Sach; Nguyen Sach; Nidhi Desai; Oliver Gierke; Olivier Lamy; Onur Kagan Ozcan; Pascal Zwick; Paul Aly; Pavel Anisimov; Peter Leibiger; Raheela Aslam; Raja Kolli; Ralph Goers; Raphael von der Grun; Robert Thornton; Samuel Lissner; Scott Frederick; Sebastiaan Fernandez; Sebastien Deleuze; Shixiong Guo; Sijun Yang; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Thiago Hirata; Tomasz Przybyla; Toshiaki Maki; Tyler Van Gorder; VMware, Inc.; Vedran Pavic; Venil Noronha; Veronica Vasquez; Vladimir Tsanev; Vladislav Kisel; Yanming Zhou; Yong-Hyun Kim; Yongjun Hong; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/boot/spring-boot/3.5.5/spring-boot-3.5.5.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.boot/spring-boot@3.5.5", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/OD5l40-5thpwSMrUZFOQdMgj6SyytF-1hnQd5uTik0s/spring-boot-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-boot", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.boot/spring-boot", "versionInfo" : "3.5.5" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.3", "copyrightText" : "Copyright 2004-present the original author or authors\n\nAuthors: Alavudin Kuttikkattil; Alexey Nesterov; Andrey Litvitski; Ankur Pathak; Ben Alex; Christophe Gilles; Dan Zheng; Daniel Garnier-Moiroux; Ding Hao; Ebert Toribio; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Ivan Pavlov; Jerome Wacongne ; Jesus Ascama Arias; Jinwoo Bae; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Loic Labagnara; Luis Felipe Vega; Luke Taylor; Manuel Tejeda; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Vitz; Ngoc Nhan; Norbert Nowak; Oliver Becker; Onur Kagan Ozcan; Parikshit Dutta; Pat McCusker; Rafiullah Hamedy; Rob Winch; Roman Matiushchenko; Ruby Hartono; Shazin Sadakath; Spring Security; Steve Riesenberg; Tadaya Tsuyukubo; Taehong Kim; Tim Ysewyn; Tony Dalbrekt; Vedran Pavic; Wallace Wadge; Yanming Zhou; Yuriy Savchenko; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-config/6.5.3/spring-security-config-6.5.3.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-config@6.5.3", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ThOkM9uh27UbNEivK7lQLpgCyzuB-DsnDLANpyQyt-I/spring-security-config-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-config", "versionInfo" : "6.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.3", "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Alexander Furer; Andrei Stefan; Ben Alex; Blagoja Stamatovski; Brian Moseley; Dan Zheng; Daniel Bustamante; Eddu Melendez; Eleftheria Stein; Evgeniy Cheban; Federico Herrera; Greg Turnquist; Hyunmin Choi; Jitendra Singh; Joe Grandja; Jose Santos; Josh Cummings; KyeongHoon Lee; Laurent Pireyn (laurent.pireyn@pisolutions.eu); Leonardo Pinto (leoviveiros@gmail.com); Luke Taylor; Marcus Da Coregio; Marten Deinum; Max Batischev; Michael Mayr; Norbert Nowak; Oleg Zhuravlev (olezhuravlev@gmail.com); Onur Kagan Ozcan; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Ray Krueger https://java.sun.com/j2se/1.4.2/docs/api/javax/security/auth/callback/Callback.html; Richard Valdivieso; Rob Winch; Robbie Martinus; Ruud Senden; Ryan Heaton; Scott Battaglia; Shazin Sadakath; Steve Riesenberg; Tadaya Tsuyukubo; Thomas Darimont; Ulrich Grave; Valentin Crettaz (valentin.crettaz@consulthys.com); Yannick Lombardi; hboutemy@apache.org Herve Boutemy; kenney@apache.org Kenney Westerhof; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-core/6.5.3/spring-security-core-6.5.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/lRQtC9OHwzUAJnOY0FU3GNUQA9MusRx4A6bisRgTWX4/spring-security-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-core@6.5.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-core", "versionInfo" : "6.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.3", "copyrightText" : "Copyright (c) 2006 Damien Miller \nCopyright 2004-present the original author or authors\n\nAuthors: Alan Stewart; Annabelle Donald; Corgan Donald; Damien Miller; Dave Syer; Jihoon Cha; Joe Grandja; Keith Donald; Lin Feng; Loic Guibert; Luke Taylor; Michael Simons; Ray Krueger; Rob Winch; Rob Worsnop; Shazin Sadakath; Simeon Macke; Tim Ysewyn; William Tran; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-crypto/6.5.3/spring-security-crypto-6.5.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/wminj0nJJcagvJnBin5z_r8F-7bJuCzT1T80ceeSkAQ/spring-security-crypto-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-crypto@6.5.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "(CC-PDDC AND Apache-2.0 AND ISC AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-crypto", "versionInfo" : "6.