type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd26511
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd26512
from: jackson-databind
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20405
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20406
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21350
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25802
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: bouncycastle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20869
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20870
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21347
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40074
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40075
from: glassfish-hk2-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40071
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40072
from: glassfish-hk2-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21335
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21336
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39861
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39862
from: jackson-datatype-guava
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40247
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40248
from: jersey
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5835
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5836
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40257
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40258
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40244
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40245
from: jersey
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25800
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: bouncycastle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5832
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5833
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20719
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20720
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39858
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39859
from: jackson-datatype-guava
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33129
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd33130
from: jnr-unixsocket
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26514
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd26515
from: jackson-databind
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40254
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40255
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20402
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20403
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21855
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21856
from: apache-commons-compress
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21858
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21859
from: apache-commons-compress
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20722
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20723
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39896
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39897
from: jackson-jaxrs-json-provider
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33132
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd33133
from: jnr-unixsocket
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20872
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20873
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21332
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21333
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39893
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39894
from: jackson-jaxrs-json-provider
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39902
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: guava20
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39899
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39905
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-core
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39901
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39898
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-compress
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39900
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39863
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jackson-jaxrs-json-provider
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40252
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40251
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39903
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: slf4j
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40253
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bouncycastle
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39850
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jackson-datatype-guava
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39904
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-client
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40249
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-hk2-api
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40250
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jnr-unixsocket
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39906
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jackson-databind
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39907
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jersey
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21859
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40072
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-2.0 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33133
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21333
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39894
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20873
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20870
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40245
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40248
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39897
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20403
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21347
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21350
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20720
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40258
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26512
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39862
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21856
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20723
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40255
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40075
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-2.0 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33130
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5833
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5836
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26515
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39859
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21336
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20871
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20721
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39860
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33131
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21334
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40073
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26513
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40246
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25801
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20404
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21857
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5834
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39895
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40256
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20713
type: software_Package
supplied by: SPDXRef-gnrtd20721
name: guava20
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Google Libraries for Java
software package version: 0:20.0-11.oe2403sp4
software home page: https://github.com/google/guava
description: Guava is a set of core libraries that includes new collection types ,immutable collections, a graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@13.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25793
type: software_Package
supplied by: SPDXRef-gnrtd25801
name: bouncycastle
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java implementation of cryptographic algorithms
software package version: 0:1.67-2.oe2403sp4
software home page: http://www.bouncycastle.org
description: The package is organised so that it contains a light-weight API suitable for use in any environment (including the newly released J2ME) with the additional infrastructure to conform the algorithms to the JCE framework.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk15@1.67
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20864
type: software_Package
supplied by: SPDXRef-gnrtd20871
