{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.secureCodeBox/defectdojo-client-java","documentNamespace":"https://spdx.org/spdxdocs/protobom/e40e6f08-9de5-41f8-9905-320424d14ba4","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260327162657-5aefcad73c4c+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-03-30T01:23:32Z"},"packages":[{"name":"org.sonatype.central:central-publishing-maven-plugin","SPDXID":"SPDXRef-maven-org.sonatype.central-central-publishing-maven-plugin-0.8.0-75c946","versionInfo":"0.8.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.sonatype.central/central-publishing-maven-plugin@0.8.0"}]},{"name":"org.junit.jupiter:junit-jupiter","SPDXID":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.junit.jupiter/junit-jupiter"}]},{"name":"org.hamcrest:java-hamcrest","SPDXID":"SPDXRef-maven-org.hamcrest-java-hamcrest-2.0.0.0-75c946","versionInfo":"2.0.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.hamcrest/java-hamcrest@2.0.0.0"}]},{"name":"org.springframework:spring-test","SPDXID":"SPDXRef-maven-org.springframework-spring-test-5.3.28-75c946","versionInfo":"5.3.28","downloadLocation":"NOASSERTION","filesAnalyzed":false,"copyrightText":"Copyright (c) 1999-2009, OW2 Consortium \u003chttps://www.ow2.org/\u003e, Copyright (c) 2000-2011 INRIA, France Telecom, Copyright (c) 2002-2023 Pivotal, Inc., Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.springframework/spring-test@5.3.28"}]},{"name":"org.springframework:spring-web","SPDXID":"SPDXRef-maven-org.springframework-spring-web-5.3.28-75c946","versionInfo":"5.3.28","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright (c) 1999-2009, OW2 Consortium \u003chttps://www.ow2.org/\u003e, Copyright (c) 2000-2011 INRIA, France Telecom, Copyright (c) 2002-2023 Pivotal, Inc., Copyright 2002-2021 the original author or authors, Copyright 2006-2019 Joe Walnes, Henri Tremblay, Leonardo Mesquita","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.springframework/spring-web@5.3.28"}]},{"name":"com.fasterxml.jackson.core:jackson-core","SPDXID":"SPDXRef-maven-com.fasterxml.jackson.core-jackson-core-2.16.1-75c946","versionInfo":"2.16.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright (c) 2021 The, Copyright (c) 2022 Daniel Lemire. BSL, Copyright (c) 2023 Werner Randelshofer, Switzerland, Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi), Copyright 2020 Tim Buktu, Copyright 2022 Tim Buktu","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1"}]},{"name":"uk.org.webcompere:system-stubs-jupiter","SPDXID":"SPDXRef-maven-uk.org.webcompere-system-stubs-jupiter-2.1.6-75c946","versionInfo":"2.1.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/uk.org.webcompere/system-stubs-jupiter@2.1.6"}]},{"name":"org.mockito:mockito-core","SPDXID":"SPDXRef-maven-org.mockito-mockito-core-5.9.0-75c946","versionInfo":"5.9.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2007 Mockito","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.mockito/mockito-core@5.9.0"}]},{"name":"org.jacoco:jacoco-maven-plugin","SPDXID":"SPDXRef-maven-org.jacoco-jacoco-maven-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.jacoco/jacoco-maven-plugin"}]},{"name":"org.jacoco:jacoco-maven-plugin","SPDXID":"SPDXRef-maven-org.jacoco-jacoco-maven-plugin-0.8.11-75c946","versionInfo":"0.8.11","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"EPL-2.0","copyrightText":"Copyright (c) 2009, 2023 Mountainminds GmbH \u0026 Co. KG and Contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.jacoco/jacoco-maven-plugin@0.8.11"}]},{"name":"com.fasterxml.jackson.datatype:jackson-datatype-jsr310","SPDXID":"SPDXRef-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.16.1-75c946","versionInfo":"2.16.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.1"}]},{"name":"org.sonatype.central:central-publishing-maven-plugin","SPDXID":"SPDXRef-maven-org.sonatype.central-central-publishing-maven-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.sonatype.central/central-publishing-maven-plugin"}]},{"name":"org.projectlombok:lombok","SPDXID":"SPDXRef-maven-org.projectlombok-lombok-1.18.30-75c946","versionInfo":"1.18.30","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 2009-2021 The Project Lombok Authors, Copyright (c) 2000-2011 INRIA, France Telecom, Copyright (c) 2009-2021 The Project Lombok Authors, Copyright (c) 2010 Reinier Zwitserloot","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.projectlombok/lombok@1.18.30"}]},{"name":"org.apache.httpcomponents:httpclient","SPDXID":"SPDXRef-maven-org.apache.httpcomponents-httpclient-4.5.14-75c946","versionInfo":"4.5.14","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 1999-2022 The Apache Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.httpcomponents/httpclient@4.5.14"}]},{"name":"org.junit:junit-bom","SPDXID":"SPDXRef-maven-org.junit-junit-bom-5.10.1-75c946","versionInfo":"5.10.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.junit/junit-bom@5.10.1"}]},{"name":"com.fasterxml.jackson.core:jackson-databind","SPDXID":"SPDXRef-maven-com.fasterxml.jackson.core-jackson-databind-2.16.1-75c946","versionInfo":"2.16.