type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20408
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20409
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20405
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20406
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4341
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4342
from: perl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5809
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20377
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20378
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14847
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd14848
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17741
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd17742
from: jsr-305
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5811
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20337
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20338
from: jaxen
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd694
from: perl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20391
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20392
from: findbugs-bcel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20411
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20412
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20368
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20369
from: jFormatString
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20388
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20389
from: findbugs-bcel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20355
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20356
from: jcip-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20380
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20381
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20402
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20403
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd696
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd697
from: perl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20365
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20366
from: jFormatString
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20346
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20344
from: dom4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2967
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2968
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20340
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20341
from: jaxen
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17738
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd17739
from: jsr-305
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20297
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10431
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20358
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20356
from: jcip-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20343
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20344
from: dom4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4338
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4339
from: perl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14850
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd14851
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2964
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2965
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20299
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10431
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20395
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20328
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dom4j
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20393
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: junit
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20359
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jFormatString
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20396
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jaxen
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20326
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20347
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jsr-305
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20348
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20324
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20370
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: objectweb-asm
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20397
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20407
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-tools
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20349
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jcip-annotations
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20394
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20327
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20382
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: findbugs-bcel
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20322
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20325
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: perl
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20323
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: perl-libs
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20366
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4342
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20381
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20378
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20369
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20341
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17742
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND CC-BY-2.5)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20338
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10431
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20409
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20389
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20403
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14851
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2968
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14848
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4339
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd697
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd694
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20356
type: simplelicensing_LicenseExpression
simplelicensing license expression: CC-BY-2.5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20344
type: simplelicensing_LicenseExpression
simplelicensing license expression: Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17739
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND CC-BY-2.5)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20392
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20412
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2965
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20345
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20298
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd695
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20357
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20390
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20367
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17740
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2966
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20379
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20410
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20404
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4340
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5810
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20339
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14849
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20284
type: software_Package
supplied by: SPDXRef-gnrtd20298
name: junit
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java package for unit testing frameworks
software package version: 1:4.13.2-2.oe2403sp4
software home page: http://www.junit.org/
description: JUnit is a simple framework to write repeatable tests. It is an instance of the xUnit architecture for unit testing frameworks.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit-dep@4.13.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit@4.13.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20329
type: software_Package
supplied by: SPDXRef-gnrtd20345
name: dom4j
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Flexible XML framework for Java
software package version: 0:2.0.0-9.oe2403sp4
software home page: https://dom4j.github.io/
description: dom4j is an easy to use, open source library for working with XML, XPath and XSLT on the Java platform using the Java Collections Framework and with full support for DOM, SAX and JAXP.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/dom4j/dom4j@2.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.dom4j/dom4j@2.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5803
type: software_Package
supplied by: SPDXRef-gnrtd5810
name: javapackages-tools
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Support for Java packaging with macros and scripts
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-tools package contains macros and scripts to support Java packaging.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/sun.jdk/jconsole@SYSTEM
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun/tools@SYSTEM
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20371
type: software_Package
supplied by: SPDXRef-gnrtd20379
name: objectweb-asm
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode manipulation and analysis framework
software package version: 0:8.0.1-1.oe2403sp4
software home page: http://asm.ow2.org/
description: ASM is an all purpose Java bytecode manipulation and analysis framework. It can be used to modify existing classes or dynamically generate classes, directly in binary form. Provided common transformations and analysis algorithms allow to easily assemble custom complex transformations and code analysis tools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-tree@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-util@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-analysis@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-commons@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-debug-all@8.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd670
type: software_Package
supplied by: SPDXRef-gnrtd695
software download location: NOASSERTION
summary: The libraries for the perl
software package version: 4:5.38.0-12.oe2403sp4
software home page: https://www.perl.org/
description: This package is the shared library for perl.
name: perl-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20360
type: software_Package
supplied by: SPDXRef-gnrtd20367
name: jFormatString
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A checker for Java format string when compile-time
software package version: 0:0-0.31.20131227gitf159b88.oe2403sp4
software home page: http://code.google.com/p/j-format-string/
description: A checker for Java format string when compile-time.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/jFormatString@2.0.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20333
type: software_Package
supplied by: SPDXRef-gnrtd20339
name: jaxen
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: An XPath engine written in Java
software package version: 0:1.2.0-3.oe2403sp4
software home page: https://github.com/jaxen-xpath/jaxen
description: Jaxen is an open source XPath library written in Java. It is adaptable to many different object models and also possible to write adapters that treat non-XML trees
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jaxen/jaxen@1.2.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17734
type: software_Package
supplied by: SPDXRef-gnrtd17740
name: jsr-305
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Correctness annotations for Java code
software package version: 0:3.0.2-2.oe2403sp4
software home page: https://code.google.com/p/jsr-305
description: This package contains reference implementations, test cases, and other documents for Java Specification Request 305: Annotations for Software Defect Detection.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jsr-305/ri@3.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/jsr305@3.0.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20350
type: software_Package
supplied by: SPDXRef-gnrtd20357
name: jcip-annotations
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java Concurrency in Practice
software package version: 0:1-26.20060626.oe2403sp4
software home page: http://www.jcip.net/
description: This package provides class, field, and method level annotations for describing thread-safety policies. These annotations are relatively unintrusive and beneficial to both users and maintainers. Users can see immediately whether a class is thread-safe, and maintainers can see immediately whether thread-safety guarantees must be preserved.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.jcip/jcip-annotations@1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1940
type: software_Package
supplied by: SPDXRef-gnrtd2966
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8.
name: java-1.8.0-openjdk
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20321
type: software_Package
supplied by: SPDXRef-gnrtd20410
name: findbugs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Find Bugs in Java Programs
software package version: 0:3.0.1-18.oe2403sp4
software home page: http://findbugs.sourceforge.net/
description: Findbugs is a program which uses static analysis to look for bugs in Java code.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.sourceforge.findbugs/annotations@3.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/annotations@3.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/findbugs@3.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20383
type: software_Package
supplied by: SPDXRef-gnrtd20390
name: findbugs-bcel
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Library for FindBugs provides Byte Code
software package version: 0:6.0-0.13.20140707svn1547656.oe2403sp4
software home page: http://commons.apache.org/proper/commons-bcel/
description: This is a Byte Code Engineering Library (BCEL) provided for FindBugs 3.0.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/bcel@6.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/bcel-findbugs@6.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20398
type: software_Package
supplied by: SPDXRef-gnrtd20404
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3189
type: software_Package
supplied by: SPDXRef-gnrtd4340
software download location: NOASSERTION
summary: A highly capable, feature-rich programming language
software package version: 4:5.38.0-12.oe2403sp4
software home page: https://www.perl.org/
description: Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.
name: perl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14822
type: software_Package
supplied by: SPDXRef-gnrtd14849
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment.
name: java-11-openjdk
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0