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.3", "copyrightText" : "Copyright 2004, 2005, 2006 Acegi Technology Pty Limited\nCopyright 2004-present the original author or authors\n\nAuthors: Acegi Technology Pty Limited; Adam Ostrozlik; Alex Montoya; Alexey Nesterov; Alonso Araya; Andreas Senft; Andrey Grebnev; Andrey Litvitski; Ankur Pathak; Artur Otrzonsek; Ben Alex; Bogdan Ilchyshyn; Boris Finkelshteyn; Carlos Sanchez; Cesar Revert; Christian Schuster; Christophe Gilles; Claudenir Freitas; Colin Sampaleanu; Craig Andrews; Craig McClanahan; Daeho Kwon; Dan Zheng; Daniel Garnier-Moiroux; David Herberth; David Kovac; Eddu Melendez; Eleftheria Stein; Eric Deandrea; Evgeniy Cheban; Gabriel Lavoie; Gunnar Hillert; Jinwoo Bae; Jitendra Singh; Joe Grandja; Josh Cummings; Kazuki Shimizu; Keesun Baik; Leonard Brunings; Luke Butters; Luke Taylor; MD Sayem Ahmed; Manuel Jordan; Marcus Da Coregio; Mark Chesney; Markus Heiden; Marten Algesten; Marten Deinum; Martin Algesten; Mathieu Ouellet; Max Batischev; Michal Okosy; Mike Wiesner; Milan Sevcik; Nicholas Williams; Nick McKinney; Omri Spector; Onur Kagan Ozcan; Orlando Garcia Carmona; Parikshit Dutta; Rafiullah Hamedy; Ray Krueger; Remy Maucherat; Rob Winch; Ruud Senden; Sangyoon Jeong; Sergey Bespalov; Shazin Sadakath; Stephane Manciot; Steve Riesenberg; Tadaya Tsuyukubo; Tao Qian; Thomas Vitale; Tim Ysewyn; Vedran Pavic; Yoobin Yoon; Zeeshan Adnan; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/security/spring-security-web/6.5.3/spring-security-web-6.5.3.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MnO52czgYkNGBGYHdJb_oAhYwqicpmgakcImpAKIHbE/spring-security-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework.security/spring-security-web@6.5.3", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://spring.io/projects/spring-security", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework.security/spring-security-web", "versionInfo" : "6.5.3" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Bob Lee; Chris Beams; Dave Syer; Dmitriy Kopylenko; INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Mark Fisher; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Ramnivas Laddad; Rob Harrop; Rod Johnson; Sam Brannen; Sebastien Deleuze; Sergey Tsypanov; Stephane Nicoll; Yanming Zhou; the FactoryBean; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-aop/6.2.10/spring-aop-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mPOzxUcBBres1UG3DKWz_E7PrJ8BJVYYCfuamkPYwDo/spring-aop-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-aop@6.2.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-aop", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Colin Sampaleanu; Costin Leau; Dave Syer; Erik Wiersma; FactoryBeans FactoryBean; Gary Russell; Graeme Rocher; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Juergen Hoeller, Rob Harrop, Mark Fisher, Chris Beams; Keith Donald; Mark Fisher; Nicholas Williams; OW2 Consortium; Pivotal, Inc.; Ramnivas Laddad; Rick Evans; Rob Harrop; Rod Johnson; Rod Johnson, Juergen Hoeller, Alef Arendsen, Colin Sampaleanu, Rob Harrop; Sam Brannen; Sebastien Deleuze; Stephane Nicoll; Thomas Risberg; Yanming Zhou; the FactoryBean; the FactoryBean. Therefore; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-beans/6.2.10/spring-beans-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ullya-QAxYzpuSha5LJ6-l9jDfVAH8fTjn-8yKZavf8/spring-beans-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-beans@6.2.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-beans", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Adam Ostrozlik; Adrian Colyer; Alef Arendsen; Andrei Nevedomskii; Andy Clement; Andy Wilkinson; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Christoph Dreis; Costin Leau; Dave Syer; David Boden; Dmitriy Kopylenko; Elizabeth Chatman; INRIA, France Telecom; Jean-Pierre Pawlak; Jeff Brown; Jennifer Hickey; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Kazuki Shimizu; Keith Donald; Marcin Kamionowski; Mario Arias; Mark Fisher; Mikhael Sokolov; Nicholas Williams; OW2 Consortium; Oliver Gierke; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remy Guihard; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Seth Ladd; Simon Basle; Stephane Nicoll; Tadaya Tsuyukubo; Tobias Montagna-Hay; Toshiaki Maki; Vedran Pavic; Victor Brown; Yanming Zhou; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-context/6.2.10/spring-context-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/blXKopkYSOZLTgdWfFLO7veKhcHfbtz9iweuZnUBiE0/spring-context-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-context@6.2.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-context", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright 2002,2003 The Apache Software Foundation\nCopyright (c) 2014 Google, Inc.\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright (c) 2015 Square, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2020 the original author or authors\n\nAuthors: Adrian Colyer; Alef Arendsen; Ales Justin; Andy Clement; Andy Wilkinson; Arjen Poutsma; Ben Manes; Brian Clozel; Chris Beams; Chris Nokleberg; Colin Sampaleanu; Costin Leau; Craig Andrews; Dave Syer; David Haraburda; Dimitrios Liapis; Eric Bruneton; Eric Bruneton https://docs.oracle.com/javase/specs/jvms/se9/html/jvms-4.html; Erwin Vervaet; Eugene Kuleshov; Eugene Rabii; Gary Russell; Google, Inc.; Greg Wilkins; Henri Tremblay; Hyunjin Choi; INRIA, France Telecom; Ian Parkinson (Google Inc.); Janne Valkealahti; Jason Zaugg; Joe Walnes; Joe Walnes, Henri Tremblay, Leonardo Mesquita; John Burns; Josh Cummings; Juergen Hoeller; Juozas Baliuka; Juozas Baliuka, Chris Nokleberg; Keith Donald; Lachlan Roberts; Leonardo Mesquita; Loic Ledoyen; Luke Taylor; Madhura Bhave; Marius Bogoevici; Mark Fisher; Mark Hobson; Mark Paluch; Mark Pollack; Markus Heiden; Mattias Severson; Neeme Praks; OW2 Consortium; Oleg Zhurakousky; Oleh Dokuka; Oliver Gierke; Philippe Marschall; Piotr Qertoip Wlodarek; Pivotal, Inc.; Qimiao Chen; Ramnivas Laddad; Remi Forax; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Square, Inc.; Stephane Maldini; Stephane Nicoll; Sungbin Yang; Tadaya Tsuyukubo; The Apache Software Foundation; Valery Yatsynovich; Violeta Georgieva; Vladislav Kisel; Yanming Zhou; sberlin@gmail.com; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-core/6.2.10/spring-core-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-core@6.2.