xref: /aosp_15_r20/external/spdx-tools/examples/sample-docs/xml/SPDXXMLExample-v2.2.spdx.xml (revision ba677afa8f67bb56cbc794f4d0e378e0da058e16)
1*ba677afaSXin Li<?xml version='1.0' encoding='UTF-8'?>
2*ba677afaSXin Li<Document>
3*ba677afaSXin Li  <SPDXID>SPDXRef-DOCUMENT</SPDXID>
4*ba677afaSXin Li  <spdxVersion>SPDX-2.2</spdxVersion>
5*ba677afaSXin Li  <creationInfo>
6*ba677afaSXin Li    <comment>This package has been shipped in source and binary form.
7*ba677afaSXin LiThe binaries were created with gcc 4.5.1 and expect to link to
8*ba677afaSXin Licompatible system run time libraries.</comment>
9*ba677afaSXin Li    <created>2010-01-29T18:30:22Z</created>
10*ba677afaSXin Li    <creators>Tool: LicenseFind-1.0</creators>
11*ba677afaSXin Li    <creators>Organization: ExampleCodeInspect ()</creators>
12*ba677afaSXin Li    <creators>Person: Jane Doe ()</creators>
13*ba677afaSXin Li    <licenseListVersion>3.9</licenseListVersion>
14*ba677afaSXin Li  </creationInfo>
15*ba677afaSXin Li  <name>SPDX-Tools-v2.0</name>
16*ba677afaSXin Li  <dataLicense>CC0-1.0</dataLicense>
17*ba677afaSXin Li  <comment>This document was created using SPDX 2.0 using licenses from the web site.</comment>
18*ba677afaSXin Li  <externalDocumentRefs>
19*ba677afaSXin Li    <externalDocumentId>DocumentRef-spdx-tool-1.2</externalDocumentId>
20*ba677afaSXin Li    <checksum>
21*ba677afaSXin Li      <algorithm>SHA1</algorithm>
22*ba677afaSXin Li      <checksumValue>d6a770ba38583ed4bb4525bd96e50461655d2759</checksumValue>
23*ba677afaSXin Li    </checksum>
24*ba677afaSXin Li    <spdxDocument>http://spdx.org/spdxdocs/spdx-tools-v1.2-3F2504E0-4F89-41D3-9A0C-0305E82C3301</spdxDocument>
25*ba677afaSXin Li  </externalDocumentRefs>
26*ba677afaSXin Li  <hasExtractedLicensingInfos>
27*ba677afaSXin Li    <licenseId>LicenseRef-1</licenseId>
28*ba677afaSXin Li    <extractedText>/*
29*ba677afaSXin Li * (c) Copyright 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Hewlett-Packard Development Company, LP
30*ba677afaSXin Li * All rights reserved.
31*ba677afaSXin Li *
32*ba677afaSXin Li * Redistribution and use in source and binary forms, with or without
33*ba677afaSXin Li * modification, are permitted provided that the following conditions
34*ba677afaSXin Li * are met:
35*ba677afaSXin Li * 1. Redistributions of source code must retain the above copyright
36*ba677afaSXin Li *    notice, this list of conditions and the following disclaimer.
37*ba677afaSXin Li * 2. Redistributions in binary form must reproduce the above copyright
38*ba677afaSXin Li *    notice, this list of conditions and the following disclaimer in the
39*ba677afaSXin Li *    documentation and/or other materials provided with the distribution.
40*ba677afaSXin Li * 3. The name of the author may not be used to endorse or promote products
41*ba677afaSXin Li *    derived from this software without specific prior written permission.
42*ba677afaSXin Li *
43*ba677afaSXin Li * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
44*ba677afaSXin Li * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
45*ba677afaSXin Li * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
46*ba677afaSXin Li * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
47*ba677afaSXin Li * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
48*ba677afaSXin Li * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
49*ba677afaSXin Li * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
50*ba677afaSXin Li * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
51*ba677afaSXin Li * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
52*ba677afaSXin Li * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
53*ba677afaSXin Li*/</extractedText>
54*ba677afaSXin Li  </hasExtractedLicensingInfos>
55*ba677afaSXin Li  <hasExtractedLicensingInfos>
56*ba677afaSXin Li    <licenseId>LicenseRef-2</licenseId>
57*ba677afaSXin Li    <extractedText>This package includes the GRDDL parser developed by Hewlett Packard under the following license:
58*ba677afaSXin Li� Copyright 2007 Hewlett-Packard Development Company, LP
59*ba677afaSXin Li
60*ba677afaSXin LiRedistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
61*ba677afaSXin Li
62*ba677afaSXin LiRedistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
63*ba677afaSXin LiRedistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
64*ba677afaSXin LiThe name of the author may not be used to endorse or promote products derived from this software without specific prior written permission.
