{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "@id": "_:creationInfo_1",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd2"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd3"
      ],
      "created": "2026-08-22T18:03:27Z"
    },
    {
      "@id": "_:creationInfo_0",
      "type": "CreationInfo",
      "specVersion": "3.0.1",
      "createdBy": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd0"
      ],
      "createdUsing": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd1"
      ],
      "created": "2026-08-22T18:03:27Z"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20066",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20067"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20057",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20061",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20062"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20060",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20069",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20070"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20057",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17119",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17120"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17114",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17116",
      "type": "Relationship",
      "relationshipType": "hasConcludedLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17117"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17114",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20064",
      "type": "Relationship",
      "relationshipType": "hasDeclaredLicense",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20065"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20060",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20059",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20060"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20057",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20058",
      "type": "LifecycleScopedRelationship",
      "relationshipType": "dependsOn",
      "scope": "build",
      "completeness": "noAssertion",
      "to": [
        "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17114"
      ],
      "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20057",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20070",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20065",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20062",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17117",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20067",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17120",
      "type": "simplelicensing_LicenseExpression",
      "simplelicensing_licenseExpression": "ASL 2.0",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20068",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17118",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20063",
      "type": "Organization",
      "name": "http://openeuler.org",
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17114",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd17118",
      "name": "pdfbox",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/0e50863276b0c82d93577659f4645d8d6796dfed61d40c2c5b4d6833adbfc2dc-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/pdfbox@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "A Java PDF Library",
      "software_packageVersion": "0:2.0.29-2.oe2403sp3",
      "software_homePage": "http://pdfbox.apache.org/",
      "description": "Apache PDFBox is an open source Java PDF library for working with PDF\ndocuments. This project allows creation of new PDF documents, manipulation of\nexisting documents and the ability to extract content from documents. Apache\nPDFBox also includes several command line utilities. Apache PDFBox is\npublished under the Apache License v2.0.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.pdfbox/pdfbox@2.0.29"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20060",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20063",
      "name": "xmpbox",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/0e50863276b0c82d93577659f4645d8d6796dfed61d40c2c5b4d6833adbfc2dc-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/xmpbox@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache XmpBox",
      "software_packageVersion": "0:2.0.29-2.oe2403sp3",
      "software_homePage": "http://pdfbox.apache.org/",
      "description": "The Apache XmpBox library is an open source Java tool that implements Adobe's\nXMP(TM) specification.  It can be used to parse, validate and create xmp\ncontents.  It is mainly used by subproject preflight of Apache PDFBox.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.pdfbox/xmpbox@2.0.29"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20057",
      "type": "software_Package",
      "software_copyrightText": "",
      "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd20068",
      "name": "preflight",
      "software_sourceInfo": "acquired package info from repodata DB: repodata/0e50863276b0c82d93577659f4645d8d6796dfed61d40c2c5b4d6833adbfc2dc-primary.sqlite.bz2",
      "software_packageUrl": "pkg:rpm/preflight@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
      "software_downloadLocation": "NOASSERTION",
      "summary": "Apache Preflight",
      "software_packageVersion": "0:2.0.29-2.oe2403sp3",
      "software_homePage": "http://pdfbox.apache.org/",
      "description": "The Apache Preflight library is an open source Java tool that implements\na parser compliant with the ISO-19005 (PDF/A) specification.",
      "externalRef": [
        {
          "type": "ExternalRef",
          "comment": "v2_refCategory=PROVIDE_MANAGER;v2_refType=purl",
          "locator": [
            "pkg:maven/org.apache.pdfbox/preflight@2.0.29"
          ],
          "externalRefType": "other"
        }
      ],
      "creationInfo": "_:creationInfo_0"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd3",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_1"
    },
    {
      "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd1",
      "type": "Tool",
      "name": "syft-[not provided]",
      "creationInfo": "_:creationInfo_0"
    }
  ]
}