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/YcfXoNUYQKGRKqvtQRBhH3IOgGB9dBO97yQB8tPP8yA/spring-core-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-core", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Andy Clement; Chris Beams; Clark Duplichien; Giovanni Dall'Oglio Risso; Harry Yang; INRIA, France Telecom; Ivo Smid; Jackmiking Lee; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; OW2 Consortium; Oliver Becker; Pivotal, Inc.; Rossen Stoyanchev; Sam Brannen; Satyapal Reddy; Sebastien Deleuze; Semyon Danilov; Simon Basle; Stephane Nicoll; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-expression/6.2.10/spring-expression-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-expression@6.2.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/mIadfMD0AEuQKlaY9mwMYkeaCTpmttrZUVoBVFKNQ24/spring-expression-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-expression", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: INRIA, France Telecom; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; OW2 Consortium; Pivotal, Inc.; Sebastien Deleuze; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-jcl/6.2.10/spring-jcl-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-jcl@6.2.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/ml9VZoWDpmofVMbIJZnhALyc1uzZlZ-EFG5r53eX9sc/spring-jcl-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-jcl", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\nCopyright 2002-2021 the original author or authors\n\nAuthors: Alef Arendsen; Alex Antonov; Andreas Ahlenstorf; Andy Clement; Arjen Poutsma; Ben Alex; Brian Clozel; Chris Beams; Christophe Maillard; Colin Sampaleanu; Craig Andrews; Dave Syer; Eddu Melendez; Greg Turnquist; Greg Wilkins; Hyoungjune Kim; INRIA, France Telecom; Iain Henderson; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Jon Schneider; Josh Long; Juergen Hoeller; Julien Eyraud; Kazuki Shimizu; Keith Donald; Kim Bosung; Lachlan Roberts; Luciano Leggieri; Marek Hawrylczak; Markus Malkusch; Marten Deinum; Martin Kersten; Martin Tarjanyi; OW2 Consortium; Oleg Kalnichevski; Oleh Dokuka; Olga Maciaszek-Sharma; Oliver Gierke; Parviz Rozikov; Pivotal, Inc.; Rick Evans; Rob Harrop; Rob Winch; Rod Johnson; Rossen Stoyanchev; Roy Clarkson; Ruslan Akhundov; Russell Allen; Sam Brannen; Sangyoon Jeong; Scott Andrews; Sebastien Deleuze; Sergey Tsypanov; Simon Basle; Simon Galperin; Stephane Maldini; Stephane Nicoll; Tadaya Tsuyukubo; Trevor D. Cook; Violeta Georgieva; Vladislav Kisel; dmitry.katsubo@gmail.com Dmitry Katsubo; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-web/6.2.10/spring-web-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-web@6.2.10", "referenceType" : "purl" }, { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/Yb2Wt7I8s0o5N3QFG4XlbuaEmcesHKsFlSNk99SAsbE/spring-web-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0 AND LicenseRef-Public-Domain)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-web", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webflux-6.2.10", "attributionTexts" : [ "This product may include a number of subcomponents with separate\ncopyright notices and license terms. Your use of the source code for\nthese subcomponents is subject to the terms and conditions of the\nsubcomponent's license, as noted in the license.txt file (*).\n\n(*) This file is available from the source code archive for this third party. \n\nTo the extent any open source components are licensed under the EPL and/or\nother similar licenses that require the source code and/or modifications to\nsource code to be made available (as would be noted above), you may obtain a\ncopy of the source code corresponding to the binaries for such open source\ncomponents and modifications thereto, if any, (the \"Source Files\"), by\ndownloading the Source Files from https://spring.io/projects, Pivotal's website\nat https://network.pivotal.io/open-source, or by sending a request, with your\nname and address to: Pivotal Software, Inc., 875 Howard Street, 5th floor, San\nFrancisco, CA 94103, Attention: General Counsel. All such requests should\nclearly specify: OPEN SOURCE FILES REQUEST, Attention General Counsel. Pivotal\ncan mail a copy of the Source Files to you on a CD or equivalent physical\nmedium." ], "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Arjen Poutsma; Brian Clozel; Darren Davison; George Papadopoulos; Greg Wilkins; INRIA, France Telecom; Igor Manushin; Issam El-atif; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Lachlan Roberts; OW2 Consortium; Olga Maciaszek-Sharma; Pivotal, Inc.; Rob Winch; Rossen Stoyanchev; Sam Brannen; Sebastien Deleuze; Stephane Maldini; Valentin Shakhov; Violeta Georgieva; Yevhenii Melnyk; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webflux/6.2.10/spring-webflux-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/MrRu9hOS-__eyisPAIoWzL4o8uvDpslx0BdcM3TEv1U/spring-webflux-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-webflux@6.2.