From 7c03a03ceadd029be942fe04ff89be156580fe30 Mon Sep 17 00:00:00 2001 From: Ruben Romero Montes Date: Wed, 11 Jun 2025 09:31:31 +0200 Subject: [PATCH] feat: upgrade to spdx-jackson-java 2.x lib Signed-off-by: Ruben Romero Montes --- pom.xml | 2 +- .../exception/SbomValidationException.java | 4 + .../exception/SpdxValidationException.java | 2 +- .../backend/sbom/spdx/SpdxParser.java | 17 +- .../backend/sbom/spdx/SpdxWrapper.java | 42 +- .../backend/sbom/SpdxWrapperTest.java | 20 +- src/test/resources/spdx/reverse-sbom.json | 446 +++++++++--------- src/test/resources/spdx/shared-deps-sbom.json | 22 +- .../resources/spdx/versions/SPDX-2.2.json | 9 +- 9 files changed, 297 insertions(+), 267 deletions(-) diff --git a/pom.xml b/pom.xml index 8c575ba5..7488a73e 100644 --- a/pom.xml +++ b/pom.xml @@ -50,7 +50,7 @@ 1.0.5 7.8.0 - 1.1.9.1 + 2.0.2 4.11.1 3.4.2 1.4.2 diff --git a/src/main/java/com/redhat/exhort/config/exception/SbomValidationException.java b/src/main/java/com/redhat/exhort/config/exception/SbomValidationException.java index d4680628..901ab700 100644 --- a/src/main/java/com/redhat/exhort/config/exception/SbomValidationException.java +++ b/src/main/java/com/redhat/exhort/config/exception/SbomValidationException.java @@ -23,4 +23,8 @@ public abstract class SbomValidationException extends ClientDetailedException { public SbomValidationException(String message, String detail) { super(message, detail); } + + public SbomValidationException(String message, Exception e) { + super(message, e); + } } diff --git a/src/main/java/com/redhat/exhort/config/exception/SpdxValidationException.java b/src/main/java/com/redhat/exhort/config/exception/SpdxValidationException.java index b70c7c84..c32c88f8 100644 --- a/src/main/java/com/redhat/exhort/config/exception/SpdxValidationException.java +++ b/src/main/java/com/redhat/exhort/config/exception/SpdxValidationException.java @@ -31,6 +31,6 @@ public SpdxValidationException(String expectedVersion, List errors) { } public SpdxValidationException(String message, Exception e) { - this(message + ": " + e.getMessage()); + super(message + ": " + e.getMessage(), e); } } diff --git a/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxParser.java b/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxParser.java index 3ae6fad5..4c71465b 100644 --- a/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxParser.java +++ b/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxParser.java @@ -27,11 +27,11 @@ import java.util.Set; import java.util.stream.Collectors; +import org.spdx.core.InvalidSPDXAnalysisException; import org.spdx.jacksonstore.MultiFormatStore; import org.spdx.jacksonstore.MultiFormatStore.Format; -import org.spdx.library.InvalidSPDXAnalysisException; -import org.spdx.library.model.SpdxPackage; -import org.spdx.library.model.enumerations.RelationshipType; +import org.spdx.library.model.v2.SpdxPackage; +import org.spdx.library.model.v2.enumerations.RelationshipType; import org.spdx.storage.simple.InMemSpdxStore; import com.redhat.exhort.api.PackageRef; @@ -44,7 +44,6 @@ public class SpdxParser extends SbomParser { @Override protected DependencyTree buildTree(InputStream input) { - var inputStore = new MultiFormatStore(new InMemSpdxStore(), Format.JSON_PRETTY); var wrapper = new SpdxWrapper(inputStore, input); var deps = buildDeps(wrapper); @@ -117,19 +116,19 @@ private void createPackageLinks( packages.stream().anyMatch(pkg -> pkg.getId().equals(relatedId)); switch (RelationshipDirection.fromRelationshipType(rel.getRelationshipType())) { - case FORWARD: + case FORWARD -> { if (shouldIndexRelated) { addLink(links, pkgId, relatedId); } else { addLink(links, pkgId, null); } - break; - case BACKWARDS: + } + case BACKWARDS -> { if (shouldIndexRelated) { addLink(links, relatedId, pkgId); } - break; - case IGNORED: + } + default -> {} } } catch (InvalidSPDXAnalysisException e) { throw new SpdxValidationException( diff --git a/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxWrapper.java b/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxWrapper.java index 360f0d32..7f898266 100644 --- a/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxWrapper.java +++ b/src/main/java/com/redhat/exhort/integration/backend/sbom/spdx/SpdxWrapper.java @@ -24,13 +24,14 @@ import java.util.Optional; import java.util.stream.Collectors; +import org.spdx.core.InvalidSPDXAnalysisException; +import org.spdx.core.TypedValue; import org.spdx.jacksonstore.MultiFormatStore; -import org.spdx.library.InvalidSPDXAnalysisException; -import org.spdx.library.SpdxConstants; -import org.spdx.library.model.ExternalRef; -import org.spdx.library.model.SpdxDocument; -import org.spdx.library.model.SpdxPackage; -import org.spdx.library.model.TypedValue; +import org.spdx.library.SpdxModelFactory; +import org.spdx.library.model.v2.ExternalRef; +import org.spdx.library.model.v2.SpdxConstantsCompatV2; +import org.spdx.library.model.v2.SpdxDocument; +import org.spdx.library.model.v2.SpdxPackage; import com.redhat.exhort.api.PackageRef; import com.redhat.exhort.config.exception.SpdxValidationException; @@ -41,16 +42,23 @@ public class SpdxWrapper { private MultiFormatStore inputStore; private SpdxDocument doc; - private String uri; + private String docUri; private Collection packages; + static { + SpdxModelFactory.init(); + } + public SpdxWrapper(MultiFormatStore inputStore, InputStream input) throws SpdxValidationException { this.inputStore = inputStore; try { this.inputStore.deSerialize(input, false); - this.uri = inputStore.getDocumentUris().get(0); - this.doc = new SpdxDocument(inputStore, uri, null, false); + var uris = inputStore.getDocumentUris(); + if (uris != null && !uris.isEmpty()) { + this.docUri = uris.iterator().next(); + } + this.doc = new SpdxDocument(inputStore, docUri, null, false); var version = doc.getSpecVersion(); var verify = doc.verify(version); @@ -111,9 +119,17 @@ public Collection getPackages() { return this.packages; } + public SpdxPackage getPackageByUri(String uri) { + try { + return new SpdxPackage(inputStore, docUri, uri.substring(docUri.length() + 1), null, false); + } catch (InvalidSPDXAnalysisException e) { + throw new SpdxValidationException("Unable to create SpdxPackage for URI: " + uri, e); + } + } + public SpdxPackage getPackageById(String id) { try { - return new SpdxPackage(inputStore, uri, id, null, false); + return new SpdxPackage(inputStore, docUri, id, null, false); } catch (InvalidSPDXAnalysisException e) { throw new SpdxValidationException("Unable to create SpdxPackage for id: " + id, e); } @@ -122,9 +138,9 @@ public SpdxPackage getPackageById(String id) { private Collection parsePackages() throws InvalidSPDXAnalysisException { var docName = doc.getName(); return inputStore - .getAllItems(uri, SpdxConstants.CLASS_SPDX_PACKAGE) - .map(TypedValue::getId) - .map(this::getPackageById) + .getAllItems(docUri, SpdxConstantsCompatV2.CLASS_SPDX_PACKAGE) + .map(TypedValue::getObjectUri) + .map(this::getPackageByUri) .filter(this::hasPurl) .filter(p -> !packageHasName(p, docName)) .collect(Collectors.toList()); diff --git a/src/test/java/com/redhat/exhort/integration/backend/sbom/SpdxWrapperTest.java b/src/test/java/com/redhat/exhort/integration/backend/sbom/SpdxWrapperTest.java index 0ff9d23f..f0b77e8c 100644 --- a/src/test/java/com/redhat/exhort/integration/backend/sbom/SpdxWrapperTest.java +++ b/src/test/java/com/redhat/exhort/integration/backend/sbom/SpdxWrapperTest.java @@ -26,10 +26,10 @@ import org.junit.jupiter.api.Test; import org.junit.jupiter.params.ParameterizedTest; import org.junit.jupiter.params.provider.ValueSource; +import org.spdx.core.InvalidSPDXAnalysisException; import org.spdx.jacksonstore.MultiFormatStore; import org.spdx.jacksonstore.MultiFormatStore.Format; -import org.spdx.library.InvalidSPDXAnalysisException; -import org.spdx.library.Version; +import org.spdx.library.model.v2.Version; import org.spdx.storage.simple.InMemSpdxStore; import com.redhat.exhort.config.exception.SpdxValidationException; @@ -55,11 +55,15 @@ void testVersions(String version) throws InvalidSPDXAnalysisException, IOExcepti @Test void testInvalidDocument() { - assertThrows( - SpdxValidationException.class, - () -> - new SpdxWrapper( - inputStore, - this.getClass().getClassLoader().getResourceAsStream("cyclonedx/empty-sbom.json"))); + var err = + assertThrows( + SpdxValidationException.class, + () -> + new SpdxWrapper( + inputStore, + this.getClass() + .getClassLoader() + .getResourceAsStream("cyclonedx/empty-sbom.json"))); + assertNotNull(err.getMessage()); } } diff --git a/src/test/resources/spdx/reverse-sbom.json b/src/test/resources/spdx/reverse-sbom.json index c3689be9..2aeb4116 100644 --- a/src/test/resources/spdx/reverse-sbom.json +++ b/src/test/resources/spdx/reverse-sbom.json @@ -204,7 +204,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "libsolv", "originator": "NOASSERTION", "packageFileName": "libsolv-0.7.20-4.el8_7.x86_64.rpm", @@ -270,7 +270,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libcap-ng", "originator": "NOASSERTION", "packageFileName": "libcap-ng-0.7.11-1.el8.x86_64.rpm", @@ -292,7 +292,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "filesystem", "originator": "NOASSERTION", "packageFileName": "filesystem-3.8-6.el8.aarch64.rpm", @@ -314,7 +314,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "(LGPLV3+ OR GPLV2+) AND GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "libksba", "originator": "NOASSERTION", "packageFileName": "libksba-1.3.5-8.el8_6.aarch64.rpm", @@ -336,7 +336,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "chkconfig", "originator": "NOASSERTION", "packageFileName": "chkconfig-1.19.1-1.el8.aarch64.rpm", @@ -358,7 +358,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV2+ AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "gawk", "originator": "NOASSERTION", "packageFileName": "gawk-4.2.1-4.el8.aarch64.rpm", @@ -380,7 +380,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "OPENSSL AND ASL-2.0", + "licenseDeclared": "LGPL-2.0-only", "name": "openssl-libs", "originator": "NOASSERTION", "packageFileName": "openssl-libs-1.1.1k-9.el8_7.aarch64.rpm", @@ -402,7 +402,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libssh", "originator": "NOASSERTION", "packageFileName": "libssh-0.9.6-3.el8.aarch64.rpm", @@ -424,7 +424,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "rsync", "originator": "NOASSERTION", "packageFileName": "rsync-3.1.3-19.el8_7.1.x86_64.rpm", @@ -446,7 +446,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "readline", "originator": "NOASSERTION", "packageFileName": "readline-7.0-10.el8.aarch64.rpm", @@ -468,7 +468,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "bash", "originator": "NOASSERTION", "packageFileName": "bash-4.4.20-4.el8_6.aarch64.rpm", @@ -490,7 +490,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "readline", "originator": "NOASSERTION", "packageFileName": "readline-7.0-10.el8.x86_64.rpm", @@ -534,7 +534,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libgpg-error", "originator": "NOASSERTION", "packageFileName": "libgpg-error-1.31-1.el8.aarch64.rpm", @@ -578,7 +578,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "microdnf", "originator": "NOASSERTION", "packageFileName": "microdnf-3.8.0-2.el8.x86_64.rpm", @@ -600,7 +600,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "basesystem", "originator": "NOASSERTION", "packageFileName": "basesystem-11-5.el8.noarch.rpm", @@ -622,7 +622,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND GPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "shadow-utils", "originator": "NOASSERTION", "packageFileName": "shadow-utils-4.6-17.el8.aarch64.rpm", @@ -644,7 +644,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "librepo", "originator": "NOASSERTION", "packageFileName": "librepo-1.14.2-3.el8.x86_64.rpm", @@ -688,7 +688,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "gnupg2", "originator": "NOASSERTION", "packageFileName": "gnupg2-2.2.20-3.el8_6.aarch64.rpm", @@ -710,7 +710,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "info", "originator": "NOASSERTION", "packageFileName": "info-6.5-7.el8.aarch64.rpm", @@ -732,7 +732,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "microdnf", "originator": "NOASSERTION", "packageFileName": "microdnf-3.8.0-2.el8.aarch64.rpm", @@ -754,7 +754,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND LGPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "libnsl2", "originator": "NOASSERTION", "packageFileName": "libnsl2-1.2.0-2.20180605git4a062cf.el8.x86_64.rpm", @@ -776,7 +776,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libattr", "originator": "NOASSERTION", "packageFileName": "libattr-2.4.48-3.el8.aarch64.rpm", @@ -798,7 +798,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "librepo", "originator": "NOASSERTION", "packageFileName": "librepo-1.14.2-3.el8.aarch64.rpm", @@ -820,7 +820,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND BSD AND PUBLIC-DOMAIN", + "licenseDeclared": "BSD-3-Clause", "name": "libxcrypt", "originator": "NOASSERTION", "packageFileName": "libxcrypt-4.1.1-6.el8.aarch64.rpm", @@ -864,7 +864,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "psmisc", "originator": "NOASSERTION", "packageFileName": "psmisc-23.1-5.el8.x86_64.rpm", @@ -886,7 +886,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV3+ WITH EXCEPTIONS AND GPLV2+ WITH EXCEPTIONS AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libstdc++", "originator": "NOASSERTION", "packageFileName": "libstdc++-8.5.0-16.el8_7.x86_64.rpm", @@ -908,7 +908,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libgpg-error", "originator": "NOASSERTION", "packageFileName": "libgpg-error-1.31-1.el8.x86_64.rpm", @@ -930,7 +930,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+,-LGPLV2+,-MIT", + "licenseDeclared": "LGPL-3.0-or-later", "name": "gobject-introspection", "originator": "NOASSERTION", "packageFileName": "gobject-introspection-1.56.1-1.el8.aarch64.rpm", @@ -952,7 +952,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "grep", "originator": "NOASSERTION", "packageFileName": "grep-3.1-6.el8.aarch64.rpm", @@ -974,7 +974,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-2.0-or-later", "name": "keyutils-libs", "originator": "NOASSERTION", "packageFileName": "keyutils-libs-1.5.10-9.el8.aarch64.rpm", @@ -996,7 +996,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "libarchive", "originator": "NOASSERTION", "packageFileName": "libarchive-3.3.3-4.el8.x86_64.rpm", @@ -1018,7 +1018,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "xz-libs", "originator": "NOASSERTION", "packageFileName": "xz-libs-5.2.4-4.el8_6.x86_64.rpm", @@ -1040,7 +1040,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND GPLV3+", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-3.0-or-later", "name": "libassuan", "originator": "NOASSERTION", "packageFileName": "libassuan-2.5.1-3.el8.x86_64.rpm", @@ -1062,7 +1062,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libpeas", "originator": "NOASSERTION", "packageFileName": "libpeas-1.22.0-6.el8.x86_64.rpm", @@ -1084,7 +1084,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GFDL", + "licenseDeclared": "LGPL-3.0-or-later AND GFDL-1.3-or-later", "name": "gzip", "originator": "NOASSERTION", "packageFileName": "gzip-1.9-13.el8_5.x86_64.rpm", @@ -1106,7 +1106,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "p11-kit", "originator": "NOASSERTION", "packageFileName": "p11-kit-0.23.22-1.el8.x86_64.rpm", @@ -1150,7 +1150,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND GPLV3+", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-3.0-or-later", "name": "libassuan", "originator": "NOASSERTION", "packageFileName": "libassuan-2.5.1-3.el8.aarch64.rpm", @@ -1172,7 +1172,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libusbx", "originator": "NOASSERTION", "packageFileName": "libusbx-1.0.23-4.el8.x86_64.rpm", @@ -1194,7 +1194,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libutempter", "originator": "NOASSERTION", "packageFileName": "libutempter-1.1.6-14.el8.aarch64.rpm", @@ -1216,7 +1216,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2 OR BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libbpf", "originator": "NOASSERTION", "packageFileName": "libbpf-0.5.0-1.el8.x86_64.rpm", @@ -1282,7 +1282,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "(LGPLV3+ OR GPLV2+) AND GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "libksba", "originator": "NOASSERTION", "packageFileName": "libksba-1.3.5-9.el8_7.x86_64.rpm", @@ -1304,7 +1304,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ OR LGPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "elfutils-libelf", "originator": "NOASSERTION", "packageFileName": "elfutils-libelf-0.187-4.el8.aarch64.rpm", @@ -1326,7 +1326,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-common", "originator": "NOASSERTION", "packageFileName": "glibc-common-2.28-189.5.el8_6.x86_64.rpm", @@ -1370,7 +1370,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND GPLV2", + "licenseDeclared": "BSD-3-Clause", "name": "libzstd", "originator": "NOASSERTION", "packageFileName": "libzstd-1.4.4-1.el8.aarch64.rpm", @@ -1392,7 +1392,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "bzip2-libs", "originator": "NOASSERTION", "packageFileName": "bzip2-libs-1.0.6-26.el8.x86_64.rpm", @@ -1436,7 +1436,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "tzdata", "originator": "NOASSERTION", "packageFileName": "tzdata-2022g-1.el8.noarch.rpm", @@ -1458,7 +1458,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-minimal-langpack", "originator": "NOASSERTION", "packageFileName": "glibc-minimal-langpack-2.28-211.el8.x86_64.rpm", @@ -1480,7 +1480,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "cracklib", "originator": "NOASSERTION", "packageFileName": "cracklib-2.9.6-15.el8.aarch64.rpm", @@ -1502,7 +1502,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "rpm", "originator": "NOASSERTION", "packageFileName": "rpm-4.14.3-24.el8_7.x86_64.rpm", @@ -1524,7 +1524,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND LGPLV2+", + "licenseDeclared": "LGPL-3.0-or-later AND LGPL-2.0-or-later", "name": "libtasn1", "originator": "NOASSERTION", "packageFileName": "libtasn1-4.13-4.el8_7.aarch64.rpm", @@ -1568,7 +1568,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "pcre", "originator": "NOASSERTION", "packageFileName": "pcre-8.42-6.el8.x86_64.rpm", @@ -1590,7 +1590,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV3+ WITH EXCEPTIONS AND GPLV2+ WITH EXCEPTIONS AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libgcc", "originator": "NOASSERTION", "packageFileName": "libgcc-8.5.0-16.el8_7.x86_64.rpm", @@ -1634,7 +1634,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libgcrypt", "originator": "NOASSERTION", "packageFileName": "libgcrypt-1.8.5-7.el8_6.aarch64.rpm", @@ -1656,7 +1656,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libpeas", "originator": "NOASSERTION", "packageFileName": "libpeas-1.22.0-6.el8.aarch64.rpm", @@ -1678,7 +1678,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND LGPLV2 AND SLEEPYCAT", + "licenseDeclared": "LGPL-3.0-only", "name": "libdb-utils", "originator": "NOASSERTION", "packageFileName": "libdb-utils-5.3.28-42.el8_4.aarch64.rpm", @@ -1700,7 +1700,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libgcrypt", "originator": "NOASSERTION", "packageFileName": "libgcrypt-1.8.5-7.el8_6.x86_64.rpm", @@ -1722,7 +1722,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "chkconfig", "originator": "NOASSERTION", "packageFileName": "chkconfig-1.19.1-1.el8.x86_64.rpm", @@ -1744,7 +1744,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "libselinux", "originator": "NOASSERTION", "packageFileName": "libselinux-2.9-5.el8.aarch64.rpm", @@ -1766,7 +1766,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ OR LGPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "libunistring", "originator": "NOASSERTION", "packageFileName": "libunistring-0.9.9-3.el8.x86_64.rpm", @@ -1788,7 +1788,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD OR GPLV2", + "licenseDeclared": "BSD-3-Clause", "name": "libcap", "originator": "NOASSERTION", "packageFileName": "libcap-2.48-2.el8.x86_64.rpm", @@ -1832,7 +1832,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "setup", "originator": "NOASSERTION", "packageFileName": "setup-2.12.2-6.el8.noarch.rpm", @@ -1854,7 +1854,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "findutils", "originator": "NOASSERTION", "packageFileName": "findutils-4.6.0-20.el8.x86_64.rpm", @@ -1876,7 +1876,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libattr", "originator": "NOASSERTION", "packageFileName": "libattr-2.4.48-3.el8.x86_64.rpm", @@ -1898,7 +1898,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "xz-libs", "originator": "NOASSERTION", "packageFileName": "xz-libs-5.2.4-4.el8_6.aarch64.rpm", @@ -1920,7 +1920,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libssh-config", "originator": "NOASSERTION", "packageFileName": "libssh-config-0.9.6-3.el8.noarch.rpm", @@ -1942,7 +1942,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libutempter", "originator": "NOASSERTION", "packageFileName": "libutempter-1.1.6-14.el8.x86_64.rpm", @@ -1964,7 +1964,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND GPLV2", + "licenseDeclared": "BSD-3-Clause", "name": "libzstd", "originator": "NOASSERTION", "packageFileName": "libzstd-1.4.4-1.el8.x86_64.rpm", @@ -1986,7 +1986,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "filesystem", "originator": "NOASSERTION", "packageFileName": "filesystem-3.8-6.el8.x86_64.rpm", @@ -2008,7 +2008,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc", "originator": "NOASSERTION", "packageFileName": "glibc-2.28-189.5.el8_6.aarch64.rpm", @@ -2030,7 +2030,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libfdisk", "originator": "NOASSERTION", "packageFileName": "libfdisk-2.32.1-39.el8_7.x86_64.rpm", @@ -2052,7 +2052,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "tar", "originator": "NOASSERTION", "packageFileName": "tar-1.30-6.el8_7.1.x86_64.rpm", @@ -2074,7 +2074,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "coreutils-single", "originator": "NOASSERTION", "packageFileName": "coreutils-single-8.30-13.el8.aarch64.rpm", @@ -2118,7 +2118,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "audit-libs", "originator": "NOASSERTION", "packageFileName": "audit-libs-3.0.7-4.el8.x86_64.rpm", @@ -2140,7 +2140,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libacl", "originator": "NOASSERTION", "packageFileName": "libacl-2.2.53-1.el8.aarch64.rpm", @@ -2162,7 +2162,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsemanage", "originator": "NOASSERTION", "packageFileName": "libsemanage-2.9-9.el8_6.aarch64.rpm", @@ -2184,7 +2184,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsmartcols", "originator": "NOASSERTION", "packageFileName": "libsmartcols-2.32.1-39.el8_7.aarch64.rpm", @@ -2206,7 +2206,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libdnf", "originator": "NOASSERTION", "packageFileName": "libdnf-0.63.0-11.1.el8.aarch64.rpm", @@ -2250,7 +2250,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD OR GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "libcap", "originator": "NOASSERTION", "packageFileName": "libcap-2.48-4.el8.aarch64.rpm", @@ -2272,7 +2272,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND LGPLV2+", + "licenseDeclared": "LGPL-3.0-or-later AND LGPL-2.0-or-later", "name": "gnutls", "originator": "NOASSERTION", "packageFileName": "gnutls-3.6.16-5.el8_6.x86_64.rpm", @@ -2294,7 +2294,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-2.0-or-later", "name": "keyutils-libs", "originator": "NOASSERTION", "packageFileName": "keyutils-libs-1.5.10-9.el8.x86_64.rpm", @@ -2316,7 +2316,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libmount", "originator": "NOASSERTION", "packageFileName": "libmount-2.32.1-39.el8_7.x86_64.rpm", @@ -2360,7 +2360,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "libuuid", "originator": "NOASSERTION", "packageFileName": "libuuid-2.32.1-39.el8_7.x86_64.rpm", @@ -2382,7 +2382,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libacl", "originator": "NOASSERTION", "packageFileName": "libacl-2.2.53-1.el8.x86_64.rpm", @@ -2404,7 +2404,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "(GPLV2+ OR LGPLV3+) AND GPLV3+", + "licenseDeclared": "LGPL-3.0-only", "name": "libidn2", "originator": "NOASSERTION", "packageFileName": "libidn2-2.2.0-1.el8.aarch64.rpm", @@ -2448,7 +2448,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND GPLV3+", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-3.0-or-later", "name": "gpgme", "originator": "NOASSERTION", "packageFileName": "gpgme-1.13.1-11.el8.x86_64.rpm", @@ -2492,8 +2492,8 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "OPENLDAP", - "name": "openldap", + "licenseDeclared": "OLDAP-2.8", + "name": "OLDAP-2.8", "originator": "NOASSERTION", "packageFileName": "openldap-2.4.46-18.el8.aarch64.rpm", "supplier": "Organization: Red Hat", @@ -2514,7 +2514,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "setup", "originator": "NOASSERTION", "packageFileName": "setup-2.12.2-7.el8.noarch.rpm", @@ -2536,7 +2536,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "libsolv", "originator": "NOASSERTION", "packageFileName": "libsolv-0.7.20-4.el8_7.aarch64.rpm", @@ -2558,7 +2558,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libfdisk", "originator": "NOASSERTION", "packageFileName": "libfdisk-2.32.1-39.el8_7.aarch64.rpm", @@ -2580,7 +2580,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD WITH ADVERTISING", + "licenseDeclared": "BSD-3-Clause", "name": "cyrus-sasl-lib", "originator": "NOASSERTION", "packageFileName": "cyrus-sasl-lib-2.1.27-6.el8_5.aarch64.rpm", @@ -2602,7 +2602,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD OR GPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "libpwquality", "originator": "NOASSERTION", "packageFileName": "libpwquality-1.4.4-5.el8.aarch64.rpm", @@ -2624,7 +2624,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND PUBLIC-DOMAIN", + "licenseDeclared": "LGPL-2.0-or-later AND LicenseRef-PublicDomain", "name": "iproute", "originator": "NOASSERTION", "packageFileName": "iproute-5.18.0-1.el8.aarch64.rpm", @@ -2712,7 +2712,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsigsegv", "originator": "NOASSERTION", "packageFileName": "libsigsegv-2.11-5.el8.x86_64.rpm", @@ -2734,7 +2734,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "tzdata", "originator": "NOASSERTION", "packageFileName": "tzdata-2022d-1.el8.noarch.rpm", @@ -2778,7 +2778,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "libselinux", "originator": "NOASSERTION", "packageFileName": "libselinux-2.9-6.el8.aarch64.rpm", @@ -2800,7 +2800,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "bash", "originator": "NOASSERTION", "packageFileName": "bash-4.4.20-4.el8_6.x86_64.rpm", @@ -2822,7 +2822,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GFDL", + "licenseDeclared": "LGPL-3.0-or-later AND GFDL-1.3-or-later", "name": "gzip", "originator": "NOASSERTION", "packageFileName": "gzip-1.9-13.el8_5.aarch64.rpm", @@ -2844,7 +2844,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc", "originator": "NOASSERTION", "packageFileName": "glibc-2.28-211.el8.x86_64.rpm", @@ -2866,7 +2866,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "glib2", "originator": "NOASSERTION", "packageFileName": "glib2-2.56.4-159.el8.x86_64.rpm", @@ -2888,7 +2888,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "file-libs", "originator": "NOASSERTION", "packageFileName": "file-libs-5.33-21.el8.x86_64.rpm", @@ -2910,7 +2910,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "findutils", "originator": "NOASSERTION", "packageFileName": "findutils-4.6.0-20.el8.aarch64.rpm", @@ -2932,7 +2932,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND LGPLV2+ WITH EXCEPTIONS", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-2.0-or-later WITH EXCEPTIONS", "name": "rpm-libs", "originator": "NOASSERTION", "packageFileName": "rpm-libs-4.14.3-24.el8_7.aarch64.rpm", @@ -2954,7 +2954,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "ZLIB AND BOOST", + "licenseDeclared": "Zlib AND