1--- 2SPDXID: "SPDXRef-DOCUMENT" 3spdxVersion: "SPDX-2.2" 4creationInfo: 5 comment: "This package has been shipped in source and binary form.\nThe binaries\ 6 \ were created with gcc 4.5.1 and expect to link to\ncompatible system run time\ 7 \ libraries." 8 created: "2010-01-29T18:30:22Z" 9 creators: 10 - "Tool: LicenseFind-1.0" 11 - "Organization: ExampleCodeInspect ()" 12 - "Person: Jane Doe ()" 13 licenseListVersion: "3.9" 14name: "SPDX-Tools-v2.0" 15dataLicense: "CC0-1.0" 16comment: "This document was created using SPDX 2.0 using licenses from the web site." 17externalDocumentRefs: 18- externalDocumentId: "DocumentRef-spdx-tool-1.2" 19 checksum: 20 algorithm: "SHA1" 21 checksumValue: "d6a770ba38583ed4bb4525bd96e50461655d2759" 22 spdxDocument: "http://spdx.org/spdxdocs/spdx-tools-v1.2-3F2504E0-4F89-41D3-9A0C-0305E82C3301" 23hasExtractedLicensingInfos: 24- licenseId: "LicenseRef-1" 25 extractedText: "/*\n * (c) Copyright 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007,\ 26 \ 2008, 2009 Hewlett-Packard Development Company, LP\n * All rights reserved.\n\ 27 \ *\n * Redistribution and use in source and binary forms, with or without\n *\ 28 \ modification, are permitted provided that the following conditions\n * are met:\n\ 29 \ * 1. Redistributions of source code must retain the above copyright\n * notice,\ 30 \ this list of conditions and the following disclaimer.\n * 2. Redistributions\ 31 \ in binary form must reproduce the above copyright\n * notice, this list of\ 32 \ conditions and the following disclaimer in the\n * documentation and/or other\ 33 \ materials provided with the distribution.\n * 3. The name of the author may\ 34 \ not be used to endorse or promote products\n * derived from this software\ 35 \ without specific prior written permission.\n *\n * THIS SOFTWARE IS PROVIDED\ 36 \ BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR\n * IMPLIED WARRANTIES, INCLUDING,\ 37 \ BUT NOT LIMITED TO, THE IMPLIED WARRANTIES\n * OF MERCHANTABILITY AND FITNESS\ 38 \ FOR A PARTICULAR PURPOSE ARE DISCLAIMED.\n * IN NO EVENT SHALL THE AUTHOR BE\ 39 \ LIABLE FOR ANY DIRECT, INDIRECT,\n * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\ 40 \ DAMAGES (INCLUDING, BUT\n * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS\ 41 \ OR SERVICES; LOSS OF USE,\n * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\ 42 \ CAUSED AND ON ANY\n * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\ 43 \ OR TORT\n * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE\ 44 \ USE OF\n * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\ 45 */" 46- licenseId: "LicenseRef-2" 47 extractedText: "This package includes the GRDDL parser developed by Hewlett Packard\ 48 \ under the following license:\n� Copyright 2007 Hewlett-Packard Development Company,\ 49 \ LP\n\nRedistribution and use in source and binary forms, with or without modification,\ 50 \ are permitted provided that the following conditions are met: \n\nRedistributions\ 51 \ of source code must retain the above copyright notice, this list of conditions\ 52 \ and the following disclaimer. \nRedistributions in binary form must reproduce\ 53 \ the above copyright notice, this list of conditions and the following disclaimer\ 54 \ in the documentation and/or other materials provided with the distribution.\ 55 \ \nThe name of the author may not be used to endorse or promote products derived\ 56 \ from this software without specific prior written permission. \nTHIS SOFTWARE\ 57 \ IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,\ 58 \ BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\ 59 \ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE\ 60 \ FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\ 61 \ (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\ 62 \ LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND\ 63 \ ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING\ 64 \ NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,\ 65 \ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE." 66- licenseId: "LicenseRef-4" 67 extractedText: "/*\n * (c) Copyright 2009 University of Bristol\n * All rights reserved.