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-webflux", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.10", "copyrightText" : "Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita\nCopyright (c) 2000-2011 INRIA, France Telecom\nCopyright (c) 1999-2009, OW2 Consortium \nCopyright (c) 2002-2025 Pivotal, Inc.\nCopyright 2002-present the original author or authors\n\nAuthors: Agim Emruli; Alef Arendsen; Arjen Poutsma; Brian Clozel; Chris Beams; Christian Dupuis; Colin Sampaleanu; Darren Davison; Dave Syer; David Syer; Hyoungjune Kim; INRIA, France Telecom; Jean-Pierre Pawlak; Jeremy Grelle; Joe Walnes, Henri Tremblay, Leonardo Mesquita; Juergen Hoeller; Keith Donald; Mark Fisher; Marten Deinum; Nicholas Williams; OW2 Consortium; Olga Maciaszek-Sharma; Oliver Gierke; Patrick Strawderman; Pivotal, Inc.; Rick Evans; Rob Harrop; Rod Johnson; Rossen Stoyanchev; Sam Brannen; Scott Andrews; Sebastien Deleuze; Sergey Galkin; Sivaprasad Valluru; Stephane Nicoll; Thomas Risberg; Vedran Pavic; the original author or authors", "downloadLocation" : "https://repo1.maven.org/maven2/org/springframework/spring-webmvc/6.2.10/spring-webmvc-6.2.10.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/xzd0cPlfD9zV-8A3wT4uLn-V4eNC3uf0rx-7iEIle4Y/spring-webmvc-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.springframework/spring-webmvc@6.2.10", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://github.com/spring-projects/spring-framework", "licenseConcluded" : "(EPL-1.0 AND BSD-3-Clause AND Apache-2.0)", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.springframework/spring-webmvc", "versionInfo" : "6.2.10" }, { "SPDXID" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4", "copyrightText" : "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008, SnakeYAML", "downloadLocation" : "https://repo1.maven.org/maven2/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar", "externalRefs" : [ { "referenceCategory" : "OTHER", "referenceLocator" : "https://third-parties.c8y.io/open-source-archives/RO38iEj-NCzAqI21sz6Ktwg7iVuQ5IRLxSB8qyAgRHA/snakeyaml-~-sources.jar", "referenceType" : "https://spdx.org/rdf/references/cumulocity/open-source-archives" }, { "referenceCategory" : "PACKAGE-MANAGER", "referenceLocator" : "pkg:maven/org.yaml/snakeyaml@2.4", "referenceType" : "purl" } ], "filesAnalyzed" : false, "homepage" : "https://bitbucket.org/snakeyaml/snakeyaml", "licenseConcluded" : "Apache-2.0", "licenseDeclared" : "NOASSERTION", "licenseInfoFromFiles" : [ ], "name" : "maven/org.yaml/snakeyaml", "versionInfo" : "2.4" } ], "relationships" : [ { "spdxElementId" : "SPDXRef-DOCUMENT", "relationshipType" : "DESCRIBES", "relatedSpdxElement" : "SPDXRef-cumulocity-sigfox-agent-4.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-dns-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.annotation-jakarta.annotation-api-2.1.1" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-resolver-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.inject-jakarta.inject-api-2.0.1" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-tracer-common-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.activation-jakarta.activation-api-2.1.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-unix-common-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-textformats-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-model-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-classes-epoll-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-core-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-transport-native-epoll-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-exposition-formats-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-ca-certificates-bundle-20251003-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor-reactor-core-3.7.9" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-ca-certificates-20251003-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.prometheus-prometheus-metrics-config-1.3.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-core-1.2.9" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-busybox-1.37.0-r30-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.projectreactor.netty-reactor-netty-http-1.2.9" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-sha512sum-9.8-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-9.8-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-env-9.8-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-coreutils-fmt-9.8-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-java-cacerts-1.1-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-freetype-2.14.1-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-giflib-5.2.2-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.validation-jakarta.validation-api-3.0.