65*ba677afaSXin LiTHIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</extractedText>
66*ba677afaSXin Li  </hasExtractedLicensingInfos>
67*ba677afaSXin Li  <hasExtractedLicensingInfos>
68*ba677afaSXin Li    <licenseId>LicenseRef-4</licenseId>
69*ba677afaSXin Li    <extractedText>/*
70*ba677afaSXin Li * (c) Copyright 2009 University of Bristol
71*ba677afaSXin Li * All rights reserved.
72*ba677afaSXin Li *
73*ba677afaSXin Li * Redistribution and use in source and binary forms, with or without
74*ba677afaSXin Li * modification, are permitted provided that the following conditions
75*ba677afaSXin Li * are met:
76*ba677afaSXin Li * 1. Redistributions of source code must retain the above copyright
77*ba677afaSXin Li *    notice, this list of conditions and the following disclaimer.
78*ba677afaSXin Li * 2. Redistributions in binary form must reproduce the above copyright
79*ba677afaSXin Li *    notice, this list of conditions and the following disclaimer in the
80*ba677afaSXin Li *    documentation and/or other materials provided with the distribution.
81*ba677afaSXin Li * 3. The name of the author may not be used to endorse or promote products
82*ba677afaSXin Li *    derived from this software without specific prior written permission.
83*ba677afaSXin Li *
84*ba677afaSXin Li * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
85*ba677afaSXin Li * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
86*ba677afaSXin Li * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
87*ba677afaSXin Li * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
88*ba677afaSXin Li * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
89*ba677afaSXin Li * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
90*ba677afaSXin Li * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
91*ba677afaSXin Li * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
92*ba677afaSXin Li * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
93*ba677afaSXin Li * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
94*ba677afaSXin Li*/</extractedText>
95*ba677afaSXin Li  </hasExtractedLicensingInfos>
96*ba677afaSXin Li  <hasExtractedLicensingInfos>
97*ba677afaSXin Li    <licenseId>LicenseRef-Beerware-4.2</licenseId>
98*ba677afaSXin Li    <comment>The beerware license has a couple of other standard variants.</comment>
99*ba677afaSXin Li    <extractedText>"THE BEER-WARE LICENSE" (Revision 42):
100*ba677afaSXin Li[email protected] wrote this file. As long as you retain this notice you
101*ba677afaSXin Lican do whatever you want with this stuff. If we meet some day, and you think this stuff is worth it, you can buy me a beer in return Poul-Henning Kamp</extractedText>
102*ba677afaSXin Li    <name>Beer-Ware License (Version 42)</name>
103*ba677afaSXin Li    <seeAlsos>http://people.freebsd.org/~phk/</seeAlsos>
104*ba677afaSXin Li  </hasExtractedLicensingInfos>
105*ba677afaSXin Li  <hasExtractedLicensingInfos>
106*ba677afaSXin Li    <licenseId>LicenseRef-3</licenseId>
107*ba677afaSXin Li    <comment>This is tye CyperNeko License</comment>
108*ba677afaSXin Li    <extractedText>The CyberNeko Software License, Version 1.0
109*ba677afaSXin Li
110*ba677afaSXin Li
111*ba677afaSXin Li(C) Copyright 2002-2005, Andy Clark.  All rights reserved.
112*ba677afaSXin Li
113*ba677afaSXin LiRedistribution and use in source and binary forms, with or without
114*ba677afaSXin Limodification, are permitted provided that the following conditions
115*ba677afaSXin Liare met:
116*ba677afaSXin Li
117*ba677afaSXin Li1. Redistributions of source code must retain the above copyright
118*ba677afaSXin Li   notice, this list of conditions and the following disclaimer.
119*ba677afaSXin Li
120*ba677afaSXin Li2. Redistributions in binary form must reproduce the above copyright
121*ba677afaSXin Li   notice, this list of conditions and the following disclaimer in
122*ba677afaSXin Li   the documentation and/or other materials provided with the
123*ba677afaSXin Li   distribution.