\n\ 68 \ *\n * Redistribution and use in source and binary forms, with or without\n *\ 69 \ modification, are permitted provided that the following conditions\n * are met:\n\ 70 \ * 1. Redistributions of source code must retain the above copyright\n * notice,\ 71 \ this list of conditions and the following disclaimer.\n * 2. Redistributions\ 72 \ in binary form must reproduce the above copyright\n * notice, this list of\ 73 \ conditions and the following disclaimer in the\n * documentation and/or other\ 74 \ materials provided with the distribution.\n * 3. The name of the author may\ 75 \ not be used to endorse or promote products\n * derived from this software\ 76 \ without specific prior written permission.\n *\n * THIS SOFTWARE IS PROVIDED\ 77 \ BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR\n * IMPLIED WARRANTIES, INCLUDING,\ 78 \ BUT NOT LIMITED TO, THE IMPLIED WARRANTIES\n * OF MERCHANTABILITY AND FITNESS\ 79 \ FOR A PARTICULAR PURPOSE ARE DISCLAIMED.\n * IN NO EVENT SHALL THE AUTHOR BE\ 80 \ LIABLE FOR ANY DIRECT, INDIRECT,\n * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\ 81 \ DAMAGES (INCLUDING, BUT\n * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS\ 82 \ OR SERVICES; LOSS OF USE,\n * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\ 83 \ CAUSED AND ON ANY\n * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\ 84 \ OR TORT\n * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE\ 85 \ USE OF\n * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\ 86 */" 87- licenseId: "LicenseRef-Beerware-4.2" 88 comment: "The beerware license has a couple of other standard variants." 89 extractedText: "\"THE BEER-WARE LICENSE\" (Revision 42):\[email protected] wrote\ 90 \ this file. As long as you retain this notice you\ncan do whatever you want with\ 91 \ this stuff. If we meet some day, and you think this stuff is worth it, you can\ 92 \ buy me a beer in return Poul-Henning Kamp" 93 name: "Beer-Ware License (Version 42)" 94 seeAlsos: 95 - "http://people.freebsd.org/~phk/" 96- licenseId: "LicenseRef-3" 97 comment: "This is tye CyperNeko License" 98 extractedText: "The CyberNeko Software License, Version 1.0\n\n \n(C) Copyright\ 99 \ 2002-2005, Andy Clark. All rights reserved.\n \nRedistribution and use in source\ 100 \ and binary forms, with or without\nmodification, are permitted provided that\ 101 \ the following conditions\nare met:\n\n1. Redistributions of source code must\ 102 \ retain the above copyright\n notice, this list of conditions and the following\ 103 \ disclaimer. \n\n2. Redistributions in binary form must reproduce the above copyright\n\ 104 \ notice, this list of conditions and the following disclaimer in\n the documentation\ 105 \ and/or other materials provided with the\n distribution.\n\n3. The end-user\ 106 \ documentation included with the redistribution,\n if any, must include the\ 107 \ following acknowledgment: \n \"This product includes software developed\ 108 \ by Andy Clark.\"\n Alternately, this acknowledgment may appear in the software\ 109 \ itself,\n if and wherever such third-party acknowledgments normally appear.\n\ 110 \n4. The names \"CyberNeko\" and \"NekoHTML\" must not be used to endorse\n \ 111 \ or promote products derived from this software without prior \n written permission.\ 112 \ For written permission, please contact \n [email protected].\n\n5. Products\ 113 \ derived from this software may not be called \"CyberNeko\",\n nor may \"CyberNeko\"\ 114 \ appear in their name, without prior written\n permission of the author.