type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-08-22T18:08:35Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-08-22T18:08:35Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14778
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd74
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14775
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14776
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd74
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14775
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd74
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14777
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14775
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/SPDXRef-gnrtd14777
name: log4j
software source info: acquired package info from repodata DB: repodata/43adc5a1610aa1b3d614ea3f73ed977d0b3b56993f6143db5d5afd459fa9147f-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java logging package
software package version: 0:2.17.2-2.oe2403sp3
software home page: http://logging.apache.org/log4j
description: Log4j is a tool to help the programmer output log statements to a variety of output targets.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-docker@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-jakarta-web@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-osgi@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-to-jul@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@2.17.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e7048aa5-5871-4cbb-b803-ec54b352fb7c-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1