124*ba677afaSXin Li
125*ba677afaSXin Li3. The end-user documentation included with the redistribution,
126*ba677afaSXin Li   if any, must include the following acknowledgment:
127*ba677afaSXin Li     "This product includes software developed by Andy Clark."
128*ba677afaSXin Li   Alternately, this acknowledgment may appear in the software itself,
129*ba677afaSXin Li   if and wherever such third-party acknowledgments normally appear.
130*ba677afaSXin Li
131*ba677afaSXin Li4. The names "CyberNeko" and "NekoHTML" must not be used to endorse
132*ba677afaSXin Li   or promote products derived from this software without prior
133*ba677afaSXin Li   written permission. For written permission, please contact
134*ba677afaSXin Li   [email protected].
135*ba677afaSXin Li
136*ba677afaSXin Li5. Products derived from this software may not be called "CyberNeko",
137*ba677afaSXin Li   nor may "CyberNeko" appear in their name, without prior written
138*ba677afaSXin Li   permission of the author.
139*ba677afaSXin Li
140*ba677afaSXin LiTHIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
141*ba677afaSXin LiWARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
142*ba677afaSXin LiOF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
143*ba677afaSXin LiDISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR OTHER CONTRIBUTORS
144*ba677afaSXin LiBE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
145*ba677afaSXin LiOR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
146*ba677afaSXin LiOF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
147*ba677afaSXin LiBUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
148*ba677afaSXin LiWHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
149*ba677afaSXin LiOR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
150*ba677afaSXin LiEVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</extractedText>
151*ba677afaSXin Li    <name>CyberNeko License</name>
152*ba677afaSXin Li    <seeAlsos>http://people.apache.org/~andyc/neko/LICENSE</seeAlsos>
153*ba677afaSXin Li    <seeAlsos>http://justasample.url.com</seeAlsos>
154*ba677afaSXin Li  </hasExtractedLicensingInfos>
155*ba677afaSXin Li  <annotations>
156*ba677afaSXin Li    <annotationDate>2010-01-29T18:30:22Z</annotationDate>
157*ba677afaSXin Li    <annotationType>OTHER</annotationType>
158*ba677afaSXin Li    <annotator>Person: Jane Doe ()</annotator>
159*ba677afaSXin Li    <comment>Document level annotation</comment>
160*ba677afaSXin Li  </annotations>
161*ba677afaSXin Li  <annotations>
162*ba677afaSXin Li    <annotationDate>2010-02-10T00:00:00Z</annotationDate>
163*ba677afaSXin Li    <annotationType>REVIEW</annotationType>
164*ba677afaSXin Li    <annotator>Person: Joe Reviewer</annotator>
165*ba677afaSXin Li    <comment>This is just an example.  Some of the non-standard licenses look like they are actually BSD 3 clause licenses</comment>
166*ba677afaSXin Li  </annotations>
167*ba677afaSXin Li  <annotations>
168*ba677afaSXin Li    <annotationDate>2011-03-13T00:00:00Z</annotationDate>
169*ba677afaSXin Li    <annotationType>REVIEW</annotationType>
170*ba677afaSXin Li    <annotator>Person: Suzanne Reviewer</annotator>
171*ba677afaSXin Li    <comment>Another example reviewer.</comment>
172*ba677afaSXin Li  </annotations>
173*ba677afaSXin Li  <documentNamespace>http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301</documentNamespace>
174*ba677afaSXin Li  <documentDescribes>SPDXRef-File</documentDescribes>
175*ba677afaSXin Li  <documentDescribes>SPDXRef-Package</documentDescribes>
176*ba677afaSXin Li  <packages>
177*ba677afaSXin Li    <SPDXID>SPDXRef-Package</SPDXID>
178*ba677afaSXin Li    <annotations>
