type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20405
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20406
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37597
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37598
from: glassfish-jaxb-xjc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37600
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37601
from: glassfish-jaxb-xjc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23038
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23039
from: javassist
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37607
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37608
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22659
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22660
from: maven-artifact-resolver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22088
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22089
from: plexus-build-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37573
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37574
from: wsdl4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16487
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16488
from: glassfish-jaxb-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26315
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd26316
from: glassfish-jaxb-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37570
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37571
from: wsdl4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21889
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: plexus-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26318
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd26319
from: glassfish-jaxb-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23041
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23042
from: javassist
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20402
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20403
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26323
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd26324
from: glassfish-jaxb-runtime
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21887
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: plexus-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22091
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22092
from: plexus-build-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37604
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37605
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20167
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20168
from: xml-commons-resolver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20164
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20165
from: xml-commons-resolver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26320
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd26321
from: glassfish-jaxb-runtime
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22656
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22657
from: maven-artifact-resolver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16490
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16491
from: glassfish-jaxb-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37603
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-build-api
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37564
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-jaxb-core
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37558
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37575
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-jaxb-runtime
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37560
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37565
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: wsdl4j
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37563
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37561
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javassist
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37556
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact-resolver
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37576
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xml-commons-resolver
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37557
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-archiver
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37559
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37602
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37577
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-jaxb-xjc
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37562
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-jaxb-api
from: cxf-xjc-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16491
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26321
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37598
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37601
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37574
type: simplelicensing_LicenseExpression
simplelicensing license expression: CPL
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20165
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20403
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22092
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37605
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22089
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37571
type: simplelicensing_LicenseExpression
simplelicensing license expression: CPL
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22660
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37608
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16488
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22657
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26319
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26316
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20168
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23039
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.1 or LGPLv2+ or ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26324
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23042
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.1 or LGPLv2+ or ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20166
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37599
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23040
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37606
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37572
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22658
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21888
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26322
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16489
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22090
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26317
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20404
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26154
type: software_Package
supplied by: SPDXRef-gnrtd26322
name: glassfish-jaxb-runtime
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: JAXB Runtime
software package version: 0:2.2.11-1.oe2403sp4
software home page: http://jaxb.java.net
description: The Implementation Reference of JAXB (JSR 222)
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.11
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.2.11
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22081
type: software_Package
supplied by: SPDXRef-gnrtd22090
name: plexus-build-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Build API
software package version: 0:0.0.7-24.oe2403sp4
software home page: https://github.com/sonatype/sisu-build-api
description: Plexus Build API
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37566
type: software_Package
supplied by: SPDXRef-gnrtd37572
name: wsdl4j
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: The Web Services Description Language for Java Toolkit
software package version: 0:1.6.3-14.oe2403sp4
software home page: http://sourceforge.net/projects/wsdl4j
description: The Web Services Description Language for Java Toolkit (WSDL4J) allows the creation, representation, and manipulation of WSDL documents. Is the reference implementation for JSR110 'JWSDL'.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/wsdl4j/qname@1.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/wsdl4j/wsdl4j@1.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16483
type: software_Package
supplied by: SPDXRef-gnrtd16489
name: glassfish-jaxb-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java Architecture of XML Binding
software package version: 0:2.3.1-1.oe2403sp4
software home page: http://jaxb.java.net/
description: The Java Architecture for XML Binding(JAXB) provides an API and tools that automate the mapping between XML documents and Java objects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.xml.bind/jaxb-api@2.3.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37555
type: software_Package
supplied by: SPDXRef-gnrtd37606
name: cxf-xjc-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache CXF XJC-Utils
software package version: 0:3.0.5-2.oe2403sp4
software home page: http://cxf.apache.org/xjc-utils.html
description: The Apache CXF XJC-Utils provides a bunch of utilities for working with JAXB to generate better or more usable code.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-pl@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins.tests/cxf-xjc-dv-test@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins.tests/cxf-xjc-ts-test@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins.tests/cxf-xjc-wsdlextension-test@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug986@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-wsdlextension@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins.tests/cxf-xjc-boolean-test@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-javadoc@3.0.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.cxf/cxf-xjc-plugin@3.0.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37578
type: software_Package
supplied by: SPDXRef-gnrtd37599
name: glassfish-jaxb-xjc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: JAXB XJC
software package version: 0:2.2.11-1.oe2403sp4
software home page: http://jaxb.java.net
description: The JAXB Contains source code which bing compiler needed for binding customization files into java sources. Means that the tool generate java classes by the given xml representation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.2.11
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun.xml.bind/jaxb-xjc@2.2.11
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26213
type: software_Package
supplied by: SPDXRef-gnrtd26317
name: glassfish-jaxb-core
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: JAXB Core
software package version: 0:2.2.11-1.oe2403sp4
software home page: http://jaxb.java.net
description: Core module of JAXB. Provides sources required by JXC, XJC and Runtime modules.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jaxb/jaxb-core@2.2.11
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23033
type: software_Package
supplied by: SPDXRef-gnrtd23040
name: javassist
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode engineering toolkit
software package version: 0:3.18.1-10.oe2403sp4
software home page: http://www.csg.is.titech.ac.jp/~chiba/javassist/
description: Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java; it enables Java programs to define a new class at runtime and to modify a class file when the JVM loads it. Unlike other similar bytecode editors, Javassist provides two levels of API: source level and bytecode level. If the users use the source- level API, they can edit a class file without knowledge of the specifications of the Java bytecode. The whole API is designed with only the vocabulary of the Java language. You can even specify inserted bytecode in the form of source text; Javassist compiles it on the fly. On the other hand, the bytecode-level API allows the users to directly edit a class file as other editors.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.javassist/javassist@3.18.1.GA
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javassist/javassist@3.18.1.GA
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21849
type: software_Package
supplied by: SPDXRef-gnrtd21888
name: plexus-archiver
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Archiver Components
software package version: 0:4.2.7-2.oe2403sp4
software home page: http://codehaus-plexus.github.io/plexus-archiver
description: The Plexus project provides a full software stack for creating and executing software projects. It provides a number of pre-built components for common tasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more. However, Plexus is also able to reuse your existing components written for other IoC frameworks such as Spring, Avalon and Pico Container unmodified, as well as allowing you to reuse your existing code inside the Plexus Container. Plexus comes with an application server that can run your applications, making it trivial to build a standalone executable distribution with common features such as service execution if needed. However, Plexus applications can be run in any environment by embedding the container in an existing application, including Java EE applications or web applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20398
type: software_Package
supplied by: SPDXRef-gnrtd20404
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22651
type: software_Package
supplied by: SPDXRef-gnrtd22658
name: maven-artifact-resolver
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A component for plugins to easily resolve project dependencies
software package version: 1:1.0-21.oe2403sp4
software home page: http://maven.apache.org/shared/maven-artifact-resolver
description: maven-artifact-resolver provides a component for plugins to easily resolve project dependencies.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-artifact-resolver@1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20158
type: software_Package
supplied by: SPDXRef-gnrtd20166
name: xml-commons-resolver
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: XML-commons resolver subprojects
software package version: 0:1.2-27.oe2403sp4
software home page: http://xerces.apache.org/xml-commons/components/resolver/
description: XML-commons resolver subprojects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xml-resolver/xml-resolver@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0