{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.apache/maven-jarsigner","documentNamespace":"https://spdx.org/spdxdocs/protobom/5c8c30d8-0c93-4da4-b875-00410faa3994","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20250731140552-613e75aeb253+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-08-05T10:23:31Z"},"packages":[{"name":"org.slf4j:slf4j-api","SPDXID":"SPDXRef-maven-org.slf4j-slf4j-api-1.7.36-75c946","versionInfo":"1.7.36","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.slf4j/[email protected]"}]},{"name":"org.junit.jupiter:junit-jupiter-api","SPDXID":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-api-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.junit.jupiter/junit-jupiter-api"}]},{"name":"javax.inject:javax.inject","SPDXID":"SPDXRef-maven-javax.inject-javax.inject-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/javax.inject/javax.inject@1"}]},{"name":"org.apache.rat:apache-rat-plugin","SPDXID":"SPDXRef-maven-org.apache.rat-apache-rat-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.rat/apache-rat-plugin"}]},{"name":"org.slf4j:slf4j-simple","SPDXID":"SPDXRef-maven-org.slf4j-slf4j-simple-1.7.36-75c946","versionInfo":"1.7.36","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.slf4j/[email protected]"}]},{"name":"org.apache.maven.shared:maven-shared-utils","SPDXID":"SPDXRef-maven-org.apache.maven.shared-maven-shared-utils-3.4.2-75c946","versionInfo":"3.4.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.shared/[email protected]"}]},{"name":"com.google.inject:guice","SPDXID":"SPDXRef-maven-com.google.inject-guice-6.0.0-75c946","versionInfo":"6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright (c) 2006 Google Inc. Bundle-Description Guice, Copyright 2006-2023 Google, Inc., Copyright 2011 Google Inc.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/com.google.inject/[email protected]"}]},{"name":"commons-io:commons-io","SPDXID":"SPDXRef-maven-commons-io-commons-io-2.20.0-75c946","versionInfo":"2.20.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/commons-io/[email protected]"}]},{"name":"org.eclipse.sisu:sisu-maven-plugin","SPDXID":"SPDXRef-maven-org.eclipse.sisu-sisu-maven-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.eclipse.sisu/sisu-maven-plugin"}]},{"name":"org.eclipse.sisu:org.eclipse.sisu.inject","SPDXID":"SPDXRef-maven-org.eclipse.sisu-org.eclipse.sisu.inject-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject"}]},{"name":"apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml","SPDXID":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-maven-verify.yml-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml@4.%2A.%2A"}]},{"name":"apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml","SPDXID":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-pr-automation.yml-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml@4.%2A.%2A"}]},{"name":"apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml","SPDXID":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-release-drafter.yml-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml@4.%2A.%2A"}]},{"name":"apache/maven-gh-actions-shared/.github/workflows/stale.yml","SPDXID":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-stale.yml-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/apache/maven-gh-actions-shared/.github/workflows/stale.yml@4.%2A.%2A"}]},{"name":"com.github.apache/maven-jarsigner","SPDXID":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","versionInfo":"master","downloadLocation":"git+https://github.com/apache/maven-jarsigner","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/apache/maven-jarsigner@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-stale.yml-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-api-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-javax.inject-javax.inject-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.apache.rat-apache-rat-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.slf4j-slf4j-simple-1.7.36-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-commons-io-commons-io-2.20.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.eclipse.sisu-sisu-maven-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.eclipse.sisu-org.eclipse.sisu.inject-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-maven-verify.yml-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.slf4j-slf4j-api-1.7.36-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.shared-maven-shared-utils-3.4.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-maven-com.google.inject-guice-6.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-pr-automation.yml-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relatedSpdxElement":"SPDXRef-githubactions-apachemaven-gh-actions-shared.githubworkflows-release-drafter.yml-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-apache-maven-jarsigner-master-2a40ba","relationshipType":"DESCRIBES"}]}