179*ba677afaSXin Li      <annotationDate>2011-01-29T18:30:22Z</annotationDate>
180*ba677afaSXin Li      <annotationType>OTHER</annotationType>
181*ba677afaSXin Li      <annotator>Person: Package Commenter</annotator>
182*ba677afaSXin Li      <comment>Package level annotation</comment>
183*ba677afaSXin Li    </annotations>
184*ba677afaSXin Li    <attributionTexts>The GNU C Library is free software.  See the file COPYING.LIB for copying conditions, and LICENSES for notices about a few contributions that require these additional notices to be distributed.  License copyright years may be listed using range notation, e.g., 1996-2015, indicating that every year in the range, inclusive, is a copyrightable year that would otherwise be listed individually.</attributionTexts>
185*ba677afaSXin Li    <checksums>
186*ba677afaSXin Li      <algorithm>MD5</algorithm>
187*ba677afaSXin Li      <checksumValue>624c1abb3664f4b35547e7c73864ad24</checksumValue>
188*ba677afaSXin Li    </checksums>
189*ba677afaSXin Li    <checksums>
190*ba677afaSXin Li      <algorithm>SHA1</algorithm>
191*ba677afaSXin Li      <checksumValue>85ed0817af83a24ad8da68c2b5094de69833983c</checksumValue>
192*ba677afaSXin Li    </checksums>
193*ba677afaSXin Li    <checksums>
194*ba677afaSXin Li      <algorithm>SHA256</algorithm>
195*ba677afaSXin Li      <checksumValue>11b6d3ee554eedf79299905a98f9b9a04e498210b59f15094c916c91d150efcd</checksumValue>
196*ba677afaSXin Li    </checksums>
197*ba677afaSXin Li    <copyrightText>Copyright 2008-2010 John Smith</copyrightText>
198*ba677afaSXin Li    <description>The GNU C Library defines functions that are specified by the ISO C standard, as well as additional features specific to POSIX and other derivatives of the Unix operating system, and extensions specific to GNU systems.</description>
199*ba677afaSXin Li    <downloadLocation>http://ftp.gnu.org/gnu/glibc/glibc-ports-2.15.tar.gz</downloadLocation>
200*ba677afaSXin Li    <externalRefs>
201*ba677afaSXin Li      <referenceCategory>SECURITY</referenceCategory>
202*ba677afaSXin Li      <referenceLocator>cpe:2.3:a:pivotal_software:spring_framework:4.1.0:*:*:*:*:*:*:*</referenceLocator>
203*ba677afaSXin Li      <referenceType>cpe23Type</referenceType>
204*ba677afaSXin Li    </externalRefs>
205*ba677afaSXin Li    <externalRefs>
206*ba677afaSXin Li      <comment>This is the external ref for Acme</comment>
207*ba677afaSXin Li      <referenceCategory>OTHER</referenceCategory>
208*ba677afaSXin Li      <referenceLocator>acmecorp/acmenator/4.1.3-alpha</referenceLocator>
209*ba677afaSXin Li      <referenceType>http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301#LocationRef-acmeforge</referenceType>
210*ba677afaSXin Li    </externalRefs>
211*ba677afaSXin Li    <filesAnalyzed>true</filesAnalyzed>
212*ba677afaSXin Li    <hasFiles>SPDXRef-CommonsLangSrc</hasFiles>
213*ba677afaSXin Li    <hasFiles>SPDXRef-JenaLib</hasFiles>
214*ba677afaSXin Li    <hasFiles>SPDXRef-DoapSource</hasFiles>
215*ba677afaSXin Li    <homepage>http://ftp.gnu.org/gnu/glibc</homepage>
216*ba677afaSXin Li    <licenseComments>The license for this project changed with the release of version x.y.  The version of the project included here post-dates the license change.</licenseComments>
217*ba677afaSXin Li    <licenseConcluded>(LGPL-2.0-only OR LicenseRef-3)</licenseConcluded>
218*ba677afaSXin Li    <licenseDeclared>(LGPL-2.0-only AND LicenseRef-3)</licenseDeclared>
219*ba677afaSXin Li    <licenseInfoFromFiles>GPL-2.0-only</licenseInfoFromFiles>
220*ba677afaSXin Li    <licenseInfoFromFiles>LicenseRef-2</licenseInfoFromFiles>
