type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21491
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21492
from: avalon-framework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21350
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25802
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: bouncycastle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21347
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5809
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20230
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20231
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21488
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21489
from: avalon-framework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21335
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21336
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60025
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60026
from: jets3t
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21009
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21010
from: apache-commons-codec
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14847
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd14848
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47365
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd47366
from: geronimo-jms
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20071
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20072
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21483
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21484
from: avalon-logkit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58676
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd58677
from: java-base64
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60029
from: jets3t
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5811
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47368
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd47369
from: geronimo-jms
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21480
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21481
from: avalon-logkit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25800
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: bouncycastle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20068
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20069
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20233
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20234
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20101
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20102
from: log4j12
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5202
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5203
from: BareBonesBrowserLaunch
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2967
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2968
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60054
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60055
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58673
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd58674
from: java-base64
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58910
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd58911
from: java-xmlbuilder
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5205
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5206
from: BareBonesBrowserLaunch
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58913
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd58914
from: java-xmlbuilder
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21012
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21013
from: apache-commons-codec
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20098
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20099
from: log4j12
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20219
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20220
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60051
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60052
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14850
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd14851
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2964
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2965
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20222
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20223
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21332
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21333
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60043
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60047
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-core
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60034
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60045
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-client
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60041
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: avalon-logkit
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60040
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jets3t
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60042
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-base64
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60050
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-servlet-api
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60048
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: geronimo-jms
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60037
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bouncycastle
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60033
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: avalon-framework
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60049
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: log4j12
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60032
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60036
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-codec
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60046
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: BareBonesBrowserLaunch
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60031
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60039
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60038
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-tools
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60044
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-xmlbuilder
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60035
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-servlet
from: jets3t-app
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60052
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47369
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5203
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20099
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60026
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60029
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21333
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58911
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20102
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21010
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58674
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21013
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20072
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21489
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20223
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21481
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20231
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21347
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14851
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21350
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2968
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20234
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21492
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20220
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58914
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14848
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5206
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60055
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58677
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47366
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20069
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21484
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21336
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2965
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20070
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20221
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21011
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20100
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58912
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60053
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21334
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2966
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5204
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21490
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25801
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21482
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5810
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58675
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20232
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47367
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14849
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20092
type: software_Package
supplied by: SPDXRef-gnrtd20100
name: log4j12
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A logging library for Java
software package version: 0:1.2.17-26.oe2403sp4
software home page: http://logging.apache.org/log4j/1.2/
description: With log4j it is possible to enable logging at runtime without modifying the application binary.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.14
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.13
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.15
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.16
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59993
type: software_Package
supplied by: SPDXRef-gnrtd60027
name: jets3t
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java interface to Amazon S3 and CloudFront services
software package version: 0:0.9.3-1.oe2403sp4
software home page: http://jets3t.s3.amazonaws.com/index.html
description: The JetS3t toolkit provides Java programmers with an API for interacting and managing data stored in Amazon Simple Storage Service and Amazon CloudFront content delivery network.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.java.dev.jets3t/cockpitlite@0.9.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.java.dev.jets3t/jets3t@0.9.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.java.dev.jets3t/jets3t-gui@0.9.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.java.dev.jets3t/synchronize@0.9.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.java.dev.jets3t/uploader@0.9.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.java.dev.jets3t/cockpit@0.9.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58905
type: software_Package
supplied by: SPDXRef-gnrtd58912
name: java-xmlbuilder
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: XML Builder Java library for creating XML documents
software package version: 0:1.1-1.oe2403sp4
software home page: https://github.com/jmurty/java-xmlbuilder
description: XML Builder is a utility that creates simple XML documents using relatively sparse Java code. It is intended to allow for quick and painless creation of XML documents where you might otherwise be tempted to use concatenated strings, and where you would rather not face the tedium and verbosity of coding with JAXP.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58669
type: software_Package
supplied by: SPDXRef-gnrtd58675
name: java-base64
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java class providing Base64 encoding and decoding
software package version: 0:2.3.8-16.oe2403sp4
software home page: http://iharder.net/base64/
description: This is a Public Domain Java class providing very fast Base64 encoding and decoding in the form of convenience methods and input/output streams.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.iharder/base64@2.3.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5803
type: software_Package
supplied by: SPDXRef-gnrtd5810
name: javapackages-tools
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Support for Java packaging with macros and scripts
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-tools package contains macros and scripts to support Java packaging.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/sun.jdk/jconsole@SYSTEM
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun/tools@SYSTEM
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20226
type: software_Package
supplied by: SPDXRef-gnrtd20232
name: glassfish-servlet-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API of Java Servlet
software package version: 0:3.1.0-17.oe2403sp4
software home page: http://servlet-spec.java.net
description: Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform. It is the foundation web specification in the Java Enterprise Platform. Developers can build web applications using the Servlet API to interact with the request/response workflow. This package provides some classes and interfaces which define and describe the contracts between a servlet class and the runtime environment provided for an instance of such a class.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25793
type: software_Package
supplied by: SPDXRef-gnrtd25801
name: bouncycastle
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java implementation of cryptographic algorithms
software package version: 0:1.67-2.oe2403sp4
software home page: http://www.bouncycastle.org
description: The package is organised so that it contains a light-weight API suitable for use in any environment (including the newly released J2ME) with the additional infrastructure to conform the algorithms to the JCE framework.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk15@1.67
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20215
type: software_Package
supplied by: SPDXRef-gnrtd20221
name: jakarta-servlet
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Server-side API for handling HTTP requests and responses
software package version: 0:5.0.0-4.oe2403sp4
software home page: https://github.com/eclipse-ee4j/servlet-api
description: Jakarta Servlet defines a server-side API for handling HTTP requests and responses.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@5.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21474
type: software_Package
supplied by: SPDXRef-gnrtd21490
name: avalon-framework
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java components interfaces
software package version: 0:4.3-25.oe2403sp4
software home page: http://avalon.apache.org/
description: Apache Avalon provided Java software for component and container programming and pioneered the use of design patterns such as Inversion of Control (IoC) and Separation of Concerns (SoC).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/avalon-framework/avalon-framework-api@4.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/avalon-framework/avalon-framework-impl@4.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.avalon.framework/avalon-framework-impl@4.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5198
type: software_Package
supplied by: SPDXRef-gnrtd5204
name: BareBonesBrowserLaunch
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Simple library to launch a browser window from Java
software package version: 0:3.1-1.oe2403sp4
software home page: http://www.centerkey.com/java/browser/
description: Utility class to open a web page from a Swing application in the user's default browser. Supports: Mac OS X, GNU/Linux, Unix, Windows XP
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.centerkey.utils/BareBonesBrowserLaunch@3.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21338
type: software_Package
supplied by: SPDXRef-gnrtd21348
name: httpcomponents-client
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of components for building client side HTTP services
software package version: 0:4.5.5-7.oe2403sp4
software home page: http://hc.apache.org/
description: HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by httpcomponents HttpCore,which provides reusable components for HTTP state management, HTTP connection management, and client-side authentication. HttpComponents Client is almost equalto Commons HttpClient 3.x. Users of Commons HttpClient strongly support it.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpmime@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpclient@4.5.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21328
type: software_Package
supplied by: SPDXRef-gnrtd21334
name: httpcomponents-core
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Set of low level Java HTTP transport components for HTTP services
software package version: 0:4.4.15-1.oe2403sp4
software home page: http://hc.apache.org/
description: HttpCore is a set of low level HTTP transport components that can be used to build custom client and server side HTTP services with a minimal footprint. HttpCore supports two I/O models: blocking I/O model based on the classic Java I/O and non-blocking, event driven I/O model based on Java NIO.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore@4.4.15
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1940
type: software_Package
supplied by: SPDXRef-gnrtd2966
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8.
name: java-1.8.0-openjdk
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60030
type: software_Package
supplied by: SPDXRef-gnrtd60053
software download location: NOASSERTION
summary: Graphical and command-line tools for Amazon S3 and CloudFront
software package version: 0:0.9.3-1.oe2403sp4
software home page: http://jets3t.s3.amazonaws.com/index.html
description: The JetS3t toolkit provides Java programmers with an API for interacting and managing data stored in Amazon Simple Storage Service and Amazon CloudFront content delivery network. Features: - jets3t-cockpitlite: A graphical application that Service Providers with S3 accounts may provide to clients or customers without S3 accounts. jets3t-cockpitlite allows users to manage the content of an S3 account to upload files, download files, delete S3 objects and make objects publicly accessible. All these operations are mediated by a Gatekeeper service. - jets3t-cockpit: graphical application for transferring files, viewing and managing the contents of an Amazon S3 account. - jets3t-synchronize: A command-line application for synchronizing directories on your computer with an Amazon S3 account. Ideal for performing back-ups or synchronizing files between different computers. - jets3t-uploader: A graphical application that Service Providers with S3 accounts may provide to clients or customers without S3 accounts. jets3t-uploader allows users to upload files to S3 using a simple wizard-based work-flow, but all uploads must first be authorized by a Gatekeeper service - gatekeeper: A servlet that acts as an authorization service running on a Service Provider's server to mediate access to S3 accounts. It processes requests from client applications such as JetS3t Uploader & CockpitLite, and authorizes the client application to perform operations such as uploads, downloads and deletes.
name: jets3t-app
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47361
type: software_Package
supplied by: SPDXRef-gnrtd47367
name: geronimo-jms
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Geronimo Jms
software package version: 0:1.1.1-29.oe2403sp4
software home page: http://geronimo.apache.org/
description: Geronimo-jms is a messaging standard that allows application components based on the Java 2 Platform.It Enterprises Edition(J2EE) to create, send, receive, and read messages.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.jms/jms@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20064
type: software_Package
supplied by: SPDXRef-gnrtd20070
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14822
type: software_Package
supplied by: SPDXRef-gnrtd14849
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment.
name: java-11-openjdk
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21476
type: software_Package
supplied by: SPDXRef-gnrtd21482
name: avalon-logkit
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java logging toolkit
software package version: 0:2.1-35.oe2403sp4
software home page: http://avalon.apache.org/
description: LogKit is a logging framework built to be simple to get started with, efficient to execute, safe for shipping code, and extensible for flexibility.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/avalon-logkit/avalon-logkit@2.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/logkit/logkit@2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21005
type: software_Package
supplied by: SPDXRef-gnrtd21011
name: apache-commons-codec
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache common encoders and decoders
software package version: 0:1.11-6.oe2403sp4
software home page: http://commons.apache.org/codec/
description: Apache Commons Codec (TM) software provides implementations of common encoders and decoders such as Base64, Hex, Phonetic and URLs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-codec/commons-codec@1.11
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0