type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-08-15T18:06:43Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-08-15T18:06:43Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22903
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd75
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22900
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd399
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd400
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd358
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd116
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd117
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd28
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd402
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd403
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd358
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd119
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd120
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd28
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22905
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd75
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22900
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22901
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd28
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22900
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22902
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd358
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22900
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd403
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd400
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd117
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd75
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd120
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd401
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22904
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd118
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22900
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd22904
name: tomcat
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.119-1.oe2403sp3
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.119
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd358
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd401
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-57.oe2403sp3
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/systemd@255-57.oe2403sp3?arch=x86_64&epoch=0&upstream=systemd-255-57.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd28
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd118
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-23.oe2403sp3
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-23.oe2403sp3?arch=x86_64&epoch=0&upstream=coreutils-9.4-23.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0