{
  "SPDXID": "SPDXRef-DOCUMENT",
  "spdxVersion": "SPDX-2.3",
  "creationInfo": {
    "created": "2024-03-26T08:11:21Z",
    "creators": [
      "Organization:hcl",
      "Person:Igal Tsirulnik <igal.tsirulnik@hcl.com>",
      "Tool: HCL AppScan"
    ]
  },
  "name": "SPDX report for SPDX report for scan SCA 2024-03-26 SCADemo_2024-03-26_09-58-16.irx",
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://CreatorWebsite/spdx/doc/7bff13eb-d631-474d-b644-9450e01e9f57",
  "packages": [
    {
      "SPDXID": "SPDXRef-PACKAGE-com.hynnetcommons-lang3-3.3.2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "8a8e73d72f7969ef698ab2735f72913d8917e308"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://repo1.maven.org/maven2/com/hynnet/commons-lang3",
      "externalRefs": [],
      "homepage": "http://svn.apache.org/viewvc/commons/proper/lang/trunk",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "com.hynnet:commons-lang3",
      "originator": "NOASSERTION",
      "packageFileName": "commons-lang3-3.3.2.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "3.3.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.containersjersey-container-servlet-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "4e126e7be74265941037d0063a7abecd5716920f"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.containers/jersey-container-servlet",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.containers:jersey-container-servlet",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-container-servlet-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.hk2hk2-locator-2.5.0-b42",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "3e3ced51908ccc5f42d6c9c0a98397ead1295735"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.hk2/hk2-locator",
      "externalRefs": [],
      "homepage": "https://java.net/projects/hk2/sources/git/show",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "name": "org.glassfish.hk2:hk2-locator",
      "originator": "NOASSERTION",
      "packageFileName": "hk2-locator-2.5.0-b42.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.5.0-b42"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.hk2.externalaopalliance-repackaged-2.5.0-b42",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "a068988295ad3254ae420a38cbfbaa54183edeab"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.hk2.external/aopalliance-repackaged",
      "externalRefs": [],
      "homepage": "http://www.oracle.com",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.hk2.external:aopalliance-repackaged",
      "originator": "NOASSERTION",
      "packageFileName": "aopalliance-repackaged-2.5.0-b42.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.5.0-b42"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.corejersey-common-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "a5fcd456d4296e3198619c720ac628a7fb94af34"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.core/jersey-common",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.core:jersey-common",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-common-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-javax.validationvalidation-api-1.1.0.Final",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "628bc389ff99b8a0524a8ca279b61056511c7ee7"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/javax.validation/validation-api",
      "externalRefs": [],
      "homepage": "http://beanvalidation.org",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "javax.validation:validation-api",
      "originator": "NOASSERTION",
      "packageFileName": "validation-api-1.1.0.Final.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1.1.0.Final"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.corejersey-server-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "6fba4127d91e1d4459d7528d109ca5aa894b42c5"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.core/jersey-server",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.core:jersey-server",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-server-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-commons-codeccommons-codec-1.6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "6ff3e81ff1ad9d33f66f401f8942482e4b67e585"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/commons-codec/commons-codec",
      "externalRefs": [],
      "homepage": "https://www.apache.org",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "commons-codec:commons-codec",
      "originator": "NOASSERTION",
      "packageFileName": "commons-codec-1.6.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1.6"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-commons-langcommons-lang-2.5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "4732f44231d7c3de94ea0b3f4231124bc6415e83"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/commons-lang/commons-lang",
      "externalRefs": [],
      "homepage": "http://svn.apache.org/viewvc/commons/proper/lang/branches/lang_2_x",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "commons-lang:commons-lang",
      "originator": "NOASSERTION",
      "packageFileName": "commons-lang-2.5.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.5"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.injectjersey-hk2-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "69930e87090ba8b8a9412813b57598d214367051"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.inject/jersey-hk2",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.inject:jersey-hk2",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-hk2-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-javax.annotationjavax.annotation-api-1.2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "6a32a7c1b5bca19ad7e975a8a2242f991707609e"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/javax.annotation/javax.annotation-api",
      "externalRefs": [],
      "homepage": "http://jcp.org/en/jsr/detail?id=250",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "name": "javax.annotation:javax.annotation-api",
      "originator": "NOASSERTION",
      "packageFileName": "javax.annotation-api-1.2.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.containersjersey-container-servlet-core-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "48bea83d9a46b1cee60c148a35cdbafe28c3d8bf"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.containers/jersey-container-servlet-core",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.containers:jersey-container-servlet-core",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-container-servlet-core-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.apache.winkwink-json4j-1.4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "c2fd2d24746c3ad9366914ce23cb5d749cbd5976"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.apache.wink/wink-json4j",
      "externalRefs": [],
      "homepage": "http://svn.apache.org/viewvc/wink/trunk",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "org.apache.wink:wink-json4j",
      "originator": "NOASSERTION",
      "packageFileName": "wink-json4j-1.4.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.hk2hk2-api-2.5.0-b42",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "7eb62159655b1eb4f9405b54e885ec34448932b5"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.hk2/hk2-api",
      "externalRefs": [],
      "homepage": "https://java.net/projects/hk2/sources/git/show",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "name": "org.glassfish.hk2:hk2-api",
      "originator": "NOASSERTION",
      "packageFileName": "hk2-api-2.5.0-b42.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.5.0-b42"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.hk2.externaljavax.inject-2.5.0-b42",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "e6f36ce29afa000709357426d001585764f27f17"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.hk2.external/javax.inject",
