type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd2
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd3
created: 2026-08-22T18:03:27Z

type: CreationInfo
spec version: 3.0.1
created by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd0
created using: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd1
created: 2026-08-22T18:03:27Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25094
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25095
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25083
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25091
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25092
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25083
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25086
type: Relationship
relationship type: hasConcludedLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25087
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25085
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25089
type: Relationship
relationship type: hasDeclaredLicense
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25090
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25085
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25084
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25085
from: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25083
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25095
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25092
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25090
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25087
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25088
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25093
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25083
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25093
name: undertow
software source info: acquired package info from repodata DB: repodata/0e50863276b0c82d93577659f4645d8d6796dfed61d40c2c5b4d6833adbfc2dc-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java web server using non-blocking IO
software package version: 1:1.4.0-11.oe2403sp3
software home page: http://undertow.io/
description: Java web server using non-blocking IO
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.undertow/undertow-websockets-jsr@1.4.0.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.undertow/undertow-parser-generator@1.4.0.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.undertow/undertow-core@1.4.0.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.undertow/undertow-servlet@1.4.0.Final
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25085
type: software_Package
supplied by: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/SPDXRef-gnrtd25088
name: xnio
software source info: acquired package info from repodata DB: repodata/0e50863276b0c82d93577659f4645d8d6796dfed61d40c2c5b4d6833adbfc2dc-primary.sqlite.bz2
software download location: NOASSERTION
summary: A simplified low-level I/O layer
software package version: 0:3.4.0-12.oe2403sp3
software home page: http://www.jboss.org/xnio
description: XNIO is a simplified low-level I/O layer which can be used anywhere you are using NIO today. It frees you from the hassle of dealing with Selectors and the lack of NIO support for multicast sockets and non-socket I/O, while still maintaining all the capabilities present in NIO, and it opens the door to non-obvious optimizations.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.xnio/xnio-nio@3.4.0.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.xnio/xnio-api@3.4.0.Final
  external ref type: other
creation info: _:creationInfo_0

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-7c657391-46f5-44ad-8dac-1bdd4e8d37bb-specv3/additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0