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-api-2.24.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.logging.log4j-log4j-to-slf4j-2.24.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpclient-4.5.14" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-httpcore-4.4.16" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-text-1.14.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.httpcomponents-fluent-hc-4.5.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-csv-1.13.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.commons-commons-lang3-3.17.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libapk-3.0.3-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-jakarta.ws.rs-jakarta.ws.rs-api-3.1.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libattr-2.5.2-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-joda-time-joda-time-2.10.14" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-java-common-1.0-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-lcms2-2.17-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libcrypto3-3.5.5-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libffi-3.5.2-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libbsd-0.12.2-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libbz2-1.0.8-r6-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libjpeg-turbo-3.1.2-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libmd-1.1.0-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-web-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libpng-1.6.56-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-expression-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-jcl-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libx11-1.8.12-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-context-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxau-1.0.12-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-core-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libssl3-3.5.5-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-aop-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libtasn1-4.21.0-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-beans-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxext-1.3.6-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-crypto-6.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxi-1.8.2-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-web-6.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxcb-1.17.0-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxdmcp-1.1.5-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-core-6.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxrender-0.9.12-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-libxtst-1.2.5-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-musl-utils-1.2.5-r21-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-p11-kit-trust-0.25.5-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-p11-kit-0.25.5-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-musl-1.2.5-r21-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-openjdk17-17.0.18-p8-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-ssl-client-1.37.0-r30-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.yaml-snakeyaml-2.4" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-utmps-libs-0.1.3.1-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-scanelf-1.3.8-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webflux-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-skalibs-libs-2.14.4.0-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework-spring-webmvc-6.2.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alsa-lib-1.2.14-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-apk-tools-3.0.3-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-brotli-libs-1.2.0-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.latencyutils-LatencyUtils-2.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-busybox-binsh-1.37.0-r30-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-generic-com.nsn.cumulocity.dependencies-svenson-1.5.8" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-data-3.7.1-r8-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jspecify-jspecify-1.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-github-openjdk-jdk17u-jdk-17.0.18-ga" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-baselayout-3.7.1-r8-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jvnet.mimepull-mimepull-1.9.15" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-keys-2.6-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jboss.logging-jboss-logging-3.6.1.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-zlib-1.3.1-r2-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-alpine-release-3.23.3-r0-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.jctools-jctools-core-4.0.5" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-annotations-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.java-websocket-Java-WebSocket-1.6.