221*ba677afaSXin Li    <licenseInfoFromFiles>LicenseRef-1</licenseInfoFromFiles>
222*ba677afaSXin Li    <name>glibc</name>
223*ba677afaSXin Li    <originator>Organization: ExampleCodeInspect ([email protected])</originator>
224*ba677afaSXin Li    <packageFileName>glibc-2.11.1.tar.gz</packageFileName>
225*ba677afaSXin Li    <packageVerificationCode>
226*ba677afaSXin Li      <packageVerificationCodeExcludedFiles>./package.spdx</packageVerificationCodeExcludedFiles>
227*ba677afaSXin Li      <packageVerificationCodeValue>d6a770ba38583ed4bb4525bd96e50461655d2758</packageVerificationCodeValue>
228*ba677afaSXin Li    </packageVerificationCode>
229*ba677afaSXin Li    <sourceInfo>uses glibc-2_11-branch from git://sourceware.org/git/glibc.git.</sourceInfo>
230*ba677afaSXin Li    <summary>GNU C library.</summary>
231*ba677afaSXin Li    <supplier>Person: Jane Doe ([email protected])</supplier>
232*ba677afaSXin Li    <versionInfo>2.11.1</versionInfo>
233*ba677afaSXin Li  </packages>
234*ba677afaSXin Li  <packages>
235*ba677afaSXin Li    <SPDXID>SPDXRef-fromDoap-1</SPDXID>
236*ba677afaSXin Li    <copyrightText>NOASSERTION</copyrightText>
237*ba677afaSXin Li    <downloadLocation>NOASSERTION</downloadLocation>
238*ba677afaSXin Li    <filesAnalyzed>false</filesAnalyzed>
239*ba677afaSXin Li    <homepage>http://commons.apache.org/proper/commons-lang/</homepage>
240*ba677afaSXin Li    <licenseConcluded>NOASSERTION</licenseConcluded>
241*ba677afaSXin Li    <licenseDeclared>NOASSERTION</licenseDeclared>
242*ba677afaSXin Li    <name>Apache Commons Lang</name>
243*ba677afaSXin Li  </packages>
244*ba677afaSXin Li  <packages>
245*ba677afaSXin Li    <SPDXID>SPDXRef-fromDoap-0</SPDXID>
246*ba677afaSXin Li    <copyrightText>NOASSERTION</copyrightText>
247*ba677afaSXin Li    <downloadLocation>https://search.maven.org/remotecontent?filepath=org/apache/jena/apache-jena/3.12.0/apache-jena-3.12.0.tar.gz</downloadLocation>
248*ba677afaSXin Li    <externalRefs>
249*ba677afaSXin Li      <referenceCategory>PACKAGE_MANAGER</referenceCategory>
250*ba677afaSXin Li      <referenceLocator>pkg:maven/org.apache.jena/[email protected]</referenceLocator>
251*ba677afaSXin Li      <referenceType>purl</referenceType>
252*ba677afaSXin Li    </externalRefs>
253*ba677afaSXin Li    <filesAnalyzed>false</filesAnalyzed>
254*ba677afaSXin Li    <homepage>http://www.openjena.org/</homepage>
255*ba677afaSXin Li    <licenseConcluded>NOASSERTION</licenseConcluded>
256*ba677afaSXin Li    <licenseDeclared>NOASSERTION</licenseDeclared>
257*ba677afaSXin Li    <name>Jena</name>
258*ba677afaSXin Li    <versionInfo>3.12.0</versionInfo>
259*ba677afaSXin Li  </packages>
260*ba677afaSXin Li  <packages>
261*ba677afaSXin Li    <SPDXID>SPDXRef-Saxon</SPDXID>
262*ba677afaSXin Li    <checksums>
263*ba677afaSXin Li      <algorithm>SHA1</algorithm>
264*ba677afaSXin Li      <checksumValue>85ed0817af83a24ad8da68c2b5094de69833983c</checksumValue>
265*ba677afaSXin Li    </checksums>
266*ba677afaSXin Li    <copyrightText>Copyright Saxonica Ltd</copyrightText>
267*ba677afaSXin Li    <description>The Saxon package is a collection of tools for processing XML documents.</description>
268*ba677afaSXin Li    <downloadLocation>https://sourceforge.net/projects/saxon/files/Saxon-B/8.8.0.7/saxonb8-8-0-7j.zip/download</downloadLocation>
269*ba677afaSXin Li    <filesAnalyzed>false</filesAnalyzed>
270*ba677afaSXin Li    <homepage>http://saxon.sourceforge.net/</homepage>
271*ba677afaSXin Li    <licenseComments>Other versions available for a commercial license</licenseComments>
272*ba677afaSXin Li    <licenseConcluded>MPL-1.0</licenseConcluded>
273*ba677afaSXin Li    <licenseDeclared>MPL-1.0</licenseDeclared>
