type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20786
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20787
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21177
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21178
from: gpars
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21187
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21188
from: jakarta-server-pages-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20230
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20231
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20981
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20982
from: glassfish-jsp-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17541
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd17542
from: jansi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21180
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21181
from: gpars
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21062
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: xstream
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20071
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20072
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51756
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51757
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17538
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd17539
from: jansi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20075
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20076
from: bsf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20017
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20018
from: ant-antlr
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20068
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20069
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20233
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20234
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51759
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51760
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20984
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20985
from: glassfish-jsp-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51752
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51753
from: groovy18-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51749
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51750
from: groovy18-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20297
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10431
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20078
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20079
from: bsf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21190
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21191
from: jakarta-server-pages-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19988
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19989
from: ant-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20783
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20784
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20014
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20015
from: ant-antlr
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21072
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21073
from: apache-ivy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51724
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: jline1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51726
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: jline1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21064
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: xstream
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20219
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20220
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20547
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20548
from: ant-junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20550
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20551
from: ant-junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21075
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21076
from: apache-ivy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20222
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20223
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20299
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10431
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19985
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19986
from: ant-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51735
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xstream
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51729
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51741
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-junit
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51717
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jline1
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51734
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bsf
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51731
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-ivy
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51732
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51737
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-jsp-api
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51730
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jansi
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51754
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-lib
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51739
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-antlr
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51727
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-cli
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51733
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: junit
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51736
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51742
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: groovy18-lib
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51755
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-server-pages-api
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51740
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpars
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51738
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-servlet-api
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51728
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-servlet
from: groovy18
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20076
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20551
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20982
type: simplelicensing_LicenseExpression
simplelicensing license expression: (CDDL-1.1 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20787
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19989
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and EPL-1.0 and Public Domain and CC-BY-2.5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21076
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20079
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17542
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20072
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21191
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10431
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20223
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20548
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20231
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20784
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20234
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20015
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21188
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20220
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51753
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and EPL-1.0 and Public Domain and CC-BY-2.5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20018
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51750
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and EPL-1.0 and Public Domain and CC-BY-2.5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21178
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21073
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17539
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20069
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19986
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20985
type: simplelicensing_LicenseExpression
simplelicensing license expression: (CDDL-1.1 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21181
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51757
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and EPL-1.0 and Public Domain and CC-BY-2.5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51758
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20070
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20298
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20221
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21179
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19987
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21189
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20077
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20016
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20549
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20785
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51751
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20983
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21063
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17540
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51725
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21074
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20232
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20284
type: software_Package
supplied by: SPDXRef-gnrtd20298
name: junit
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java package for unit testing frameworks
software package version: 1:4.13.2-2.oe2403sp4
software home page: http://www.junit.org/
description: JUnit is a simple framework to write repeatable tests. It is an instance of the xUnit architecture for unit testing frameworks.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit-dep@4.13.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit@4.13.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19996
type: software_Package
supplied by: SPDXRef-gnrtd20016
name: ant-antlr
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Optional antlr tasks for ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Optional antlr tasks for ant.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-antlr@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51718
type: software_Package
supplied by: SPDXRef-gnrtd51725
name: jline1
