type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd26795
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: tomcat
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60372
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60373
from: jetty-javax-websocket-server-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20919
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20920
from: cdi-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60088
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60089
from: jetty-plus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60091
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60092
from: jetty-plus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23147
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23148
from: jetty-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39960
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd39961
from: weld-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39963
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd39964
from: weld-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26797
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: tomcat
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60297
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60298
from: jetty-websocket-common
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23883
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23884
from: glassfish-annotation-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60523
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60524
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23886
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23887
from: glassfish-annotation-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60115
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60116
from: jetty-deploy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60375
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60376
from: jetty-javax-websocket-server-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23144
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23145
from: jetty-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20922
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20923
from: cdi-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60300
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60301
from: jetty-websocket-common
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60118
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60119
from: jetty-deploy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60520
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60521
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60508
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-plus
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60511
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60516
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60513
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: weld-core
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60512
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cdi-api
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60514
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-deploy
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60510
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60519
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-websocket-common
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60515
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-javax-websocket-server-impl
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60518
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-util
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60517
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60509
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-annotation-api
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60301
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60524
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60521
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60119
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23887
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-with-classpath-exception OR CDDL-1.1)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60298
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60089
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20923
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20920
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23145
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((EPL-1.0 OR Apache-2.0) AND MIT)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60376
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60092
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39964
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and (CDDL-1.0 or GPLv2 with exceptions) and LGPLv2+ and MIT and OFL-1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60116
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60373
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39961
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and (CDDL-1.0 or GPLv2 with exceptions) and LGPLv2+ and MIT and OFL-1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23148
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND (EPL-1.0 OR Apache-2.0))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23884
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-with-classpath-exception OR CDDL-1.1)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26796
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20921
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60374
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23885
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60299
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23146
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60090
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60117
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39962
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60522
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26785
type: software_Package
supplied by: SPDXRef-gnrtd26796
name: tomcat
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.118-1.oe2403sp4
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.118
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60507
type: software_Package
supplied by: SPDXRef-gnrtd60522
name: jetty-cdi
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jetty CDI Configuration
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains Jetty CDI Configuration.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-2@9.4.16.v20190411
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-websocket@9.4.16.v20190411
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-core@9.4.16.v20190411
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-servlet@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20894
type: software_Package
supplied by: SPDXRef-gnrtd20921
name: cdi-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API for CDI
software package version: 0:1.2-10.oe2403sp4
software home page: http://seamframework.org/Weld
description: Contexts and Dependency Injection for Java EE which is called APIs for JSR-299.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.enterprise/cdi-api@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60109
type: software_Package
supplied by: SPDXRef-gnrtd60117
name: jetty-deploy
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: deploy module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains deploy module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-deploy@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23140
type: software_Package
supplied by: SPDXRef-gnrtd23146
name: jetty-util
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: util module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains util module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-util@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39926
type: software_Package
supplied by: SPDXRef-gnrtd39962
name: weld-core
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Reference Implementation for JSR-299: Contexts and Dependency Injection (CDI)
software package version: 0:2.3.5-4.oe2403sp4
software home page: http://weld.cdi-spec.org/
description: Weld is the reference implementation (RI) for JSR-299: Java Contexts and Dependency Injection for the Java EE platform (CDI). CDI is the Java standard for dependency injection and contextual lifecycle management, and integrates cleanly with the Java EE platform. Any Java EE 6-compliant application server provides support for JSR-299 (even the web profile).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core-impl@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.servlet/weld-servlet@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.se/weld-se@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.servlet/weld-servlet-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core-test-common@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.se/weld-se-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.environment/weld-environment-common@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.probe/weld-probe-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core-jsf@2.3.5.Final
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60281
type: software_Package
supplied by: SPDXRef-gnrtd60299
name: jetty-websocket-common
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: websocket-common module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains websocket-common module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23879
type: software_Package
supplied by: SPDXRef-gnrtd23885
name: glassfish-annotation-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java(TM) Specification APIs
software package version: 0:1.2-17.oe2403sp4
software home page: http://glassfish.java.net/
description: This package is a general annotations API for the Java platform (JSR 250).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.annotation/javax.annotation-api@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60072
type: software_Package
supplied by: SPDXRef-gnrtd60090
name: jetty-plus
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: plus module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains plus module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-plus@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60351
type: software_Package
supplied by: SPDXRef-gnrtd60374
name: jetty-javax-websocket-server-impl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: javax-websocket-server-impl module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains javax-websocket-server-impl module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.websocket/javax-websocket-server-impl@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0