274*ba677afaSXin Li    <name>Saxon</name>
275*ba677afaSXin Li    <packageFileName>saxonB-8.8.zip</packageFileName>
276*ba677afaSXin Li    <versionInfo>8.8</versionInfo>
277*ba677afaSXin Li  </packages>
278*ba677afaSXin Li  <files>
279*ba677afaSXin Li    <SPDXID>SPDXRef-DoapSource</SPDXID>
280*ba677afaSXin Li    <checksums>
281*ba677afaSXin Li      <algorithm>SHA1</algorithm>
282*ba677afaSXin Li      <checksumValue>2fd4e1c67a2d28fced849ee1bb76e7391b93eb12</checksumValue>
283*ba677afaSXin Li    </checksums>
284*ba677afaSXin Li    <copyrightText>Copyright 2010, 2011 Source Auditor Inc.</copyrightText>
285*ba677afaSXin Li    <fileContributors>Protecode Inc.</fileContributors>
286*ba677afaSXin Li    <fileContributors>SPDX Technical Team Members</fileContributors>
287*ba677afaSXin Li    <fileContributors>Open Logic Inc.</fileContributors>
288*ba677afaSXin Li    <fileContributors>Source Auditor Inc.</fileContributors>
289*ba677afaSXin Li    <fileContributors>Black Duck Software In.c</fileContributors>
290*ba677afaSXin Li    <fileName>./src/org/spdx/parser/DOAPProject.java</fileName>
291*ba677afaSXin Li    <fileTypes>SOURCE</fileTypes>
292*ba677afaSXin Li    <licenseConcluded>Apache-2.0</licenseConcluded>
293*ba677afaSXin Li    <licenseInfoInFiles>Apache-2.0</licenseInfoInFiles>
294*ba677afaSXin Li  </files>
295*ba677afaSXin Li  <files>
296*ba677afaSXin Li    <SPDXID>SPDXRef-CommonsLangSrc</SPDXID>
297*ba677afaSXin Li    <checksums>
298*ba677afaSXin Li      <algorithm>SHA1</algorithm>
299*ba677afaSXin Li      <checksumValue>c2b4e1c67a2d28fced849ee1bb76e7391b93f125</checksumValue>
300*ba677afaSXin Li    </checksums>
301*ba677afaSXin Li    <comment>This file is used by Jena</comment>
302*ba677afaSXin Li    <copyrightText>Copyright 2001-2011 The Apache Software Foundation</copyrightText>
303*ba677afaSXin Li    <fileContributors>Apache Software Foundation</fileContributors>
304*ba677afaSXin Li    <fileName>./lib-source/commons-lang3-3.1-sources.jar</fileName>
305*ba677afaSXin Li    <fileTypes>ARCHIVE</fileTypes>
306*ba677afaSXin Li    <licenseConcluded>Apache-2.0</licenseConcluded>
307*ba677afaSXin Li    <licenseInfoInFiles>Apache-2.0</licenseInfoInFiles>
308*ba677afaSXin Li    <noticeText>Apache Commons Lang
309*ba677afaSXin LiCopyright 2001-2011 The Apache Software Foundation
310*ba677afaSXin Li
311*ba677afaSXin LiThis product includes software developed by
312*ba677afaSXin LiThe Apache Software Foundation (http://www.apache.org/).
313*ba677afaSXin Li
314*ba677afaSXin LiThis product includes software from the Spring Framework,
315*ba677afaSXin Liunder the Apache License 2.0 (see: StringUtils.containsWhitespace())</noticeText>
316*ba677afaSXin Li  </files>
317*ba677afaSXin Li  <files>
318*ba677afaSXin Li    <SPDXID>SPDXRef-JenaLib</SPDXID>
319*ba677afaSXin Li    <checksums>
320*ba677afaSXin Li      <algorithm>SHA1</algorithm>
321*ba677afaSXin Li      <checksumValue>3ab4e1c67a2d28fced849ee1bb76e7391b93f125</checksumValue>
322*ba677afaSXin Li    </checksums>
323*ba677afaSXin Li    <comment>This file belongs to Jena</comment>
324*ba677afaSXin Li    <copyrightText>(c) Copyright 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Hewlett-Packard Development Company, LP</copyrightText>
325*ba677afaSXin Li    <fileContributors>Apache Software Foundation</fileContributors>
326*ba677afaSXin Li    <fileContributors>Hewlett Packard Inc.</fileContributors>
327*ba677afaSXin Li    <fileName>./lib-source/jena-2.6.3-sources.jar</fileName>
328*ba677afaSXin Li    <fileTypes>ARCHIVE</fileTypes>
329*ba677afaSXin Li    <licenseComments>This license is used by Jena</licenseComments>