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1"}]},{"name":"org.apache.maven.plugins:maven-gpg-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-gpg-plugin-3.1.0-75c946","versionInfo":"3.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2002-2023 The Apache Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-gpg-plugin@3.1.0"}]},{"name":"org.apache.maven.plugins:maven-gpg-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-gpg-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-gpg-plugin"}]},{"name":"com.fasterxml.jackson.core:jackson-annotations","SPDXID":"SPDXRef-maven-com.fasterxml.jackson.core-jackson-annotations-2.16.1-75c946","versionInfo":"2.16.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1"}]},{"name":"org.slf4j:slf4j-api","SPDXID":"SPDXRef-maven-org.slf4j-slf4j-api-2.0.11-75c946","versionInfo":"2.0.11","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2004-2022 QOS.ch Sarl (Switzerland)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.slf4j/slf4j-api@2.0.11"}]},{"name":"nl.jqno.equalsverifier:equalsverifier","SPDXID":"SPDXRef-maven-nl.jqno.equalsverifier-equalsverifier-3.15.6-75c946","versionInfo":"3.15.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/nl.jqno.equalsverifier/equalsverifier@3.15.6"}]},{"name":"org.mockito:mockito-junit-jupiter","SPDXID":"SPDXRef-maven-org.mockito-mockito-junit-jupiter-5.9.0-75c946","versionInfo":"5.9.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2007 Mockito","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.mockito/mockito-junit-jupiter@5.9.0"}]},{"name":"softprops/action-gh-release","SPDXID":"SPDXRef-githubactions-softprops-action-gh-release-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/softprops/action-gh-release@1.%2A.%2A"}]},{"name":"actions/setup-java","SPDXID":"SPDXRef-githubactions-actions-setup-java-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-java@4.%2A.%2A"}]},{"name":"crazy-max/ghaction-import-gpg","SPDXID":"SPDXRef-githubactions-crazy-max-ghaction-import-gpg-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/crazy-max/ghaction-import-gpg@6.%2A.%2A"}]},{"name":"WyriHaximus/github-action-get-previous-tag","SPDXID":"SPDXRef-githubactions-WyriHaximus-github-action-get-previous-tag-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/WyriHaximus/github-action-get-previous-tag@1.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"com.github.secureCodeBox/defectdojo-client-java","SPDXID":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","versionInfo":"main","downloadLocation":"git+https://github.com/secureCodeBox/defectdojo-client-java","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/secureCodeBox/defectdojo-client-java@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-nl.jqno.equalsverifier-equalsverifier-3.15.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-githubactions-crazy-max-ghaction-import-gpg-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.springframework-spring-test-5.3.28-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.sonatype.central-central-publishing-maven-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.projectlombok-lombok-1.18.30-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-java-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.hamcrest-java-hamcrest-2.0.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-com.fasterxml.jackson.core-jackson-core-2.16.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.jacoco-jacoco-maven-plugin-0.8.11-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.16.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.junit-junit-bom-5.10.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-com.fasterxml.jackson.core-jackson-databind-2.16.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-gpg-plugin-3.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-githubactions-WyriHaximus-github-action-get-previous-tag-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.springframework-spring-web-5.3.28-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-uk.org.webcompere-system-stubs-jupiter-2.1.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.jacoco-jacoco-maven-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-gpg-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.slf4j-slf4j-api-2.0.11-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.mockito-mockito-junit-jupiter-5.9.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-githubactions-softprops-action-gh-release-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.sonatype.central-central-publishing-maven-plugin-0.8.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.mockito-mockito-core-5.9.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-org.apache.httpcomponents-httpclient-4.5.14-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relatedSpdxElement":"SPDXRef-maven-com.fasterxml.jackson.core-jackson-annotations-2.16.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-secureCodeBox-defectdojo-client-java-main-5a0de3","relationshipType":"DESCRIBES"}]}