{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.apache/commons-codec","documentNamespace":"https://spdx.org/spdxdocs/protobom/10f72400-032f-4747-b1d0-77a2f44c701a","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-10T22:19:01Z"},"packages":[{"name":"ossf/scorecard-action","SPDXID":"SPDXRef-githubactions-ossf-scorecard-action-4eaacf0543bb3f2c246792bd56e8cdeffafb205a-75c946","versionInfo":"4eaacf0543bb3f2c246792bd56e8cdeffafb205a","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-8e8c483db84b4bee98b60c0593521ed34d9990e8-75c946","versionInfo":"8e8c483db84b4bee98b60c0593521ed34d9990e8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-b7c566a772e6b6bfb58ed0dc250532a479d7789f-75c946","versionInfo":"b7c566a772e6b6bfb58ed0dc250532a479d7789f","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f"}]},{"name":"github/codeql-action/upload-sarif","SPDXID":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","versionInfo":"45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2"}]},{"name":"org.apache.maven.plugins:maven-surefire-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-surefire-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-surefire-plugin"}]},{"name":"org.apache.rat:apache-rat-plugin","SPDXID":"SPDXRef-maven-org.apache.rat-apache-rat-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.rat/apache-rat-plugin"}]},{"name":"org.apache.maven.plugins:maven-scm-publish-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-scm-publish-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-scm-publish-plugin"}]},{"name":"org.codehaus.mojo:javancss-maven-plugin","SPDXID":"SPDXRef-maven-org.codehaus.mojo-javancss-maven-plugin-2.1-75c946","versionInfo":"2.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.codehaus.mojo/javancss-maven-plugin@2.1"}]},{"name":"commons-io:commons-io","SPDXID":"SPDXRef-maven-commons-io-commons-io-2.21.0-75c946","versionInfo":"2.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2002-2025 The Apache Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/commons-io/commons-io@2.21.0"}]},{"name":"org.apache.commons:commons-lang3","SPDXID":"SPDXRef-maven-org.apache.commons-commons-lang3-3.20.0-75c946","versionInfo":"3.20.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2001-2017 The Apache Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.commons/commons-lang3@3.20.0"}]},{"name":"org.junit.jupiter:junit-jupiter-params","SPDXID":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-params-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.junit.jupiter/junit-jupiter-params"}]},{"name":"org.apache.maven.plugins:maven-assembly-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-assembly-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-assembly-plugin"}]},{"name":"com.github.spotbugs:spotbugs-maven-plugin","SPDXID":"SPDXRef-maven-com.github.spotbugs-spotbugs-maven-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/com.github.spotbugs/spotbugs-maven-plugin"}]},{"name":"org.apache.maven.plugins:maven-checkstyle-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-checkstyle-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-checkstyle-plugin"}]},{"name":"org.apache.maven.plugins:maven-pmd-plugin","SPDXID":"SPDXRef-maven-org.apache.maven.plugins-maven-pmd-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-pmd-plugin"}]},{"name":"org.codehaus.mojo:animal-sniffer-maven-plugin","SPDXID":"SPDXRef-maven-org.codehaus.mojo-animal-sniffer-maven-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.codehaus.mojo/animal-sniffer-maven-plugin"}]},{"name":"org.codehaus.mojo:taglist-maven-plugin","SPDXID":"SPDXRef-maven-org.codehaus.mojo-taglist-maven-plugin-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.codehaus.mojo/taglist-maven-plugin"}]},{"name":"org.junit.jupiter:junit-jupiter-engine","SPDXID":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-engine-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.junit.jupiter/junit-jupiter-engine"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","versionInfo":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-cdf6c1fa76f9f475f3d7449005a359c84ca0f306-75c946","versionInfo":"cdf6c1fa76f9f475f3d7449005a359c84ca0f306","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306"}]},{"name":"github/codeql-action/init","SPDXID":"SPDXRef-githubactions-githubcodeql-action-init-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","versionInfo":"45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2"}]},{"name":"github/codeql-action/analyze","SPDXID":"SPDXRef-githubactions-githubcodeql-action-analyze-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","versionInfo":"45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2"}]},{"name":"github/codeql-action/autobuild","SPDXID":"SPDXRef-githubactions-githubcodeql-action-autobuild-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","versionInfo":"45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/autobuild@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2"}]},{"name":"actions/dependency-review-action","SPDXID":"SPDXRef-githubactions-actions-dependency-review-action-3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261-75c946","versionInfo":"3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261"}]},{"name":"actions/setup-java","SPDXID":"SPDXRef-githubactions-actions-setup-java-be666c2fcd27ec809703dec50e508c2fdc7f6654-75c946","versionInfo":"be666c2fcd27ec809703dec50e508c2fdc7f6654","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654"}]},{"name":"com.github.apache/commons-codec","SPDXID":"SPDXRef-github-apache-commons-codec-master-a65eb3","versionInfo":"master","downloadLocation":"git+https://github.com/apache/commons-codec","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/apache/commons-codec@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.rat-apache-rat-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-commons-io-commons-io-2.21.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-actions-dependency-review-action-3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-ossf-scorecard-action-4eaacf0543bb3f2c246792bd56e8cdeffafb205a-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.codehaus.mojo-javancss-maven-plugin-2.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-params-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-checkstyle-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.junit.jupiter-junit-jupiter-engine-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-analyze-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-autobuild-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-8e8c483db84b4bee98b60c0593521ed34d9990e8-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-b7c566a772e6b6bfb58ed0dc250532a479d7789f-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.commons-commons-lang3-3.20.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.codehaus.mojo-taglist-maven-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-java-be666c2fcd27ec809703dec50e508c2fdc7f6654-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-scm-publish-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-assembly-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-com.github.spotbugs-spotbugs-maven-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-pmd-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.codehaus.mojo-animal-sniffer-maven-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-cdf6c1fa76f9f475f3d7449005a359c84ca0f306-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-init-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-apache-commons-codec-master-a65eb3","relatedSpdxElement":"SPDXRef-maven-org.apache.maven.plugins-maven-surefire-plugin-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-apache-commons-codec-master-a65eb3","relationshipType":"DESCRIBES"}]}