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-core-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.javassist-javassist-3.30.2-GA" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-classic-1.5.18" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hdrhistogram-HdrHistogram-2.2.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-ch.qos.logback-logback-core-1.5.18" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.hibernate.validator-hibernate-validator-8.0.3.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.media-jersey-media-multipart-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.core-jackson-databind-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-apk-alpine-acl-libs-2.3.2-r1-arch-x86-64-distro-3.23.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml-classmate-1.7.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-3.5.5" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.github.stephenc.jcip-jcip-annotations-1.0-1" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.security-spring-security-config-6.5.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-autoconfigure-3.5.5" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.19.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-jarmode-tools-3.5.5" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.errorprone-error-prone-annotations-2.36.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-autoconfigure-3.5.5" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-failureaccess-1.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.springframework.boot-spring-boot-actuator-3.5.5" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.gson-gson-2.13.1" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jul-to-slf4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.code.svenson-svenson-1.5.8" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-slf4j-api-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.reactivestreams-reactive-streams-1.0.4" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.slf4j-jcl-over-slf4j-2.0.17" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-guava-33.4.8-jre" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-ajax-12.0.25" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.google.j2objc-j2objc-annotations-3.0.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-client-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-cometd-java-common-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-codec-commons-codec-1.18.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcutil-jdk18on-1.83" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-collections-commons-collections-3.2.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.cometd.java-bayeux-api-3.0.10" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-com.nimbusds-nimbus-jose-jwt-10.6" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcpkix-jdk18on-1.83" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-beanutils-commons-beanutils-1.11.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.bouncycastle-bcprov-jdk18on-1.83" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-commons-1.15.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-el-10.1.44" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-core-1.15.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-websocket-10.1.44" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-io-commons-io-2.20.0" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-commons-logging-commons-logging-1.2" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.apache.tomcat.embed-tomcat-embed-core-10.1.44" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-jakarta9-1.15.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-observation-1.15.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.micrometer-micrometer-registry-prometheus-1.15.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-common-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.inject-jersey-hk2-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http2-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.connectors-jersey-apache-connector-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-http-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.jersey.core-jersey-client-3.1.11" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-buffer-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-utils-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-dns-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-osgi-resource-locator-1.0.3" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-common-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-api-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-handler-proxy-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2-hk2-locator-3.0.6" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-socks-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.eclipse.jetty-jetty-util-12.0.25" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-io.netty-netty-codec-4.1.124.Final" }, { "spdxElementId" : "SPDXRef-cumulocity-sigfox-agent-4.0.0", "relationshipType" : "CONTAINS", "relatedSpdxElement" : "SPDXRef-pkg-maven-org.glassfish.hk2.external-aopalliance-repackaged-3.0.6" } ] }