\n\n\ 115 THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED\nWARRANTIES,\ 116 \ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES\nOF MERCHANTABILITY AND\ 117 \ FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE AUTHOR\ 118 \ OR OTHER CONTRIBUTORS\nBE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,\ 119 \ EXEMPLARY, \nOR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\ 120 \ \nOF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR \nBUSINESS\ 121 \ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, \nWHETHER IN CONTRACT,\ 122 \ STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE \nOR OTHERWISE) ARISING IN ANY\ 123 \ WAY OUT OF THE USE OF THIS SOFTWARE, \nEVEN IF ADVISED OF THE POSSIBILITY OF\ 124 \ SUCH DAMAGE." 125 name: "CyberNeko License" 126 seeAlsos: 127 - "http://people.apache.org/~andyc/neko/LICENSE" 128 - "http://justasample.url.com" 129annotations: 130- annotationDate: "2010-01-29T18:30:22Z" 131 annotationType: "OTHER" 132 annotator: "Person: Jane Doe ()" 133 comment: "Document level annotation" 134- annotationDate: "2010-02-10T00:00:00Z" 135 annotationType: "REVIEW" 136 annotator: "Person: Joe Reviewer" 137 comment: "This is just an example. Some of the non-standard licenses look like\ 138 \ they are actually BSD 3 clause licenses" 139- annotationDate: "2011-03-13T00:00:00Z" 140 annotationType: "REVIEW" 141 annotator: "Person: Suzanne Reviewer" 142 comment: "Another example reviewer." 143documentNamespace: "http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301" 144documentDescribes: 145- "SPDXRef-File" 146- "SPDXRef-Package" 147packages: 148- SPDXID: "SPDXRef-Package" 149 annotations: 150 - annotationDate: "2011-01-29T18:30:22Z" 151 annotationType: "OTHER" 152 annotator: "Person: Package Commenter" 153 comment: "Package level annotation" 154 attributionTexts: 155 - "The GNU C Library is free software. See the file COPYING.LIB for copying conditions,\ 156 \ and LICENSES for notices about a few contributions that require these additional\ 157 \ notices to be distributed. License copyright years may be listed using range\ 158 \ notation, e.g., 1996-2015, indicating that every year in the range, inclusive,\ 159 \ is a copyrightable year that would otherwise be listed individually." 160 checksums: 161 - algorithm: "MD5" 162 checksumValue: "624c1abb3664f4b35547e7c73864ad24" 163 - algorithm: "SHA1" 164 checksumValue: "85ed0817af83a24ad8da68c2b5094de69833983c" 165 - algorithm: "SHA256" 166 checksumValue: "11b6d3ee554eedf79299905a98f9b9a04e498210b59f15094c916c91d150efcd" 167 copyrightText: "Copyright 2008-2010 John Smith" 168 description: "The GNU C Library defines functions that are specified by the ISO\ 169 \ C standard, as well as additional features specific to POSIX and other derivatives\ 170 \ of the Unix operating system, and extensions specific to GNU systems." 171 downloadLocation: "http://ftp.gnu.org/gnu/glibc/glibc-ports-2.15.tar.gz" 172 externalRefs: 173 - referenceCategory: "SECURITY" 174 referenceLocator: "cpe:2.3:a:pivotal_software:spring_framework:4.1.0:*:*:*:*:*:*:*" 175 referenceType: "cpe23Type" 176 - comment: "This is the external ref for Acme" 177 referenceCategory: "OTHER" 178 referenceLocator: "acmecorp/acmenator/4.1.3-alpha" 179 referenceType: "http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301#LocationRef-acmeforge" 180 filesAnalyzed: true 181 hasFiles: 182 - "SPDXRef-CommonsLangSrc" 183 - "SPDXRef-JenaLib" 184 - "SPDXRef-DoapSource" 185 homepage: "http://ftp.gnu.org/gnu/glibc" 186 licenseComments: "The license for this project changed with the release of version\ 187 \ x.y. The version of the project included here post-dates the license change." 188 licenseConcluded: "(LGPL-2.0-only OR LicenseRef-3)" 189 licenseDeclared: "(LGPL-2.0-only AND LicenseRef-3)" 190 licenseInfoFromFiles: 191 - "GPL-2.0-only" 192 - "LicenseRef-2" 193 - "LicenseRef-1" 194 name: "glibc" 195 originator: "Organization: ExampleCodeInspect ([email protected])" 196 packageFileName: "glibc-2.11.1.tar.gz" 197 packageVerificationCode: 198 packageVerificationCodeExcludedFiles: 199 - "./package.spdx" 200 packageVerificationCodeValue: "d6a770ba38583ed4bb4525bd96e50461655d2758" 201 sourceInfo: "uses glibc-2_11-branch from git://sourceware.org/git/glibc.git." 202 summary: "GNU C library." 