type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-18T17:52:31Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-18T17:52:31Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13987
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13988
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13985
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13983
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13984
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13978
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13980
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13981
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13978
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13990
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13991
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13985
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13986
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13978
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13985
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13988
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13984
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13981
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13991
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13982
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13989
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13985
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13989
name: pdfbox-debugger
software source info: acquired package info from repodata DB: repodata/dd4dea9dc5aac1d61f7a638c7e75ab7e18453506d28d9029f8c9e6809d4dd32c-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache PDFBox Debugger
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: This package contains the PDF debugger for Apache PDFBox.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/pdfbox-debugger@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13978
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/SPDXRef-gnrtd13982
name: pdfbox
software source info: acquired package info from repodata DB: repodata/dd4dea9dc5aac1d61f7a638c7e75ab7e18453506d28d9029f8c9e6809d4dd32c-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java PDF Library
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is published under the Apache License v2.0.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/pdfbox@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-ed8c70bb-fd40-45a5-be2a-8a44b47b5f74-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1