type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22517
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22518
from: maven-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22514
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22515
from: maven-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73937
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd73938
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73940
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd73941
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21289
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21290
from: maven-project
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21286
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21287
from: maven-project
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21234
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21235
from: maven-artifact-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21889
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: plexus-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23845
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23846
from: hawtjni
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21883
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21884
from: plexus-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21887
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: plexus-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21237
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21238
from: maven-artifact-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20827
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20828
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20824
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20825
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23848
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23849
from: hawtjni
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21880
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21881
from: plexus-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73930
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: hawtjni
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73935
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73927
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73929
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73934
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-project
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73936
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-archiver
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73933
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interpolation
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73931
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73928
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73925
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact-manager
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73926
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-archiver
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73932
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-io
from: maven-hawtjni-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21287
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21238
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21884
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73941
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and EPL-1.0 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20825
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22515
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21881
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23849
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and EPL-1.0 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20828
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22518
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23846
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and EPL-1.0 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21235
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21290
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73938
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and EPL-1.0 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22516
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21236
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73939
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21882
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23847
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21888
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20826
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21288
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23833
type: software_Package
supplied by: SPDXRef-gnrtd23847
name: hawtjni
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Produces the JNI code,known as a code generator
software package version: 0:1.16-4.oe2403sp4
software home page: http://hawtjni.fusesource.org/
description: HawtJNI is a code generator that generates the JNI code required by the following code:implement Java native methods. It is based on jnigen code generator .This is part of the SWT Tools project, which is used to generate all JNI code for the Eclipse platform.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fusesource.hawtjni/hawtjni-generator@1.16
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20820
type: software_Package
supplied by: SPDXRef-gnrtd20826
name: plexus-interpolation
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interpolation API
software package version: 0:1.26-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interpolation
description: Plexus interpolator is the outgrowth of multiple iterations of development focused on providing a more modular, flexible interpolation framework for the expression language style commonly seen in Maven, Plexus, and other related projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22503
type: software_Package
supplied by: SPDXRef-gnrtd22516
name: maven-archiver
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven Archiver
software package version: 0:3.5.2-1.oe2403sp4
software home page: https://maven.apache.org/shared/maven-archiver/
description: Provides utility methods for creating JARs and other archive files from a Maven project.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-archiver@3.5.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20933
type: software_Package
supplied by: SPDXRef-gnrtd21288
name: maven-project
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven project artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven project artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-project@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21849
type: software_Package
supplied by: SPDXRef-gnrtd21888
name: plexus-archiver
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Archiver Components
software package version: 0:4.2.7-2.oe2403sp4
software home page: http://codehaus-plexus.github.io/plexus-archiver
description: The Plexus project provides a full software stack for creating and executing software projects. It provides a number of pre-built components for common tasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more. However, Plexus is also able to reuse your existing components written for other IoC frameworks such as Spring, Avalon and Pico Container unmodified, as well as allowing you to reuse your existing code inside the Plexus Container. Plexus comes with an application server that can run your applications, making it trivial to build a standalone executable distribution with common features such as service execution if needed. However, Plexus applications can be run in any environment by embedding the container in an existing application, including Java EE applications or web applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73924
type: software_Package
supplied by: SPDXRef-gnrtd73939
name: maven-hawtjni-plugin
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Use hawtjni from a maven plugin
software package version: 0:1.16-4.oe2403sp4
software home page: http://hawtjni.fusesource.org/
description: This package allows to use hawtjni from a maven plugin.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fusesource.hawtjni/maven-hawtjni-plugin@1.16
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fusesource.hawtjni/hawtjni-maven-plugin@1.16
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20946
type: software_Package
supplied by: SPDXRef-gnrtd21236
name: maven-artifact-manager
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven artifact manager artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven artifact manager artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact-manager@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21874
type: software_Package
supplied by: SPDXRef-gnrtd21882
name: plexus-io
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Use in I/O operations
software package version: 0:3.2.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-io/
description: Plexus IO is a set of plexus components, which are designed for use in I/O operations. These I/O operations are doing nothing spectacular. For example, Commons IO is a much more powerful library in the same area. However, the implementation as a plexus component allows reuse in Maven.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-io@3.2.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0