BSL-1.0", "name": "zlib", "originator": "NOASSERTION", "packageFileName": "zlib-1.2.11-21.el8_7.aarch64.rpm", @@ -2976,7 +2976,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "redhat-release", "originator": "NOASSERTION", "packageFileName": "redhat-release-8.6-0.1.el8.aarch64.rpm", @@ -2998,7 +2998,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "rsync", "originator": "NOASSERTION", "packageFileName": "rsync-3.1.3-19.el8_7.1.aarch64.rpm", @@ -3020,7 +3020,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "langpacks-en", "originator": "NOASSERTION", "packageFileName": "langpacks-en-1.0-12.el8.noarch.rpm", @@ -3042,7 +3042,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "librhsm", "originator": "NOASSERTION", "packageFileName": "librhsm-0.0.3-4.el8.aarch64.rpm", @@ -3064,7 +3064,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV3+ WITH EXCEPTIONS AND GPLV2+ WITH EXCEPTIONS AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libgcc", "originator": "NOASSERTION", "packageFileName": "libgcc-8.5.0-16.el8_7.aarch64.rpm", @@ -3086,7 +3086,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "coreutils-single", "originator": "NOASSERTION", "packageFileName": "coreutils-single-8.30-13.el8.x86_64.rpm", @@ -3108,7 +3108,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "redhat-release", "originator": "NOASSERTION", "packageFileName": "redhat-release-8.7-0.3.el8.x86_64.rpm", @@ -3130,7 +3130,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND MIT", + "licenseDeclared": "LGPL-2.0-or-later AND MIT", "name": "systemd-libs", "originator": "NOASSERTION", "packageFileName": "systemd-libs-239-68.el8_7.2.aarch64.rpm", @@ -3152,7 +3152,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libcap-ng", "originator": "NOASSERTION", "packageFileName": "libcap-ng-0.7.11-1.el8.aarch64.rpm", @@ -3196,7 +3196,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libmnl", "originator": "NOASSERTION", "packageFileName": "libmnl-1.0.4-6.el8.aarch64.rpm", @@ -3240,7 +3240,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libblkid", "originator": "NOASSERTION", "packageFileName": "libblkid-2.32.1-39.el8_7.x86_64.rpm", @@ -3262,7 +3262,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "p11-kit", "originator": "NOASSERTION", "packageFileName": "p11-kit-0.23.22-1.el8.aarch64.rpm", @@ -3284,7 +3284,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "json-glib", "originator": "NOASSERTION", "packageFileName": "json-glib-1.4.4-1.el8.x86_64.rpm", @@ -3306,7 +3306,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-common", "originator": "NOASSERTION", "packageFileName": "glibc-common-2.28-211.el8.aarch64.rpm", @@ -3328,7 +3328,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "lz4-libs", "originator": "NOASSERTION", "packageFileName": "lz4-libs-1.8.3-3.el8_4.aarch64.rpm", @@ -3350,7 +3350,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND LGPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "libnsl2", "originator": "NOASSERTION", "packageFileName": "libnsl2-1.2.0-2.20180605git4a062cf.el8.aarch64.rpm", @@ -3372,7 +3372,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ OR LGPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "elfutils-libelf", "originator": "NOASSERTION", "packageFileName": "elfutils-libelf-0.187-4.el8.x86_64.rpm", @@ -3394,7 +3394,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV3+ OR GPLV2+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "nettle", "originator": "NOASSERTION", "packageFileName": "nettle-3.4.1-7.el8.aarch64.rpm", @@ -3416,7 +3416,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV3+ AND GPLV3+ AND GFDL", + "licenseDeclared": "LGPL-3.0-or-later", "name": "mpfr", "originator": "NOASSERTION", "packageFileName": "mpfr-3.1.6-1.el8.aarch64.rpm", @@ -3438,7 +3438,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND MIT", + "licenseDeclared": "LGPL-2.0-or-later AND MIT", "name": "systemd-libs", "originator": "NOASSERTION", "packageFileName": "systemd-libs-239-68.el8_7.4.x86_64.rpm", @@ -3460,7 +3460,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsemanage", "originator": "NOASSERTION", "packageFileName": "libsemanage-2.9-9.el8_6.x86_64.rpm", @@ -3482,7 +3482,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV3+ WITH EXCEPTIONS AND GPLV2+ WITH EXCEPTIONS AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libgcc", "originator": "NOASSERTION", "packageFileName": "libgcc-8.5.0-10.1.el8_6.x86_64.rpm", @@ -3504,7 +3504,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsepol", "originator": "NOASSERTION", "packageFileName": "libsepol-2.9-3.el8.aarch64.rpm", @@ -3526,7 +3526,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "sed", "originator": "NOASSERTION", "packageFileName": "sed-4.5-5.el8.x86_64.rpm", @@ -3548,7 +3548,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2 AND GPLV2+ AND LGPLV2+ AND BSD WITH ADVERTISING AND PUBLIC-DOMAIN", + "licenseDeclared": "BSD-3-Clause", "name": "util-linux", "originator": "NOASSERTION", "packageFileName": "util-linux-2.32.1-39.el8_7.x86_64.rpm", @@ -3570,7 +3570,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV3+ OR GPLV2+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "gmp", "originator": "NOASSERTION", "packageFileName": "gmp-6.1.2-10.el8.aarch64.rpm", @@ -3592,7 +3592,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2 OR BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libbpf", "originator": "NOASSERTION", "packageFileName": "libbpf-0.5.0-1.el8.aarch64.rpm", @@ -3658,7 +3658,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV3+ WITH EXCEPTIONS AND GPLV2+ WITH EXCEPTIONS AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libstdc++", "originator": "NOASSERTION", "packageFileName": "libstdc++-8.5.0-16.el8_7.aarch64.rpm", @@ -3680,7 +3680,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "cracklib-dicts", "originator": "NOASSERTION", "packageFileName": "cracklib-dicts-2.9.6-15.el8.x86_64.rpm", @@ -3724,7 +3724,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "pcre2", "originator": "NOASSERTION", "packageFileName": "pcre2-10.32-3.el8_6.aarch64.rpm", @@ -3768,7 +3768,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-common", "originator": "NOASSERTION", "packageFileName": "glibc-common-2.28-211.el8.x86_64.rpm", @@ -3790,7 +3790,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libssh", "originator": "NOASSERTION", "packageFileName": "libssh-0.9.6-3.el8.x86_64.rpm", @@ -3812,7 +3812,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ OR LGPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "libunistring", "originator": "NOASSERTION", "packageFileName": "libunistring-0.9.9-3.el8.aarch64.rpm", @@ -3834,7 +3834,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "rootfiles", "originator": "NOASSERTION", "packageFileName": "rootfiles-8.1-22.el8.noarch.rpm", @@ -3856,7 +3856,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "grep", "originator": "NOASSERTION", "packageFileName": "grep-3.1-6.el8.x86_64.rpm", @@ -3878,7 +3878,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND LGPLV2 AND