203 supplier: "Person: Jane Doe ([email protected])" 204 versionInfo: "2.11.1" 205- SPDXID: "SPDXRef-fromDoap-1" 206 copyrightText: "NOASSERTION" 207 downloadLocation: "NOASSERTION" 208 filesAnalyzed: false 209 homepage: "http://commons.apache.org/proper/commons-lang/" 210 licenseConcluded: "NOASSERTION" 211 licenseDeclared: "NOASSERTION" 212 name: "Apache Commons Lang" 213- SPDXID: "SPDXRef-fromDoap-0" 214 copyrightText: "NOASSERTION" 215 downloadLocation: "https://search.maven.org/remotecontent?filepath=org/apache/jena/apache-jena/3.12.0/apache-jena-3.12.0.tar.gz" 216 externalRefs: 217 - referenceCategory: "PACKAGE_MANAGER" 218 referenceLocator: "pkg:maven/org.apache.jena/[email protected]" 219 referenceType: "purl" 220 filesAnalyzed: false 221 homepage: "http://www.openjena.org/" 222 licenseConcluded: "NOASSERTION" 223 licenseDeclared: "NOASSERTION" 224 name: "Jena" 225 versionInfo: "3.12.0" 226- SPDXID: "SPDXRef-Saxon" 227 checksums: 228 - algorithm: "SHA1" 229 checksumValue: "85ed0817af83a24ad8da68c2b5094de69833983c" 230 copyrightText: "Copyright Saxonica Ltd" 231 description: "The Saxon package is a collection of tools for processing XML documents." 232 downloadLocation: "https://sourceforge.net/projects/saxon/files/Saxon-B/8.8.0.7/saxonb8-8-0-7j.zip/download" 233 filesAnalyzed: false 234 homepage: "http://saxon.sourceforge.net/" 235 licenseComments: "Other versions available for a commercial license" 236 licenseConcluded: "MPL-1.0" 237 licenseDeclared: "MPL-1.0" 238 name: "Saxon" 239 packageFileName: "saxonB-8.8.zip" 240 versionInfo: "8.8" 241files: 242- SPDXID: "SPDXRef-DoapSource" 243 checksums: 244 - algorithm: "SHA1" 245 checksumValue: "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12" 246 copyrightText: "Copyright 2010, 2011 Source Auditor Inc." 247 fileContributors: 248 - "Protecode Inc." 249 - "SPDX Technical Team Members" 250 - "Open Logic Inc." 251 - "Source Auditor Inc." 252 - "Black Duck Software In.c" 253 fileName: "./src/org/spdx/parser/DOAPProject.java" 254 fileTypes: 255 - "SOURCE" 256 licenseConcluded: "Apache-2.0" 257 licenseInfoInFiles: 258 - "Apache-2.0" 259- SPDXID: "SPDXRef-CommonsLangSrc" 260 checksums: 261 - algorithm: "SHA1" 262 checksumValue: "c2b4e1c67a2d28fced849ee1bb76e7391b93f125" 263 comment: "This file is used by Jena" 264 copyrightText: "Copyright 2001-2011 The Apache Software Foundation" 265 fileContributors: 266 - "Apache Software Foundation" 267 fileName: "./lib-source/commons-lang3-3.1-sources.jar" 268 fileTypes: 269 - "ARCHIVE" 270 licenseConcluded: "Apache-2.0" 271 licenseInfoInFiles: 272 - "Apache-2.0" 273 noticeText: "Apache Commons Lang\nCopyright 2001-2011 The Apache Software Foundation\n\ 274 \nThis product includes software developed by\nThe Apache Software Foundation\ 275 \ (http://www.apache.org/).\n\nThis product includes software from the Spring\ 276 \ Framework,\nunder the Apache License 2.0 (see: StringUtils.containsWhitespace())" 277- SPDXID: "SPDXRef-JenaLib" 278 checksums: 279 - algorithm: "SHA1" 280 checksumValue: "3ab4e1c67a2d28fced849ee1bb76e7391b93f125" 281 comment: "This file belongs to Jena" 282 copyrightText: "(c) Copyright 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008,\ 283 \ 2009 Hewlett-Packard Development Company, LP" 284 fileContributors: 285 - "Apache Software Foundation" 286 - "Hewlett Packard Inc." 287 fileName: "./lib-source/jena-2.6.3-sources.jar" 288 fileTypes: 289 - "ARCHIVE" 290 licenseComments: "This license is used by Jena" 291 licenseConcluded: "LicenseRef-1" 292 licenseInfoInFiles: 293 - "LicenseRef-1" 294- SPDXID: "SPDXRef-File" 295 annotations: 296 - annotationDate: "2011-01-29T18:30:22Z" 297 annotationType: "OTHER" 298 annotator: "Person: File Commenter" 299 comment: "File level annotation" 300 checksums: 301 - algorithm: "SHA1" 302 checksumValue: "d6a770ba38583ed4bb4525bd96e50461655d2758" 303 - algorithm: "MD5" 304 checksumValue: "624c1abb3664f4b35547e7c73864ad24" 305 comment: "The concluded license was taken from the package level that the file was\ 306 \ included in.