Fedora 43 native package

jsr-305

Correctness annotations for Java code

Packages / Fedora 43 / Unspecified / jsr-305

[Source: jsr-305]

Package: jsr-305 (3.0.2-43.fc43)

[Project overview: jsr-305]

External Resources:

Homepage: [code.google.com]

Correctness annotations for Java code

This package contains reference implementations, test cases, and other documents for Java Specification Request 305: Annotations for Software Defect Detection.

Other Packages Related to jsr-305:

dep: [javapackages-filesystem]
Java packages filesystem layout

Download jsr-305

Architecture	Package Size	Installed Size	Files
noarch	36 KiB	44 KiB	[list of files]

Package file paths (35)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/share/doc/jsr-305
/usr/share/doc/jsr-305/sampleUses
/usr/share/doc/jsr-305/sampleUses/.classpath
/usr/share/doc/jsr-305/sampleUses/pom.xml
/usr/share/doc/jsr-305/sampleUses/.project
/usr/share/doc/jsr-305/sampleUses/src
/usr/share/doc/jsr-305/sampleUses/src/main
/usr/share/doc/jsr-305/sampleUses/src/main/java
/usr/share/doc/jsr-305/sampleUses/src/main/java/CreditCardNumber.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs/DottedClassName.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs/examples
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs/examples/ParametersAreSlashedByDefault.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs/examples/TestDefaults.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs/examples/Test.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/edu/umd/cs/findbugs/SlashedClassName.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/FixedLengthString.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/java
/usr/share/doc/jsr-305/sampleUses/src/main/java/java/sql
/usr/share/doc/jsr-305/sampleUses/src/main/java/java/sql/ResultSetConcurrency.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/java/sql/ResultSetHoldability.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/java/sql/ResultSetType.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/LuhnVerification.java
/usr/share/doc/jsr-305/sampleUses/src/main/java/SocialSecurityNumber.java
/usr/share/java/jsr-305.jar
/usr/share/licenses/jsr-305
/usr/share/licenses/jsr-305/LICENSE
/usr/share/licenses/jsr-305/LICENSE.txt
/usr/share/maven-metadata/jsr-305.xml
/usr/share/maven-poms/jsr-305
/usr/share/maven-poms/jsr-305/jsr-305.pom
/usr/share/maven-poms/jsr-305.pom

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browser Build an image that includes jsr-305

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
3.0.2-43.fc43	43 / everything	noarch	Fedora 43 · Everything · x86_64	36 KiB	44 KiB	Packages/j/jsr-305-3.0.2-43.fc43.noarch.rpm
3.0.2-43.fc43	43 / everything	noarch	Fedora 43 · Everything · aarch64	36 KiB	44 KiB	Packages/j/jsr-305-3.0.2-43.fc43.noarch.rpm

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

3.0.2-43.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 21d1f69ec063293ed3564cbed7c1098a18c8ce480b2a3e79defd4f7244933d44

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '21d1f69ec063293ed3564cbed7c1098a18c8ce480b2a3e79defd4f7244933d44' 'jsr-305-3.0.2-43.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

3.0.2-43.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 21d1f69ec063293ed3564cbed7c1098a18c8ce480b2a3e79defd4f7244933d44

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '21d1f69ec063293ed3564cbed7c1098a18c8ce480b2a3e79defd4f7244933d44' 'jsr-305-3.0.2-43.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Fedora 43 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=aarch64
Signed-object SHA-256
6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=x86_64
Signed-object SHA-256
42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified