type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd51146
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51147
from: maven-resolver-connector-basic
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56777
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56778
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20752
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20753
from: maven-resolver-spi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51189
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: jsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20690
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20691
from: maven-resolver-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51246
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51247
from: maven-resolver-transport-wagon
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56780
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56781
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20775
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20776
from: maven-resolver-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51249
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51250
from: maven-resolver-transport-wagon
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56751
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56752
from: maven-wagon-http-lightweight
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20926
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10431
from: sisu-inject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56775
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd56776
from: maven-resolver-transport-file
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20766
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20767
from: maven-resolver-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20763
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20764
from: maven-resolver-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56772
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56773
from: maven-resolver-transport-file
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56748
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd56749
from: maven-wagon-http-lightweight
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10431
from: sisu-inject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20772
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20773
from: maven-resolver-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20693
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20694
from: maven-resolver-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20749
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20750
from: maven-resolver-spi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51149
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51150
from: maven-resolver-connector-basic
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51191
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: jsoup
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56758
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56753
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56757
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56765
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-transport-file
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56755
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jsoup
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56761
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-impl
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56739
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-wagon-http-lightweight
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56759
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-api
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56762
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-connector-basic
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56738
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56756
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sisu-inject
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56754
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-util
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56760
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56764
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-transport-wagon
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56763
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-spi
from: import-properties-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20753
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20764
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56776
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51150
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20773
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20691
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51147
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10431
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20776
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51247
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56773
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20767
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56749
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56781
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56752
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20694
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56778
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20750
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51250
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20751
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56774
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20925
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20774
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56779
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56750
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20692
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51148
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51190
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20765
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51248
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51185
type: software_Package
supplied by: SPDXRef-gnrtd51190
name: jsoup
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java HTML Parser
software package version: 0:1.14.2-2.oe2403sp4
software home page: http://jsoup.org/
description: jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jsoup/jsoup@1.14.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20744
type: software_Package
supplied by: SPDXRef-gnrtd20751
name: maven-resolver-spi
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver SPI
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: The service provider interface for repository system implementations and repository connectors.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-spi@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56766
type: software_Package
supplied by: SPDXRef-gnrtd56774
name: maven-resolver-transport-file
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Transport File
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: A transport implementation for repositories using file:// URLs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-transport-file@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20758
type: software_Package
supplied by: SPDXRef-gnrtd20765
name: maven-resolver-util
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Utilities
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: A collection of utility classes to ease usage of the repository system.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-util@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56740
type: software_Package
supplied by: SPDXRef-gnrtd56750
name: maven-wagon-http-lightweight
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: the maven-wagon http-lightweight module
software package version: 0:3.1.0-3.oe2403sp4
software home page: http://maven.apache.org/wagon
description: the maven-wagon http-lightweight module.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.wagon/wagon-http-lightweight@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51238
type: software_Package
supplied by: SPDXRef-gnrtd51248
name: maven-resolver-transport-wagon
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Transport Wagon
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: A transport implementation based on Maven Wagon.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-transport-wagon@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51139
type: software_Package
supplied by: SPDXRef-gnrtd51148
name: maven-resolver-connector-basic
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Connector Basic
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: A repository connector implementation for repositories using URI-based layouts.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-connector-basic@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20686
type: software_Package
supplied by: SPDXRef-gnrtd20692
name: maven-resolver-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver API
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: The application programming interface for the repository system.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-api@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20755
type: software_Package
supplied by: SPDXRef-gnrtd20774
name: maven-resolver-impl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Implementation
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: An implementation of the repository system.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-impl@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20886
type: software_Package
supplied by: SPDXRef-gnrtd20925
name: sisu-inject
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: inject package for sisu
software package version: 1:0.3.5-1.oe2403sp4
software home page: https://eclipse.org/sisu
description: inject package for sisu
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.sisu/sisu-inject-plexus@0.3.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd56737
type: software_Package
supplied by: SPDXRef-gnrtd56779
name: import-properties-plugin
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: istack-commons import properties plugin
software package version: 0:3.0.7-1.oe2403sp4
software home page: http://istack-commons.java.net
description: The Import-properties-plugin contains the istack-commons import properties for Maven Mojo.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun.istack/import-properties-plugin@3.0.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0