330*ba677afaSXin Li    <licenseConcluded>LicenseRef-1</licenseConcluded>
331*ba677afaSXin Li    <licenseInfoInFiles>LicenseRef-1</licenseInfoInFiles>
332*ba677afaSXin Li  </files>
333*ba677afaSXin Li  <files>
334*ba677afaSXin Li    <SPDXID>SPDXRef-File</SPDXID>
335*ba677afaSXin Li    <annotations>
336*ba677afaSXin Li      <annotationDate>2011-01-29T18:30:22Z</annotationDate>
337*ba677afaSXin Li      <annotationType>OTHER</annotationType>
338*ba677afaSXin Li      <annotator>Person: File Commenter</annotator>
339*ba677afaSXin Li      <comment>File level annotation</comment>
340*ba677afaSXin Li    </annotations>
341*ba677afaSXin Li    <checksums>
342*ba677afaSXin Li      <algorithm>SHA1</algorithm>
343*ba677afaSXin Li      <checksumValue>d6a770ba38583ed4bb4525bd96e50461655d2758</checksumValue>
344*ba677afaSXin Li    </checksums>
345*ba677afaSXin Li    <checksums>
346*ba677afaSXin Li      <algorithm>MD5</algorithm>
347*ba677afaSXin Li      <checksumValue>624c1abb3664f4b35547e7c73864ad24</checksumValue>
348*ba677afaSXin Li    </checksums>
349*ba677afaSXin Li    <comment>The concluded license was taken from the package level that the file was included in.
350*ba677afaSXin LiThis information was found in the COPYING.txt file in the xyz directory.</comment>
351*ba677afaSXin Li    <copyrightText>Copyright 2008-2010 John Smith</copyrightText>
352*ba677afaSXin Li    <fileContributors>The Regents of the University of California</fileContributors>
353*ba677afaSXin Li    <fileContributors>Modified by Paul Mundt [email protected]</fileContributors>
354*ba677afaSXin Li    <fileContributors>IBM Corporation</fileContributors>
355*ba677afaSXin Li    <fileName>./package/foo.c</fileName>
356*ba677afaSXin Li    <fileTypes>SOURCE</fileTypes>
357*ba677afaSXin Li    <licenseComments>The concluded license was taken from the package level that the file was included in.</licenseComments>
358*ba677afaSXin Li    <licenseConcluded>(LGPL-2.0-only OR LicenseRef-2)</licenseConcluded>
359*ba677afaSXin Li    <licenseInfoInFiles>GPL-2.0-only</licenseInfoInFiles>
360*ba677afaSXin Li    <licenseInfoInFiles>LicenseRef-2</licenseInfoInFiles>
361*ba677afaSXin Li    <noticeText>Copyright (c) 2001 Aaron Lehmann [email protected]
362*ba677afaSXin Li
363*ba677afaSXin LiPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the �Software�), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
364*ba677afaSXin LiThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
365*ba677afaSXin Li
366*ba677afaSXin LiTHE SOFTWARE IS PROVIDED �AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.</noticeText>
367*ba677afaSXin Li  </files>
368*ba677afaSXin Li  <snippets>
369*ba677afaSXin Li    <SPDXID>SPDXRef-Snippet</SPDXID>
370*ba677afaSXin Li    <comment>This snippet was identified as significant and highlighted in this Apache-2.0 file, when a commercial scanner identified it as being derived from file foo.c in package xyz which is licensed under GPL-2.0.</comment>
371*ba677afaSXin Li    <copyrightText>Copyright 2008-2010 John Smith</copyrightText>
372*ba677afaSXin Li    <licenseComments>The concluded license was taken from package xyz, from which the snippet was copied into the current file. The concluded license information was found in the COPYING.txt file in package xyz.</licenseComments>
373*ba677afaSXin Li    <licenseConcluded>GPL-2.0-only</licenseConcluded>
374*ba677afaSXin Li    <licenseInfoInSnippets>GPL-2.0-only</licenseInfoInSnippets>
375*ba677afaSXin Li    <name>from linux kernel</name>
376*ba677afaSXin Li    <ranges>
377*ba677afaSXin Li      <endPointer>
378*ba677afaSXin Li        <offset>420</offset>
379*ba677afaSXin Li        <reference>SPDXRef-DoapSource</reference>