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33121
type: software_Package
supplied by: SPDXRef-gnrtd33131
name: jnr-unixsocket
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Unix sockets for Java
software package version: 0:0.38.19-1.oe2403sp4
software home page: https://github.com/jnr/jnr-unixsocket
description: Unix sockets for Java.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.github.jnr/jnr-unixsocket@0.38.19
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40053
type: software_Package
supplied by: SPDXRef-gnrtd40073
name: glassfish-hk2-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: HK2 API module
software package version: 0:2.5.0-5.oe2403sp4
software home page: https://github.com/eclipse-ee4j/glassfish-hk2/
description: Hundred Kilobytes Kernel API module.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.hk2/hk2-api@2.5.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21338
type: software_Package
supplied by: SPDXRef-gnrtd21348
name: httpcomponents-client
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of components for building client side HTTP services
software package version: 0:4.5.5-7.oe2403sp4
software home page: http://hc.apache.org/
description: HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by httpcomponents HttpCore,which provides reusable components for HTTP state management, HTTP connection management, and client-side authentication. HttpComponents Client is almost equalto Commons HttpClient 3.x. Users of Commons HttpClient strongly support it.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpmime@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpclient@4.5.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21328
type: software_Package
supplied by: SPDXRef-gnrtd21334
name: httpcomponents-core
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Set of low level Java HTTP transport components for HTTP services
software package version: 0:4.4.15-1.oe2403sp4
software home page: http://hc.apache.org/
description: HttpCore is a set of low level HTTP transport components that can be used to build custom client and server side HTTP services with a minimal footprint. HttpCore supports two I/O models: blocking I/O model based on the classic Java I/O and non-blocking, event driven I/O model based on Java NIO.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore@4.4.15
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39851
type: software_Package
supplied by: SPDXRef-gnrtd39860
name: jackson-datatype-guava
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Add-on module for Jackson which handles Guava data-types
software package version: 0:2.9.8-1.oe2403sp4
software home page: https://github.com/FasterXML/jackson-datatypes-collections
description: Add-on datatype-support module for Jackson that handles Guava types (currently mostly just collection ones).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.9.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39908
type: software_Package
supplied by: SPDXRef-gnrtd40246
name: jersey
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: JAX-RS (JSR 311) production quality Reference Implementation
software package version: 0:2.29.1-3.oe2403sp4
software home page: https://github.com/eclipse-ee4j/jersey
description: Jersey is the open source JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-bean-validation@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.core/jersey-server@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-grizzly2-servlet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.security/oauth2-client@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.rx/jersey-rx-client-rxjava@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-jaxb@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.connectors/jersey-jdk-connector@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.rx/jersey-rx-client-guava@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-json-jettison@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.security/oauth1-signature@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-wadl-doclet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-validation@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-json-processing@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-weld2-se@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-sse@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-grizzly2-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-freemarker@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-jsp@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.connectors/jersey-jetty-connector@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-simple-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-spring5@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-jdk-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-ban-custom-hk2-binding@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-servlet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-transaction@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.security/oauth1-client@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-jetty-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.core/jersey-client@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.core/jersey-common@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-proxy-client@2.29.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26505
type: software_Package
supplied by: SPDXRef-gnrtd26513
name: jackson-databind
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: General data-binding package for Jackson (2.x)
software package version: 0:2.9.8-10.oe2403sp4
software home page: https://github.com/FasterXML/jackson-databind/
description: The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39864
type: software_Package
supplied by: SPDXRef-gnrtd39895
name: jackson-jaxrs-json-provider
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jackson-JAXRS-JSON
software package version: 0:2.9.8-1.oe2403sp4
software home page: https://github.com/FasterXML/jackson-jaxrs-providers
description: Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.9.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21851
type: software_Package
supplied by: SPDXRef-gnrtd21857
name: apache-commons-compress
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java API for working with compressed files and archivers
software package version: 0:1.21-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-compress/
description: The Apache Commons Compress library defines an API for working with ar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files. In version 1.14 read-only support for Brotli decompression has been added, but it has been removed from this package.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-compress@1.21
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-compress/commons-compress@1.21
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons/commons-compress@1.21
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20398
type: software_Package
supplied by: SPDXRef-gnrtd20404
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5828
type: software_Package
supplied by: SPDXRef-gnrtd5834
name: slf4j
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Simple Logging Facade for Java(SLF4J)
software package version: 0:1.7.25-8.oe2403sp4
software home page: http://www.slf4j.org/
description: The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the desired logging framework at deployment time.Before you start using SLF4J, we highly recommend that you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the addition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on the class path, then SLF4J will default to a no-operation implementation. In case you wish to migrate your Java source files to SLF4J, consider our migrator tool which can migrate your project to use the SLF4J API in just a few minutes. In case an externally-maintained component you depend on uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have a look at SLF4J's binary-support for legacy APIs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-api@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-nop@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-simple@1.7.25
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39849
type: software_Package
supplied by: SPDXRef-gnrtd40256
name: docker-client-java
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Docker Client
software package version: 0:8.11.7-2.oe2403sp4
software home page: https://github.com/spotify/docker-client
description: The Docker Client is a Java API library for accessing a Docker daemon.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.spotify/docker-client@8.11.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@18.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@14.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@14.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-jetty-servlet@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.ext/jersey-metainf-services@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-mustache@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.security/oauth1-server@2.29.1
external ref type: other