      "externalRefs": [],
      "homepage": "https://java.net/projects/hk2/sources/git/show",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "name": "org.glassfish.hk2.external:javax.inject",
      "originator": "NOASSERTION",
      "packageFileName": "javax.inject-2.5.0-b42.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.5.0-b42"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-javax.injectjavax.inject-1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "e492f5bd948cf6084da68df6d121bbe7a99cfecc"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/javax.inject/javax.inject",
      "externalRefs": [],
      "homepage": "http://code.google.com/p/atinject/source/checkout",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "javax.inject:javax.inject",
      "originator": "NOASSERTION",
      "packageFileName": "javax.inject-1.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-javax.ws.rsjavax.ws.rs-api-2.1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "67fb50709c512571c862b189b9b42c6378e4376d"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/javax.ws.rs/javax.ws.rs-api",
      "externalRefs": [],
      "homepage": "https://www.eclipse.org/org/foundation",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "javax.ws.rs:javax.ws.rs-api",
      "originator": "NOASSERTION",
      "packageFileName": "javax.ws.rs-api-2.1.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.javassistjavassist-3.22.0-CR2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "161175fb8423d70c20fcfc412f4b251b3a561637"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.javassist/javassist",
      "externalRefs": [],
      "homepage": "http://www.javassist.org",
      "licenseConcluded": "MPL-1.1",
      "licenseDeclared": "MPL-1.1",
      "name": "org.javassist:javassist",
      "originator": "NOASSERTION",
      "packageFileName": "javassist-3.22.0-CR2.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "3.22.0-CR2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.corejersey-client-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "d48f4f23e41a78024734bd5c22584a2e09987236"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.core/jersey-client",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.core:jersey-client",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-client-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.hk2hk2-utils-2.5.0-b42",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "847353da8c82e59d1db9ae4eff27349d0fab13da"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.hk2/hk2-utils",
      "externalRefs": [],
      "homepage": "https://java.net/projects/hk2/sources/git/show",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "name": "org.glassfish.hk2:hk2-utils",
      "originator": "NOASSERTION",
      "packageFileName": "hk2-utils-2.5.0-b42.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.5.0-b42"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.hk2osgi-resource-locator-1.0.1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "8d0d7b201c0a03633ffa67b7fe1399c97172bf1e"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.hk2/osgi-resource-locator",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.hk2:osgi-resource-locator",
      "originator": "NOASSERTION",
      "packageFileName": "osgi-resource-locator-1.0.1.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1.0.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.apache.derbyderby-10.8.2.2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "71ce8c484105e02966676c3ade3a64a7bb17a467"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.apache.derby/derby",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2018-1313",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2015-1832",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2022-46337",
          "referenceType": "advisory"
        }
      ],
      "homepage": "https://github.com/apache/maven-apache-parent",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "org.apache.derby:derby",
      "originator": "NOASSERTION",
      "packageFileName": "derby-10.8.2.2.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "10.8.2.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-log4jlog4j-1.2.16",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "afab5f16c00d17fdd9c93d5c2dfeef0104b97664"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/log4j/log4j",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2019-17571",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2022-23305",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2022-23302",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2021-4104",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2022-23307",
          "referenceType": "advisory"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "CVE-2023-26464",
          "referenceType": "advisory"
        }
      ],
      "homepage": "http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "name": "log4j:log4j",
      "originator": "NOASSERTION",
      "packageFileName": "log4j-1.2.16.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "1.2.16"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-org.glassfish.jersey.mediajersey-media-jaxb-2.27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "42a17f082ef932fe2f6094fe20fcb9d9b60a9388"
        }
      ],
      "copyrightText": "",
      "description": "",
      "downloadLocation": "https://search.maven.org/artifact/org.glassfish.jersey.media/jersey-media-jaxb",
      "externalRefs": [],
      "homepage": "https://projects.eclipse.org/projects/ee4j.jersey",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "name": "org.glassfish.jersey.media:jersey-media-jaxb",
      "originator": "NOASSERTION",
      "packageFileName": "jersey-media-jaxb-2.27.jar",
      "supplier": "NOASSERTION",
      "versionInfo": "2.27"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-com.hynnetcommons-lang3-3.3.2"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.containersjersey-container-servlet-2.27"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.hk2hk2-locator-2.5.0-b42"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.hk2.externalaopalliance-repackaged-2.5.0-b42"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.corejersey-common-2.27"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-javax.validationvalidation-api-1.1.0.Final"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.corejersey-server-2.27"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-commons-codeccommons-codec-1.6"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-commons-langcommons-lang-2.5"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.injectjersey-hk2-2.27"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-javax.annotationjavax.annotation-api-1.2"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.containersjersey-container-servlet-core-2.27"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.apache.winkwink-json4j-1.4"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.hk2hk2-api-2.5.0-b42"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.hk2.externaljavax.inject-2.5.0-b42"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-javax.injectjavax.inject-1"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-javax.ws.rsjavax.ws.rs-api-2.1"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.javassistjavassist-3.22.0-CR2"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.corejersey-client-2.27"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.hk2hk2-utils-2.5.0-b42"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.hk2osgi-resource-locator-1.0.1"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.apache.derbyderby-10.8.2.2"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-log4jlog4j-1.2.16"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-PACKAGE-org.glassfish.jersey.mediajersey-media-jaxb-2.27"
    }
  ]
}