\nThis information was found in the COPYING.txt file in the xyz\ 307 \ directory." 308 copyrightText: "Copyright 2008-2010 John Smith" 309 fileContributors: 310 - "The Regents of the University of California" 311 - "Modified by Paul Mundt [email protected]" 312 - "IBM Corporation" 313 fileName: "./package/foo.c" 314 fileTypes: 315 - "SOURCE" 316 licenseComments: "The concluded license was taken from the package level that the\ 317 \ file was included in." 318 licenseConcluded: "(LGPL-2.0-only OR LicenseRef-2)" 319 licenseInfoInFiles: 320 - "GPL-2.0-only" 321 - "LicenseRef-2" 322 noticeText: "Copyright (c) 2001 Aaron Lehmann [email protected]\n\nPermission is\ 323 \ hereby granted, free of charge, to any person obtaining a copy of this software\ 324 \ and associated documentation files (the �Software�), to deal in the Software\ 325 \ without restriction, including without limitation the rights to use, copy, modify,\ 326 \ merge, publish, distribute, sublicense, and/or sell copies of the Software,\ 327 \ and to permit persons to whom the Software is furnished to do so, subject to\ 328 \ the following conditions: \nThe above copyright notice and this permission notice\ 329 \ shall be included in all copies or substantial portions of the Software.\n\n\ 330 THE SOFTWARE IS PROVIDED �AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\ 331 \ INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR\ 332 \ A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR\ 333 \ COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER\ 334 \ IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\ 335 \ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." 336snippets: 337- SPDXID: "SPDXRef-Snippet" 338 comment: "This snippet was identified as significant and highlighted in this Apache-2.0\ 339 \ file, when a commercial scanner identified it as being derived from file foo.c\ 340 \ in package xyz which is licensed under GPL-2.0." 341 copyrightText: "Copyright 2008-2010 John Smith" 342 licenseComments: "The concluded license was taken from package xyz, from which the\ 343 \ snippet was copied into the current file. The concluded license information\ 344 \ was found in the COPYING.txt file in package xyz." 345 licenseConcluded: "GPL-2.0-only" 346 licenseInfoInSnippets: 347 - "GPL-2.0-only" 348 name: "from linux kernel" 349 ranges: 350 - endPointer: 351 offset: 420 352 reference: "SPDXRef-DoapSource" 353 startPointer: 354 offset: 310 355 reference: "SPDXRef-DoapSource" 356 - endPointer: 357 lineNumber: 23 358 reference: "SPDXRef-DoapSource" 359 startPointer: 360 lineNumber: 5 361 reference: "SPDXRef-DoapSource" 362 snippetFromFile: "SPDXRef-DoapSource" 363relationships: 364- spdxElementId: "SPDXRef-DOCUMENT" 365 relatedSpdxElement: "SPDXRef-Package" 366 relationshipType: "CONTAINS" 367- spdxElementId: "SPDXRef-DOCUMENT" 368 relatedSpdxElement: "DocumentRef-spdx-tool-1.2:SPDXRef-ToolsElement" 369 relationshipType: "COPY_OF" 370- spdxElementId: "SPDXRef-DOCUMENT" 371 relatedSpdxElement: "SPDXRef-File" 372 relationshipType: "DESCRIBES" 373- spdxElementId: "SPDXRef-DOCUMENT" 374 relatedSpdxElement: "SPDXRef-Package" 375 relationshipType: "DESCRIBES" 376- spdxElementId: "SPDXRef-Package" 377 relatedSpdxElement: "SPDXRef-JenaLib" 378 relationshipType: "CONTAINS" 379- spdxElementId: "SPDXRef-Package" 380 relatedSpdxElement: "SPDXRef-Saxon" 381 relationshipType: "DYNAMIC_LINK" 382- spdxElementId: "SPDXRef-CommonsLangSrc" 383 relatedSpdxElement: "NOASSERTION" 384 relationshipType: "GENERATED_FROM" 385- spdxElementId: "SPDXRef-JenaLib" 386 relatedSpdxElement: "SPDXRef-Package" 387 relationshipType: "CONTAINS" 388- spdxElementId: "SPDXRef-File" 389 relatedSpdxElement: "SPDXRef-fromDoap-0" 390 relationshipType: "GENERATED_FROM" 391