type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-07-25T17:53:36Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-07-25T17:53:36Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14363
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14364
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14366
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14367
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7259
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7260
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7262
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7263
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14362
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7263
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14364
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7260
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14367
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14365
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7261
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14361
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd14365
name: pdfbox
software source info: acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java PDF Library
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is published under the Apache License v2.0.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/pdfbox@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7258
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/SPDXRef-gnrtd7261
name: fontbox
software source info: acquired package info from repodata DB: repodata/252044341a91374a6e5be4b3c490bd57f9ad985c6a5bf4805c0be5591cc0106b-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache FontBox
software package version: 0:2.0.29-2.oe2403sp3
software home page: http://pdfbox.apache.org/
description: FontBox is a Java library used to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/fontbox@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-1f51574a-c62a-4a66-a1b9-7af616f05b02-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0