type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20786
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20787
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20405
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20406
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24772
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd24773
from: maven-invoker
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74387
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd74388
from: maven-scm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24769
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd24770
from: maven-invoker
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24752
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: plexus-interactivity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59860
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21808
from: jdom
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21213
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21214
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20814
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20815
from: plexus-sec-dispatcher
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21289
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21290
from: maven-project
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20337
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20338
from: jaxen
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21286
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21287
from: maven-project
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21234
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21235
from: maven-artifact-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59858
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21808
from: jdom
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74396
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd74397
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21216
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21217
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20402
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20403
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74393
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd74394
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20340
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20341
from: jaxen
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21237
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21238
from: maven-artifact-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20817
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20818
from: plexus-sec-dispatcher
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24750
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: plexus-interactivity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74384
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd74385
from: maven-scm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20783
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20784
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20827
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20828
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20824
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20825
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74367
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-containers-container-default
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74361
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74365
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74369
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-cli
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74366
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interactivity
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74389
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-project
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74364
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interpolation
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74358
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jdom
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74363
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74368
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74390
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74362
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-sec-dispatcher
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74391
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-invoker
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74359
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jaxen
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74360
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74392
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact-manager
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74370
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-scm
from: maven-release-manager
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21287
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21238
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21214
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20787
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20341
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24773
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20338
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20818
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20403
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24770
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20784
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20825
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74397
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20815
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21808
type: simplelicensing_LicenseExpression
simplelicensing license expression: Saxpath
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20828
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74388
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74385
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74394
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21235
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21217
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21290
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21236
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21215
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59859
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20785
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74386
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20816
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20826
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21288
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24771
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20404
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74395
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20339
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24751
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20820
type: software_Package
supplied by: SPDXRef-gnrtd20826
name: plexus-interpolation
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interpolation API
software package version: 0:1.26-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interpolation
description: Plexus interpolator is the outgrowth of multiple iterations of development focused on providing a more modular, flexible interpolation framework for the expression language style commonly seen in Maven, Plexus, and other related projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20933
type: software_Package
supplied by: SPDXRef-gnrtd21288
name: maven-project
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven project artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven project artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-project@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24763
type: software_Package
supplied by: SPDXRef-gnrtd24771
name: maven-invoker
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Fires a Maven build in a new JVM
software package version: 0:2.2-10.oe2403sp4
software home page: http://maven.apache.org/shared/maven-invoker/
description: This API is concerned with firing a Maven build in a new JVM. It accomplishes its task by building up a conventional Maven command line from options given in the current request, along with those global options specified in the invoker itself. Once it has the command line, the invoker will execute it, and capture the resulting exit code or any exception thrown to signal a failure to execute. Input/output control can be specified using an InputStream and up to two InvocationOutputHandlers.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-invoker@2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59854
type: software_Package
supplied by: SPDXRef-gnrtd59859
name: jdom
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java alternative for DOM and SAX
software package version: 0:1.1.3-18.oe2403sp4
software home page: http://www.jdom.org/
description: JDOM is a Java representation of an XML document and it provides a way to represent that document for easy and efficient reading, manipulation, and writing. It's an alternative to DOM and SAX, although it integrates well with both DOM and SAX.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jdom/jdom@1.1.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jdom/jdom@1.1.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24732
type: software_Package
supplied by: SPDXRef-gnrtd24751
name: plexus-interactivity
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interactivity Handler Component
software package version: 0:1.0-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interactivity
description: The Plexus project provides a full software stack for creating and executing software projects. It provides a number of pre-built components for common tasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more. However, Plexus is also able to reuse your existing components written for other IoC frameworks such as Spring, Avalon and Pico Container unmodified, as well as allowing you to reuse your existing code inside the Plexus Container. Plexus comes with an application server that can run your applications, making it trivial to build a standalone executable distribution with common features such as service execution if needed. However, Plexus applications can be run in any environment by embedding the container in an existing application, including Java EE applications or web applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.0.alpha.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interactivity-jline@1.0.alpha.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74371
type: software_Package
supplied by: SPDXRef-gnrtd74386
name: maven-scm
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide a common API for doing SCM operations
software package version: 0:1.10.0-4.oe2403sp4
software home page: http://maven.apache.org/scm
description: Maven SCM provides a common API for doing SCM operations. This package Supports Maven plugins and other tools in providing them a common API for doing SCM operations.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-tfs@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.plugins/maven-scm-plugin@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-perforce@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-accurev@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-synergy@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-local@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-jazz@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-bazaar@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-api@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-client@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-vss@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-starteam@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-clearcase@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-cvsexe@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-cvs-commons@1.10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@1.10.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20333
type: software_Package
supplied by: SPDXRef-gnrtd20339
name: jaxen
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: An XPath engine written in Java
software package version: 0:1.2.0-3.oe2403sp4
software home page: https://github.com/jaxen-xpath/jaxen
description: Jaxen is an open source XPath library written in Java. It is adaptable to many different object models and also possible to write adapters that treat non-XML trees
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jaxen/jaxen@1.2.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20799
type: software_Package
supplied by: SPDXRef-gnrtd20816
name: plexus-sec-dispatcher
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Security Dispatcher Component
software package version: 0:1.4-26.oe2403sp4
software home page: https://github.com/EuroLinux/els-tests-plexus-sec-dispatcher
description: Plexus Security Dispatcher Component.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20949
type: software_Package
supplied by: SPDXRef-gnrtd21215
name: plexus-containers-container-default
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Default Container from plexus-containers.
software package version: 0:1.7.1-7.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-containers
description: plexus-container-default is the IoC container itself.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-container-default@1.7.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/containers-component-api@1.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74357
type: software_Package
supplied by: SPDXRef-gnrtd74395
name: maven-release-manager
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Release a project updating the POM and tagging in the SCM
software package version: 0:2.2.1-1.oe2403sp4
software home page: http://maven.apache.org/plugins/maven-release-plugin/
description: This package contains maven-release-manager needed by maven-release-plugin.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.release/maven-release-manager@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20779
type: software_Package
supplied by: SPDXRef-gnrtd20785
name: apache-commons-cli
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: CLI Library provides an API for Java
software package version: 0:1.4-7.oe2403sp4
software home page: http://commons.apache.org/cli/
description: The Apache Commons CLI library provides an API for parsing command line options passed to programs. It's also able to print help messages detailing the options available for a command line tool.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-cli@1.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-cli/commons-cli@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20946
type: software_Package
supplied by: SPDXRef-gnrtd21236
name: maven-artifact-manager
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven artifact manager artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven artifact manager artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact-manager@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20398
type: software_Package
supplied by: SPDXRef-gnrtd20404
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0