type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd21349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21350
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23195
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23196
from: jetty-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21347
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20230
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20231
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23207
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23208
from: jetty-continuation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72302
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72303
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23147
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23148
from: jetty-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72123
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72124
from: lucene-facet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21335
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21336
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72299
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd72300
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23367
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23368
from: lucene
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23198
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23199
from: jetty-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20071
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20072
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23174
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23175
from: jetty-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23210
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23211
from: jetty-continuation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23165
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23166
from: jetty-http
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20068
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20069
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20233
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20234
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23177
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23178
from: jetty-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23155
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23156
from: jetty-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23144
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23145
from: jetty-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23370
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23371
from: lucene
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23168
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23169
from: jetty-http
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20219
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20220
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23152
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23153
from: jetty-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20222
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20223
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21332
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21333
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72126
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72127
from: lucene-facet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72285
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-io
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72292
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lucene-facet
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72295
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-client
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72297
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-servlet-api
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72286
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-http
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72290
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72287
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-continuation
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72294
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lucene
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72289
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72283
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72288
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72284
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-server
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72293
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-core
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72291
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-servlet
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72296
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-util
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72298
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-servlet
from: lucene-replicator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23175
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23178
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72127
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23153
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23169
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23371
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21333
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23208
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20072
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23145
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((EPL-1.0 OR Apache-2.0) AND MIT)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20223
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20231
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21347
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21350
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20234
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20220
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72124
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23211
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23156
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23199
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72300
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23196
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23148
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND (EPL-1.0 OR Apache-2.0))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72303
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20069
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23368
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23166
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21336
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20070
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20221
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23167
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72301
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72125
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23146
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21334
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23176
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23369
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20232
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23209
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23197
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23154
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20226
type: software_Package
supplied by: SPDXRef-gnrtd20232
name: glassfish-servlet-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API of Java Servlet
software package version: 0:3.1.0-17.oe2403sp4
software home page: http://servlet-spec.java.net
description: Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform. It is the foundation web specification in the Java Enterprise Platform. Developers can build web applications using the Servlet API to interact with the request/response workflow. This package provides some classes and interfaces which define and describe the contracts between a servlet class and the runtime environment provided for an instance of such a class.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20215
type: software_Package
supplied by: SPDXRef-gnrtd20221
name: jakarta-servlet
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Server-side API for handling HTTP requests and responses
software package version: 0:5.0.0-4.oe2403sp4
software home page: https://github.com/eclipse-ee4j/servlet-api
description: Jakarta Servlet defines a server-side API for handling HTTP requests and responses.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@5.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23138
type: software_Package
supplied by: SPDXRef-gnrtd23154
name: jetty-io
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: io module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains io module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-io@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21338
type: software_Package
supplied by: SPDXRef-gnrtd21348
name: httpcomponents-client
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of components for building client side HTTP services
software package version: 0:4.5.5-7.oe2403sp4
software home page: http://hc.apache.org/
description: HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by httpcomponents HttpCore,which provides reusable components for HTTP state management, HTTP connection management, and client-side authentication. HttpComponents Client is almost equalto Commons HttpClient 3.x. Users of Commons HttpClient strongly support it.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpmime@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpclient@4.5.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23136
type: software_Package
supplied by: SPDXRef-gnrtd23176
name: jetty-server
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: server module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains server module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-server@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23140
type: software_Package
supplied by: SPDXRef-gnrtd23146
name: jetty-util
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: util module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains util module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-util@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21328
type: software_Package
supplied by: SPDXRef-gnrtd21334
name: httpcomponents-core
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Set of low level Java HTTP transport components for HTTP services
software package version: 0:4.4.15-1.oe2403sp4
software home page: http://hc.apache.org/
description: HttpCore is a set of low level HTTP transport components that can be used to build custom client and server side HTTP services with a minimal footprint. HttpCore supports two I/O models: blocking I/O model based on the classic Java I/O and non-blocking, event driven I/O model based on Java NIO.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore@4.4.15
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23363
type: software_Package
supplied by: SPDXRef-gnrtd23369
name: lucene
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: High-performance, full-featured text search engine
software package version: 0:7.7.0-3.oe2403sp4
software home page: http://lucene.apache.org/
description: Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.lucene/lucene-core@7.7.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23190
type: software_Package
supplied by: SPDXRef-gnrtd23197
name: jetty-servlet
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: servlet module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains servlet module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20064
type: software_Package
supplied by: SPDXRef-gnrtd20070
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72282
type: software_Package
supplied by: SPDXRef-gnrtd72301
name: lucene-replicator
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Lucene Replicator Module
software package version: 0:7.7.0-3.oe2403sp4
software home page: http://lucene.apache.org/
description: Lucene Replicator Module.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.lucene/lucene-replicator@7.7.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23203
type: software_Package
supplied by: SPDXRef-gnrtd23209
name: jetty-continuation
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: continuation module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains continuation module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23159
type: software_Package
supplied by: SPDXRef-gnrtd23167
name: jetty-http
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: http module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains http module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-http@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72117
type: software_Package
supplied by: SPDXRef-gnrtd72125
name: lucene-facet
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Lucene Facets Module
software package version: 0:7.7.0-3.oe2403sp4
software home page: http://lucene.apache.org/
description: Package for Faceted Indexing and Search.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.lucene/lucene-facet@7.7.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0