380*ba677afaSXin Li      </endPointer>
381*ba677afaSXin Li      <startPointer>
382*ba677afaSXin Li        <offset>310</offset>
383*ba677afaSXin Li        <reference>SPDXRef-DoapSource</reference>
384*ba677afaSXin Li      </startPointer>
385*ba677afaSXin Li    </ranges>
386*ba677afaSXin Li    <ranges>
387*ba677afaSXin Li      <endPointer>
388*ba677afaSXin Li        <lineNumber>23</lineNumber>
389*ba677afaSXin Li        <reference>SPDXRef-DoapSource</reference>
390*ba677afaSXin Li      </endPointer>
391*ba677afaSXin Li      <startPointer>
392*ba677afaSXin Li        <lineNumber>5</lineNumber>
393*ba677afaSXin Li        <reference>SPDXRef-DoapSource</reference>
394*ba677afaSXin Li      </startPointer>
395*ba677afaSXin Li    </ranges>
396*ba677afaSXin Li    <snippetFromFile>SPDXRef-DoapSource</snippetFromFile>
397*ba677afaSXin Li  </snippets>
398*ba677afaSXin Li  <relationships>
399*ba677afaSXin Li    <spdxElementId>SPDXRef-DOCUMENT</spdxElementId>
400*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-Package</relatedSpdxElement>
401*ba677afaSXin Li    <relationshipType>CONTAINS</relationshipType>
402*ba677afaSXin Li  </relationships>
403*ba677afaSXin Li  <relationships>
404*ba677afaSXin Li    <spdxElementId>SPDXRef-DOCUMENT</spdxElementId>
405*ba677afaSXin Li    <relatedSpdxElement>DocumentRef-spdx-tool-1.2:SPDXRef-ToolsElement</relatedSpdxElement>
406*ba677afaSXin Li    <relationshipType>COPY_OF</relationshipType>
407*ba677afaSXin Li  </relationships>
408*ba677afaSXin Li  <relationships>
409*ba677afaSXin Li    <spdxElementId>SPDXRef-DOCUMENT</spdxElementId>
410*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-File</relatedSpdxElement>
411*ba677afaSXin Li    <relationshipType>DESCRIBES</relationshipType>
412*ba677afaSXin Li  </relationships>
413*ba677afaSXin Li  <relationships>
414*ba677afaSXin Li    <spdxElementId>SPDXRef-DOCUMENT</spdxElementId>
415*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-Package</relatedSpdxElement>
416*ba677afaSXin Li    <relationshipType>DESCRIBES</relationshipType>
417*ba677afaSXin Li  </relationships>
418*ba677afaSXin Li  <relationships>
419*ba677afaSXin Li    <spdxElementId>SPDXRef-Package</spdxElementId>
420*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-JenaLib</relatedSpdxElement>
421*ba677afaSXin Li    <relationshipType>CONTAINS</relationshipType>
422*ba677afaSXin Li  </relationships>
423*ba677afaSXin Li  <relationships>
424*ba677afaSXin Li    <spdxElementId>SPDXRef-Package</spdxElementId>
425*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-Saxon</relatedSpdxElement>
426*ba677afaSXin Li    <relationshipType>DYNAMIC_LINK</relationshipType>
427*ba677afaSXin Li  </relationships>
428*ba677afaSXin Li  <relationships>
429*ba677afaSXin Li    <spdxElementId>SPDXRef-CommonsLangSrc</spdxElementId>
430*ba677afaSXin Li    <relatedSpdxElement>NOASSERTION</relatedSpdxElement>
431*ba677afaSXin Li    <relationshipType>GENERATED_FROM</relationshipType>
432*ba677afaSXin Li  </relationships>
433*ba677afaSXin Li  <relationships>
434*ba677afaSXin Li    <spdxElementId>SPDXRef-JenaLib</spdxElementId>
435*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-Package</relatedSpdxElement>
436*ba677afaSXin Li    <relationshipType>CONTAINS</relationshipType>
437*ba677afaSXin Li  </relationships>
438*ba677afaSXin Li  <relationships>
439*ba677afaSXin Li    <spdxElementId>SPDXRef-File</spdxElementId>
440*ba677afaSXin Li    <relatedSpdxElement>SPDXRef-fromDoap-0</relatedSpdxElement>
441*ba677afaSXin Li    <relationshipType>GENERATED_FROM</relationshipType>
442*ba677afaSXin Li  </relationships>
443*ba677afaSXin Li</Document>
444