type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd21428
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21429
from: plexus-velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21385
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21386
from: maven-doxia-sink-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21696
from: maven-reporting-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21678
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21679
from: maven-doxia-sitetools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21692
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21693
from: maven-reporting-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21405
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21406
from: apache-commons-collections
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21382
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21383
from: maven-doxia-sink-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61484
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd61485
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21414
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21415
from: velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34684
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd34685
from: checkstyle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21431
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21432
from: plexus-velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21408
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21409
from: apache-commons-collections
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20834
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20835
from: plexus-containers-component-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22628
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: plexus-resources
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21681
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21682
from: maven-doxia-sitetools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21417
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21418
from: velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20837
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20838
from: plexus-containers-component-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21589
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21590
from: maven-reporting-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20827
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20828
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20824
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20825
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21586
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21587
from: maven-reporting-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34681
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd34682
from: checkstyle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61487
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd61488
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22630
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: plexus-resources
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61477
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61480
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-resources
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61483
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-containers-component-annotations
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61479
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: checkstyle
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61473
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61468
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-reporting-impl
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61481
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-collections
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61478
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61469
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-reporting-api
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61474
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: velocity
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61470
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61471
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-doxia-sitetools
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61482
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interpolation
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61475
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61476
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-velocity
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61472
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-doxia-sink-api
from: maven-checkstyle-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21590
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21696
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21432
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21386
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21682
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21679
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21415
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21383
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21587
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61485
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21409
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61488
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21429
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34682
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20825
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34685
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20835
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20828
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21418
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21693
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20838
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21680
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21407
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21416
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22629
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21588
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21384
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61486
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34683
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20826
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21430
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20836
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21307
type: software_Package
supplied by: SPDXRef-gnrtd21694
name: maven-reporting-impl
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Abstract classes to manage report generation
software package version: 0:3.0.0-6.oe2403sp4
software home page: http://maven.apache.org/shared/maven-reporting-impl/
description: Abstract classes to manage report generation, which can be run both: * as part of a site generation, as a maven-reporting-api's MavenReport, * or as a direct standalone goal invocation, as a maven-plugin-api's Mojo.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20820
type: software_Package
supplied by: SPDXRef-gnrtd20826
name: plexus-interpolation
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interpolation API
software package version: 0:1.26-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interpolation
description: Plexus interpolator is the outgrowth of multiple iterations of development focused on providing a more modular, flexible interpolation framework for the expression language style commonly seen in Maven, Plexus, and other related projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22622
type: software_Package
supplied by: SPDXRef-gnrtd22629
name: plexus-resources
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Resource Manager
software package version: 0:1.0-0.25.a7.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-resources
description: The Plexus project aspire to create end-to-end tools for writing applications. the container is the core which can be embedded or for a full scale application server.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-resources@1.0.alpha.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21401
type: software_Package
supplied by: SPDXRef-gnrtd21407
name: apache-commons-collections
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A series of new interfaces,implementations and utilities provided for Java Collections
software package version: 0:3.2.2-11.oe2403sp4
software home page: http://commons.apache.org/collections/
description: The Java Collections Framework was a major addition in JDK 1.2. It added many powerful data structures that accelerate development of most significant Java applications. Since that time it has become the recognised standard for collection handling in Java. Commons-Collections seek to build upon the JDK classes by providing new interfaces, implementations and utilities. There are many features, including: - Bag interface for collections that have a number of copies of each object - BidiMap interface for maps that can be looked up from value to key as well and key to value - MapIterator interface to provide simple and quick iteration over maps - Transforming decorators that alter each object as it is added to the collection - Composite collections that make multiple collections look like one - Ordered maps and sets that retain the order elements are added in, including an LRU based map - Reference map that allows keys and/or values to be garbage collected under close control - Many comparator implementations - Many iterator implementations - Adapter classes from array and enumerations to collections - Utilities to test or create typical set-theory properties of collections such as union, intersection, and closure
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-collections/commons-collections@3.2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21399
type: software_Package
supplied by: SPDXRef-gnrtd21416
name: velocity
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java-based template engine
software package version: 0:1.7-26.oe2403sp4
software home page: http://velocity.apache.org/
description: Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the Model-View-Controller (MVC) model, meaning that web page designers can focus solely on creating a site that looks good, and programmers can focus solely on writing top-notch code. Velocity separates Java code from the web pages, making the web site more maintainable over the long run and providing a viable alternative to Java Server Pages (JSPs) or PHP. Velocity's capabilities reach well beyond the realm of web sites; for example, it can generate SQL and PostScript and XML from templates. It can be used either as a standalone utility for generating source code and reports, or as an integrated component of other systems. Velocity also provides template services for the Turbine web application framework. Velocity+Turbine provides a template service that will allow web applications to be developed according to a true MVC model.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.velocity/velocity@1.7
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/velocity/velocity@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21309
type: software_Package
supplied by: SPDXRef-gnrtd21680
name: maven-doxia-sitetools
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Doxia content generation framework
software package version: 0:1.7.5-5.oe2403sp4
software home page: https://maven.apache.org/doxia/
description: Doxia is a content generation framework which aims to provide its users with powerful techniques for generating static and dynamic content: Doxia can be used in web-based publishing context to generate static sites, in addition to being incorporated into dynamic content generation systems like blogs, wikis and content management systems.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-doc-renderer@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-doxia-tools@1.7.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd34669
type: software_Package
supplied by: SPDXRef-gnrtd34683
name: checkstyle
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java source code checker
software package version: 0:8.0-2.oe2403sp4
software home page: http://checkstyle.sourceforge.net/
description: A tool for checking Java source code for adherence to a set of rules.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.puppycrawl.tools/checkstyle@8.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61467
type: software_Package
supplied by: SPDXRef-gnrtd61486
name: maven-checkstyle-plugin
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plugin that generates a report regarding the code style used by the developers
software package version: 0:3.0.0-1.oe2403sp4
software home page: https://maven.apache.org/plugins/maven-checkstyle-plugin
description: Generates a report on violations of code style and optionally fails the build if violations are detected.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.plugins/maven-checkstyle-plugin@3.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21421
type: software_Package
supplied by: SPDXRef-gnrtd21430
name: plexus-velocity
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Velocity Component
software package version: 0:1.2-6.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-velocity/
description: This package provides Plexus Velocity component - a wrapper for Apache Velocity template engine, which allows easy use of Velocity by applications built on top of Plexus container.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-velocity@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20830
type: software_Package
supplied by: SPDXRef-gnrtd20836
name: plexus-containers-component-annotations
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Component API from plexus-containers
software package version: 0:1.7.1-7.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-containers
description: plexus-component-annotations provides the Java 5 annotations for plexus components.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21581
type: software_Package
supplied by: SPDXRef-gnrtd21588
name: maven-reporting-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API to manage report generation
software package version: 0:3.0-17.oe2403sp4
software home page: http://maven.apache.org/shared/maven-reporting-api
description: API to manage report generation. Maven-reporting-api is included in Maven 2.x core distribution, but moved to shared components to achieve report decoupling from Maven 3 core. This is a replacement package for maven-shared-reporting-api
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-reporting-api@3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21377
type: software_Package
supplied by: SPDXRef-gnrtd21384
name: maven-doxia-sink-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Sink-api module for maven-doxia
software package version: 0:1.7-13.oe2403sp4
software home page: http://maven.apache.org/doxia/
description: This package provides Sink-api module for maven-doxia.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0