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java library for reading and editing user input in console applications
software package version: 0:1.0-2.oe2403sp4
software home page: http://jline.sourceforge.net/
description: JLine is a java library for reading and editing user input in console applications. It features tab-completion, command history, password masking, configurable key-bindings, and pass-through handlers to use to chain to other console applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jline/jline@1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jline/jline@1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19981
type: software_Package
supplied by: SPDXRef-gnrtd19987
name: ant-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Core part of Apache Ant that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-bootstrap@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/ant/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-launcher@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/ant/ant-launcher@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-nodeps@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20061
type: software_Package
supplied by: SPDXRef-gnrtd20077
name: bsf
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Bean Scripting Framework
software package version: 0:2.4.0-32.oe2403sp4
software home page: http://commons.apache.org/bsf/
description: Bean Scripting Framework (BSF) is a set of Java classes which provides scripting language support within Java applications, and access to Java objects and methods from scripting languages. The two primary components of BSF are the BSFManager and the BSFEngine. The BSFManager handles all scripting execution engines running under its control, and maintains the object registry that permits scripts access to Java objects. By creating an instance of the BSFManager class, a Java application can gain access to scripting services. The BSFEngine provides an interface that must be implemented for a language to be used by BSF. This interface provides an abstraction of the scripting language's capabilities that permits generic handling of script execution and object registration within the execution context of the scripting language engine. An application can instantiate a single BSFManager, and execute several different scripting languages identically via the BSFEngine interface. Furthermore, all of the scripting languages handled by the BSFManager are aware of the objects registered with that BSFManager, and the execution state of those scripting languages is maintained for the lifetime of the BSFManager.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.bsf/bsf@2.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/bsf/bsf@2.4.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20226
type: software_Package
supplied by: SPDXRef-gnrtd20232
name: glassfish-servlet-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API of Java Servlet
software package version: 0:3.1.0-17.oe2403sp4
software home page: http://servlet-spec.java.net
description: Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform. It is the foundation web specification in the Java Enterprise Platform. Developers can build web applications using the Servlet API to interact with the request/response workflow. This package provides some classes and interfaces which define and describe the contracts between a servlet class and the runtime environment provided for an instance of such a class.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20540
type: software_Package
supplied by: SPDXRef-gnrtd20549
name: ant-junit
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Optional junit tasks for ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Optional junit tasks for ant.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-junit4@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-junit@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20215
type: software_Package
supplied by: SPDXRef-gnrtd20221
name: jakarta-servlet
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Server-side API for handling HTTP requests and responses
software package version: 0:5.0.0-4.oe2403sp4
software home page: https://github.com/eclipse-ee4j/servlet-api
description: Jakarta Servlet defines a server-side API for handling HTTP requests and responses.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@5.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17513
type: software_Package
supplied by: SPDXRef-gnrtd17540
name: jansi
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jansi is a java library for generating and interpreting ANSI escape sequences
software package version: 0:1.17.1-2.oe2403sp4
software home page: http://fusesource.github.io/jansi/
description: Jansi is a small ASl 2.0 licensed Java library that allows you to use ANSI escape sequences to format your console output which works even on windows.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fusesource.jansi/jansi@1.17.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21094
type: software_Package
supplied by: SPDXRef-gnrtd21179
name: gpars
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Groovy Parallel Systems
software package version: 0:1.2.1-13.oe2403sp4
software home page: https://github.com/GPars/GPars
description: The GPars framework (http://www.gpars.org) offers Java developers intuitive and safe ways to handle Java or Groovy tasks concurrently. Leveraging the enormous flexibility of the Groovy programing language and building on proven Java technologies, we aim to make concurrent programming for multi-core hardware intuitive, robust and enjoyable.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.gpars/gpars@1.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51716
type: software_Package
supplied by: SPDXRef-gnrtd51758
software download location: NOASSERTION
summary: Dynamic language for the Java Platform
software package version: 0:1.8.9-5.oe2403sp4
software home page: http://groovy-lang.org
description: Groovy is an agile and dynamic language for the Java Virtual Machine, built upon Java with features inspired by languages like Python, Ruby and Smalltalk. It seamlessly integrates with all existing Java objects and libraries and compiles straight to Java byte-code so you can use it anywhere you can use Java.
name: groovy18
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51743
type: software_Package
supplied by: SPDXRef-gnrtd51751
name: groovy18-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Groovy JAR artifact
software package version: 0:1.8.9-5.oe2403sp4
software home page: http://groovy-lang.org
description: This package contains Groovy JAR artifact.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy18@1.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-all@1.8.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy@1.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy18@1.8.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy18-all@1.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy@1.8.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-all@1.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy18-all@1.8.9
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20779
type: software_Package
supplied by: SPDXRef-gnrtd20785
name: apache-commons-cli
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: CLI Library provides an API for Java
software package version: 0:1.4-7.oe2403sp4
software home page: http://commons.apache.org/cli/
description: The Apache Commons CLI library provides an API for parsing command line options passed to programs. It's also able to print help messages detailing the options available for a command line tool.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-cli@1.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-cli/commons-cli@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21068
type: software_Package
supplied by: SPDXRef-gnrtd21074
name: apache-ivy
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java-based dependency manager
software package version: 0:2.4.0-18.oe2403sp4
software home page: https://ant.apache.org/ivy/
description: Apache Ivy is a popular dependency manager focusing on flexibility and simplicity.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ivy/ivy@2.4.0.local.20260613181559
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jayasoft/ivy@2.4.0.local.20260613181559
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20974
type: software_Package
supplied by: SPDXRef-gnrtd20983
name: glassfish-jsp-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Glassfish J2EE JSP API specification
software package version: 0:2.3.3-3.oe2403sp4
software home page: https://github.com/javaee/javaee-jsp-api
description: This project provides a container independent specification of JSP 2.2.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/jsp-api@2.3.4.SNAPSHOT
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.4.SNAPSHOT
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21183
type: software_Package
supplied by: SPDXRef-gnrtd21189
name: jakarta-server-pages-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jakarta Server Pages (JSP) API
software package version: 0:2.3.6-1.oe2403sp4
software home page: https://github.com/eclipse-ee4j/jsp-api
description: Jakarta Server Pages provides a container-independent implementation of the JSP API. This package contains the API only.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet.jsp/jsp-api@2.3.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/jsp-api@2.3.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@2.3.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20064
type: software_Package
supplied by: SPDXRef-gnrtd20070
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21039
type: software_Package
supplied by: SPDXRef-gnrtd21063
name: xstream
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java XML serialization library
software package version: 0:1.4.20-2.oe2403sp4
software home page: http://x-stream.github.io/
description: XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for large object graphs or systems with high message throughput. No information is duplicated that can be obtained via reflection. This results in XML that is easier to read for humans and more compact than native Java serialization. XStream serializes internal fields, including private and final. Supports non-public and inner classes. Classes are not required to have default constructor. Duplicate references encountered in the object-model will be maintained. Supports circular references. By implementing an interface, XStream can serialize directly to/from any tree structure (not just XML). Strategies can be registered allowing customization of how particular types are represented as XML. When an exception occurs due to malformed XML, detailed diagnostics are provided to help isolate and fix the problem.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.thoughtworks.xstream/xstream@1.4.20
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0