SLEEPYCAT", + "licenseDeclared": "LGPL-3.0-only", "name": "libdb", "originator": "NOASSERTION", "packageFileName": "libdb-5.3.28-42.el8_4.aarch64.rpm", @@ -3900,7 +3900,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "libselinux", "originator": "NOASSERTION", "packageFileName": "libselinux-2.9-6.el8.x86_64.rpm", @@ -3922,7 +3922,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "bzip2-libs", "originator": "NOASSERTION", "packageFileName": "bzip2-libs-1.0.6-26.el8.aarch64.rpm", @@ -3988,7 +3988,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-minimal-langpack", "originator": "NOASSERTION", "packageFileName": "glibc-minimal-langpack-2.28-189.5.el8_6.aarch64.rpm", @@ -4010,7 +4010,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-minimal-langpack", "originator": "NOASSERTION", "packageFileName": "glibc-minimal-langpack-2.28-189.5.el8_6.x86_64.rpm", @@ -4032,7 +4032,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV3+ OR GPLV2+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "nettle", "originator": "NOASSERTION", "packageFileName": "nettle-3.4.1-7.el8.x86_64.rpm", @@ -4054,7 +4054,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "libarchive", "originator": "NOASSERTION", "packageFileName": "libarchive-3.3.3-4.el8.aarch64.rpm", @@ -4076,7 +4076,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "psmisc", "originator": "NOASSERTION", "packageFileName": "psmisc-23.1-5.el8.aarch64.rpm", @@ -4098,7 +4098,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "lz4-libs", "originator": "NOASSERTION", "packageFileName": "lz4-libs-1.8.3-3.el8_4.x86_64.rpm", @@ -4120,7 +4120,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "sqlite-libs", "originator": "NOASSERTION", "packageFileName": "sqlite-libs-3.26.0-17.el8_7.x86_64.rpm", @@ -4142,7 +4142,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "(GPLV2+ OR LGPLV3+) AND GPLV3+", + "licenseDeclared": "LGPL-3.0-only", "name": "libidn2", "originator": "NOASSERTION", "packageFileName": "libidn2-2.2.0-1.el8.x86_64.rpm", @@ -4164,7 +4164,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "OPENSSL AND ASL-2.0", + "licenseDeclared": "LGPL-2.0-only", "name": "openssl-libs", "originator": "NOASSERTION", "packageFileName": "openssl-libs-1.1.1k-9.el8_7.x86_64.rpm", @@ -4186,7 +4186,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libdnf", "originator": "NOASSERTION", "packageFileName": "libdnf-0.63.0-11.1.el8.x86_64.rpm", @@ -4274,7 +4274,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "(LGPLV3+ OR GPLV2+) AND GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "libksba", "originator": "NOASSERTION", "packageFileName": "libksba-1.3.5-8.el8_6.x86_64.rpm", @@ -4296,7 +4296,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "SISSL AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libtirpc", "originator": "NOASSERTION", "packageFileName": "libtirpc-1.1.4-8.el8.x86_64.rpm", @@ -4340,7 +4340,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND GPLV3+", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-3.0-or-later", "name": "gpgme", "originator": "NOASSERTION", "packageFileName": "gpgme-1.13.1-11.el8.aarch64.rpm", @@ -4362,7 +4362,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libblkid", "originator": "NOASSERTION", "packageFileName": "libblkid-2.32.1-39.el8_7.aarch64.rpm", @@ -4384,7 +4384,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "sed", "originator": "NOASSERTION", "packageFileName": "sed-4.5-5.el8.aarch64.rpm", @@ -4406,7 +4406,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libmnl", "originator": "NOASSERTION", "packageFileName": "libmnl-1.0.4-6.el8.x86_64.rpm", @@ -4450,7 +4450,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "redhat-release", "originator": "NOASSERTION", "packageFileName": "redhat-release-8.7-0.3.el8.aarch64.rpm", @@ -4472,7 +4472,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "(LGPLV3+ OR GPLV2+) AND GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "libksba", "originator": "NOASSERTION", "packageFileName": "libksba-1.3.5-9.el8_7.aarch64.rpm", @@ -4494,7 +4494,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "tar", "originator": "NOASSERTION", "packageFileName": "tar:2-1.30-6.el8_7.1.aarch64.rpm", @@ -4516,7 +4516,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsepol", "originator": "NOASSERTION", "packageFileName": "libsepol-2.9-3.el8.x86_64.rpm", @@ -4560,7 +4560,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libmount", "originator": "NOASSERTION", "packageFileName": "libmount-2.32.1-39.el8_7.aarch64.rpm", @@ -4582,7 +4582,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV3+ WITH EXCEPTIONS AND GPLV2+ WITH EXCEPTIONS AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libgcc", "originator": "NOASSERTION", "packageFileName": "libgcc-8.5.0-10.1.el8_6.aarch64.rpm", @@ -4648,7 +4648,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc", "originator": "NOASSERTION", "packageFileName": "glibc-2.28-211.el8.aarch64.rpm", @@ -4692,7 +4692,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "npth", "originator": "NOASSERTION", "packageFileName": "npth-1.5-4.el8.aarch64.rpm", @@ -4714,7 +4714,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND GPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "pam", "originator": "NOASSERTION", "packageFileName": "pam-1.3.1-22.el8.aarch64.rpm", @@ -4736,7 +4736,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV3+ OR GPLV2+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "gmp", "originator": "NOASSERTION", "packageFileName": "gmp-6.1.2-10.el8.x86_64.rpm", @@ -4758,7 +4758,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "MPLV2.0", + "licenseDeclared": "MPL-2.0", "name": "publicsuffix-list-dafsa", "originator": "NOASSERTION", "packageFileName": "publicsuffix-list-dafsa-20180723-1.el8.noarch.rpm", @@ -4780,7 +4780,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "glib2", "originator": "NOASSERTION", "packageFileName": "glib2-2.56.4-159.el8.aarch64.rpm", @@ -4802,7 +4802,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD OR GPLV2", + "licenseDeclared": "BSD-3-Clause", "name": "libcap", "originator": "NOASSERTION", "packageFileName": "libcap-2.48-4.el8.x86_64.rpm", @@ -4824,7 +4824,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND GPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "shadow-utils", "originator": "NOASSERTION", "packageFileName": "shadow-utils-4.6-17.el8.x86_64.rpm", @@ -4846,7 +4846,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "librhsm", "originator": "NOASSERTION", "packageFileName": "librhsm-0.0.3-4.el8.x86_64.rpm", @@ -4890,7 +4890,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "info", "originator": "NOASSERTION", "packageFileName": "info-6.5-7.el8.x86_64.rpm", @@ -4912,7 +4912,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "file-libs", "originator": "NOASSERTION", "packageFileName": "file-libs-5.33-21.el8.aarch64.rpm", @@ -4934,7 +4934,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "sqlite-libs", "originator": "NOASSERTION", "packageFileName": "sqlite-libs-3.26.0-17.el8_7.aarch64.rpm", @@ -4978,7 +4978,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "SISSL AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "libtirpc", "originator": "NOASSERTION", "packageFileName": "libtirpc-1.1.4-8.el8.aarch64.rpm", @@ -5000,7 +5000,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "rpm", "originator": "NOASSERTION", "packageFileName": "rpm-4.14.3-24.el8_7.aarch64.rpm", @@ -5044,7 +5044,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc", "originator": "NOASSERTION", "packageFileName": "glibc-2.28-189.5.el8_6.x86_64.rpm", @@ -5066,7 +5066,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "coreutils-single", "originator": "NOASSERTION", "packageFileName": "coreutils-single-8.30-12.el8.x86_64.rpm", @@ -5088,7 +5088,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND LGPLV2+ WITH EXCEPTIONS", + "licenseDeclared": "LGPL-2.0-or-later AND LGPL-2.0-or-later WITH EXCEPTIONS", "name": "rpm-libs", "originator": "NOASSERTION", "packageFileName": "rpm-libs-4.14.3-24.el8_7.x86_64.rpm", @@ -5132,7 +5132,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD WITH ADVERTISING", + "licenseDeclared": "BSD-3-Clause", "name": "cyrus-sasl-lib", "originator": "NOASSERTION", "packageFileName": "cyrus-sasl-lib-2.1.27-6.el8_5.x86_64.rpm", @@ -5154,7 +5154,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "cracklib", "originator": "NOASSERTION", "packageFileName": "cracklib-2.9.6-15.el8.x86_64.rpm", @@ -5176,7 +5176,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "npth", "originator": "NOASSERTION", "packageFileName": "npth-1.5-4.el8.x86_64.rpm", @@ -5198,7 +5198,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "libselinux", "originator": "NOASSERTION", "packageFileName": "libselinux-2.9-5.el8.x86_64.rpm", @@ -5220,7 +5220,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND GPLV2+ AND LGPLV2+ AND BSD", + "licenseDeclared": "BSD-3-Clause", "name": "gawk", "originator": "NOASSERTION", "packageFileName": "gawk-4.2.1-4.el8.x86_64.rpm", @@ -5264,7 +5264,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "libuuid", "originator": "NOASSERTION", "packageFileName": "libuuid-2.32.1-39.el8_7.aarch64.rpm", @@ -5286,7 +5286,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "p11-kit-trust", "originator": "NOASSERTION", "packageFileName": "p11-kit-trust-0.23.22-1.el8.aarch64.rpm", @@ -5308,7 +5308,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND LGPLV2+", + "licenseDeclared": "LGPL-3.0-or-later AND LGPL-2.0-or-later", "name": "libtasn1", "originator": "NOASSERTION", "packageFileName": "libtasn1-4.13-4.el8_7.x86_64.rpm", @@ -5330,7 +5330,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsigsegv", "originator": "NOASSERTION", "packageFileName": "libsigsegv-2.11-5.el8.aarch64.rpm", @@ -5352,7 +5352,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-minimal-langpack", "originator": "NOASSERTION", "packageFileName": "glibc-minimal-langpack-2.28-211.el8.aarch64.rpm", @@ -5374,7 +5374,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+ AND PUBLIC-DOMAIN", + "licenseDeclared": "LGPL-2.0-or-later AND LicenseRef-PublicDomain", "name": "iproute", "originator": "NOASSERTION", "packageFileName": "iproute-5.18.0-1.el8.x86_64.rpm", @@ -5418,7 +5418,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "PUBLIC-DOMAIN", + "licenseDeclared": "LicenseRef-PublicDomain", "name": "ca-certificates", "originator": "NOASSERTION", "packageFileName": "ca-certificates-2022.2.54-80.2.el8_6.noarch.rpm", @@ -5440,7 +5440,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND LGPLV2 AND SLEEPYCAT", + "licenseDeclared": "LGPL-3.0-only", "name": "libdb", "originator": "NOASSERTION", "packageFileName": "libdb-5.3.28-42.el8_4.x86_64.rpm", @@ -5462,7 +5462,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "gnupg2", "originator": "NOASSERTION", "packageFileName": "gnupg2-2.2.20-3.el8_6.x86_64.rpm", @@ -5484,7 +5484,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND MIT", + "licenseDeclared": "LGPL-2.0-or-later AND MIT", "name": "systemd-libs", "originator": "NOASSERTION", "packageFileName": "systemd-libs-239-68.el8_7.2.x86_64.rpm", @@ -5506,7 +5506,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "audit-libs", "originator": "NOASSERTION", "packageFileName": "audit-libs-3.0.7-4.el8.aarch64.rpm", @@ -5528,7 +5528,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV3+ AND GPLV3+ AND GFDL", + "licenseDeclared": "LGPL-3.0-or-later", "name": "mpfr", "originator": "NOASSERTION", "packageFileName": "mpfr-3.1.6-1.el8.x86_64.rpm", @@ -5550,7 +5550,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2+,-LGPLV2+,-MIT", + "licenseDeclared": "LGPL-3.0-or-later", "name": "gobject-introspection", "originator": "NOASSERTION", "packageFileName": "gobject-introspection-1.56.1-1.el8.x86_64.rpm", @@ -5572,7 +5572,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD OR GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "libcap", "originator": "NOASSERTION", "packageFileName": "libcap-2.48-2.el8.aarch64.rpm", @@ -5594,7 +5594,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "p11-kit-trust", "originator": "NOASSERTION", "packageFileName": "p11-kit-trust-0.23.22-1.el8.x86_64.rpm", @@ -5616,7 +5616,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2 AND GPLV2+ AND LGPLV2+ AND BSD WITH ADVERTISING AND PUBLIC-DOMAIN", + "licenseDeclared": "BSD-3-Clause", "name": "util-linux", "originator": "NOASSERTION", "packageFileName": "util-linux-2.32.1-39.el8_7.aarch64.rpm", @@ -5638,7 +5638,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "cracklib-dicts", "originator": "NOASSERTION", "packageFileName": "cracklib-dicts-2.9.6-15.el8.aarch64.rpm", @@ -5660,7 +5660,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "ZLIB AND BOOST", + "licenseDeclared": "Zlib AND BSL-1.0", "name": "zlib", "originator": "NOASSERTION", "packageFileName": "zlib-1.2.11-21.el8_7.x86_64.rpm", @@ -5682,7 +5682,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND MIT", + "licenseDeclared": "LGPL-2.0-or-later AND MIT", "name": "systemd-libs", "originator": "NOASSERTION", "packageFileName": "systemd-libs-239-68.el8_7.4.aarch64.rpm", @@ -5704,7 +5704,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND BSD AND PUBLIC-DOMAIN", + "licenseDeclared": "BSD-3-Clause", "name": "libxcrypt", "originator": "NOASSERTION", "packageFileName": "libxcrypt-4.1.1-6.el8.x86_64.rpm", @@ -5726,7 +5726,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libsmartcols", "originator": "NOASSERTION", "packageFileName": "libsmartcols-2.32.1-39.el8_7.x86_64.rpm", @@ -5748,7 +5748,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV2", + "licenseDeclared": "LGPL-2.0-only", "name": "redhat-release", "originator": "NOASSERTION", "packageFileName": "redhat-release-8.6-0.1.el8.x86_64.rpm", @@ -5792,7 +5792,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "OPENSSL AND ASL-2.0", + "licenseDeclared": "LGPL-2.0-only", "name": "openssl-libs", "originator": "NOASSERTION", "packageFileName": "openssl-libs-1.1.1k-7.el8_6.aarch64.rpm", @@ -5814,7 +5814,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "pcre2", "originator": "NOASSERTION", "packageFileName": "pcre2-10.32-3.el8_6.x86_64.rpm", @@ -5858,7 +5858,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+ AND LGPLV2+ WITH EXCEPTIONS AND GPLV2+ AND GPLV2+ WITH EXCEPTIONS AND BSD AND INNER-NET AND ISC AND PUBLIC-DOMAIN AND GFDL", + "licenseDeclared": "BSD-3-Clause", "name": "glibc-common", "originator": "NOASSERTION", "packageFileName": "glibc-common-2.28-189.5.el8_6.aarch64.rpm", @@ -5880,7 +5880,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD OR GPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "libpwquality", "originator": "NOASSERTION", "packageFileName": "libpwquality-1.4.4-5.el8.x86_64.rpm", @@ -5902,7 +5902,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD", + "licenseDeclared": "MIT", "name": "pcre", "originator": "NOASSERTION", "packageFileName": "pcre-8.42-6.el8.aarch64.rpm", @@ -5924,7 +5924,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+", + "licenseDeclared": "LGPL-3.0-or-later", "name": "coreutils-single", "originator": "NOASSERTION", "packageFileName": "coreutils-single-8.30-12.el8.aarch64.rpm", @@ -5946,7 +5946,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "libusbx", "originator": "NOASSERTION", "packageFileName": "libusbx-1.0.23-4.el8.aarch64.rpm", @@ -5968,7 +5968,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "GPLV3+ AND LGPLV2+", + "licenseDeclared": "LGPL-3.0-or-later AND LGPL-2.0-or-later", "name": "gnutls", "originator": "NOASSERTION", "packageFileName": "gnutls-3.6.16-5.el8_6.aarch64.rpm", @@ -5990,7 +5990,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND LGPLV2 AND SLEEPYCAT", + "licenseDeclared": "LGPL-3.0-only", "name": "libdb-utils", "originator": "NOASSERTION", "packageFileName": "libdb-utils-5.3.28-42.el8_4.x86_64.rpm", @@ -6012,7 +6012,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "json-glib", "originator": "NOASSERTION", "packageFileName": "json-glib-1.4.4-1.el8.aarch64.rpm", @@ -6034,7 +6034,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "BSD AND GPLV2+", + "licenseDeclared": "BSD-3-Clause", "name": "pam", "originator": "NOASSERTION", "packageFileName": "pam-1.3.1-22.el8.x86_64.rpm", @@ -6078,7 +6078,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "OPENSSL AND ASL-2.0", + "licenseDeclared": "LGPL-2.0-only", "name": "openssl-libs", "originator": "NOASSERTION", "packageFileName": "openssl-libs-1.1.1k-7.el8_6.x86_64.rpm", @@ -6122,8 +6122,8 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "OPENLDAP", - "name": "openldap", + "licenseDeclared": "OLDAP-2.8", + "name": "OLDAP-2.8", "originator": "NOASSERTION", "packageFileName": "openldap-2.4.46-18.el8.x86_64.rpm", "supplier": "Organization: Red Hat", @@ -6144,7 +6144,7 @@ "homepage": "NOASSERTION", "licenseComments": "Licensing information is automatically generated and may be incomplete or incorrect.", "licenseConcluded": "NOASSERTION", - "licenseDeclared": "LGPLV2+", + "licenseDeclared": "LGPL-2.0-or-later", "name": "crypto-policies", "originator": "NOASSERTION", "packageFileName": "crypto-policies-20211116-1.gitae470d6.el8.noarch.rpm", diff --git a/src/test/resources/spdx/shared-deps-sbom.json b/src/test/resources/spdx/shared-deps-sbom.json index 674fc027..856da2b2 100644 --- a/src/test/resources/spdx/shared-deps-sbom.json +++ b/src/test/resources/spdx/shared-deps-sbom.json @@ -233,7 +233,7 @@ "versionInfo": "v1.0.0" }, { - "SPDXID": "SPDXRef-pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", + "SPDXID": "SPDXRef-pkg-golang-github.com-aws-aws-sdk-go-v1.43.31", "annotations": [ { "annotationDate": "2023-07-27T15:55:52Z", @@ -263,7 +263,7 @@ "versionInfo": "v1.43.31" }, { - "SPDXID": "SPDXRef-pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "SPDXID": "SPDXRef-pkg-golang-github.com-jmespath-go-jmespath-v0.4.0", "annotations": [ { "annotationDate": "2023-07-27T15:55:52Z", @@ -293,7 +293,7 @@ "versionInfo": "v0.4.0" }, { - "SPDXID": "SPDXRef-pkg:golang/golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd", + "SPDXID": "SPDXRef-pkg-golang-golang.org-x-net-v0.0.0-20220127200216-cd36cc0744dd", "annotations": [ { "annotationDate": "2023-07-27T15:55:52Z", @@ -347,32 +347,32 @@ { "spdxElementId": "SPDXRef-pkg-golang-golang.org-x-sys-v0.0.0-20210112080510-489259a85091-type-module", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-pkg:golang/github.com/jmespath/go-jmespath@v0.4.0" + "relatedSpdxElement": "SPDXRef-pkg-golang-github.com-jmespath-go-jmespath-v0.4.0" }, { "spdxElementId": "SPDXRef-pkg-golang-golang.org-x-sys-v0.0.0-20210112080510-489259a85091-type-module", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-pkg:golang/golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd" + "relatedSpdxElement": "SPDXRef-pkg-golang-golang.org-x-net-v0.0.0-20220127200216-cd36cc0744dd" }, { - "spdxElementId": "SPDXRef-pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", + "spdxElementId": "SPDXRef-pkg-golang-github.com-aws-aws-sdk-go-v1.43.31", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-pkg:golang/github.com/jmespath/go-jmespath@v0.4.0" + "relatedSpdxElement": "SPDXRef-pkg-golang-github.com-jmespath-go-jmespath-v0.4.0" }, { - "spdxElementId": "SPDXRef-pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", + "spdxElementId": "SPDXRef-pkg-golang-github.com-aws-aws-sdk-go-v1.43.31", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-pkg:golang/golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd" + "relatedSpdxElement": "SPDXRef-pkg-golang-golang.org-x-net-v0.0.0-20220127200216-cd36cc0744dd" }, { "spdxElementId": "SPDXRef-pkg-golang-github.com-jpillora-backoff-v1.0.0-type-module", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-pkg:golang/github.com/jmespath/go-jmespath@v0.4.0" + "relatedSpdxElement": "SPDXRef-pkg-golang-github.com-jmespath-go-jmespath-v0.4.0" }, { "spdxElementId": "SPDXRef-pkg-golang-github.com-jpillora-backoff-v1.0.0-type-module", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-pkg:golang/golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd" + "relatedSpdxElement": "SPDXRef-pkg-golang-golang.org-x-net-v0.0.0-20220127200216-cd36cc0744dd" } ] } \ No newline at end of file diff --git a/src/test/resources/spdx/versions/SPDX-2.2.json b/src/test/resources/spdx/versions/SPDX-2.2.json index bb3cc6b7..a6298c8b 100644 --- a/src/test/resources/spdx/versions/SPDX-2.2.json +++ b/src/test/resources/spdx/versions/SPDX-2.2.json @@ -10,7 +10,7 @@ }, "name": "com.example demo-0.0.1-SNAPSHOT", "dataLicense": "CC0-1.0", - "documentNamespace": "http://spdx.org/spdxdocs/com.example demo-0.0.1-SNAPSHOT-ac697a31-6e06-45b4-ae9d-6b8ece911bf1", + "documentNamespace": "http://spdx.org/spdxdocs/com.example", "packages": [ { "SPDXID": "SPDXRef-pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final?type=jar", @@ -9013,5 +9013,12 @@ "supplier": "NOASSERTION", "versionInfo": "2.13.7.Final" } + ], + "relationships": [ + { + "spdxElementId": "SPDXRef-DOCUMENT", + "relationshipType": "DESCRIBES", + "relatedSpdxElement": "SPDXRef-pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final?type=jar" + } ] } \ No newline at end of file