type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-04T17:52:28Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-04T17:52:28Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14168
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14169
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14156
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14165
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14166
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14156
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14162
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14163
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14158
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14159
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14160
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14158
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12525
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12526
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12520
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12522
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12523
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12520
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14157
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14158
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14156
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14164
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12520
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14156
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14169
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12523
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14160
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12526
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14163
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14166
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12524
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14167
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14161
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12520
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd12524
name: pdfbox
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java PDF Library
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is published under the Apache License v2.0.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/pdfbox@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14158
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14161
name: xmpbox
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache XmpBox
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: The Apache XmpBox library is an open source Java tool that implements Adobe's XMP(TM) specification. It can be used to parse, validate and create xmp contents. It is mainly used by subproject preflight of Apache PDFBox.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/xmpbox@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14156
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/SPDXRef-gnrtd14167
name: preflight
software source info: acquired package info from repodata DB: repodata/c0e25e2e553dcd55ea9dbe2ce833d6a6a718c344ea9f4e23b8f3555958d6ecdc-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Preflight
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: The Apache Preflight library is an open source Java tool that implements a parser compliant with the ISO-19005 (PDF/A) specification.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/preflight@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d34ecb43-c0e9-40db-b1a7-ee22bc41dd4e-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0