type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd21258
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21259
from: maven-settings
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22644
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22645
from: maven-monitor
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22471
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22472
from: maven-filtering
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21414
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21415
from: velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21226
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21227
from: maven-artifact
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21289
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21290
from: maven-project
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21255
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21256
from: maven-settings
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21956
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: maven-common-artifact-filters
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21286
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21287
from: maven-project
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22667
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22668
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22628
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd53
from: plexus-resources
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22659
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22660
from: maven-artifact-resolver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22664
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22665
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22641
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22642
from: maven-monitor
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21954
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: maven-common-artifact-filters
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22468
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22469
from: maven-filtering
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21417
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21418
from: velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21229
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21230
from: maven-artifact
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20827
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20828
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20824
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20825
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20940
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20941
from: maven-model
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20943
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20944
from: maven-model
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22656
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22657
from: maven-artifact-resolver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22630
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd53
from: plexus-resources
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22650
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact-resolver
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22636
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-monitor
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22635
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-project
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22634
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-settings
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22620
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22648
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-filtering
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22647
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22646
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-model
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22631
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22632
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interpolation
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22663
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22649
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-common-artifact-filters
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22633
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22662
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22621
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-resources
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22661
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: velocity
from: maven-remote-resources-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21287
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22469
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22642
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21415
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22668
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21230
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22472
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22645
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21227
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21259
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20825
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20941
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22660
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22657
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20828
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21418
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21290
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd53
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21256
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20944
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22665
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21416
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22629
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22666
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22470
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20942
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21228
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22658
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21955
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22643
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20826
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21288
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21257
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21221
type: software_Package
supplied by: SPDXRef-gnrtd21228
name: maven-artifact
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven artifact artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven artifact manager artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@2.2.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@2.0.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@2.0.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@2.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@2.0.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20820
type: software_Package
supplied by: SPDXRef-gnrtd20826
name: plexus-interpolation
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interpolation API
software package version: 0:1.26-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interpolation
description: Plexus interpolator is the outgrowth of multiple iterations of development focused on providing a more modular, flexible interpolation framework for the expression language style commonly seen in Maven, Plexus, and other related projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22622
type: software_Package
supplied by: SPDXRef-gnrtd22629
name: plexus-resources
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Resource Manager
software package version: 0:1.0-0.25.a7.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-resources
description: The Plexus project aspire to create end-to-end tools for writing applications. the container is the core which can be embedded or for a full scale application server.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-resources@1.0.alpha.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20933
type: software_Package
supplied by: SPDXRef-gnrtd21288
name: maven-project
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven project artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven project artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-project@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22637
type: software_Package
supplied by: SPDXRef-gnrtd22643
name: maven-monitor
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven monitor artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven monitor artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-monitor@2.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21399
type: software_Package
supplied by: SPDXRef-gnrtd21416
name: velocity
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java-based template engine
software package version: 0:1.7-26.oe2403sp4
software home page: http://velocity.apache.org/
description: Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the Model-View-Controller (MVC) model, meaning that web page designers can focus solely on creating a site that looks good, and programmers can focus solely on writing top-notch code. Velocity separates Java code from the web pages, making the web site more maintainable over the long run and providing a viable alternative to Java Server Pages (JSPs) or PHP. Velocity's capabilities reach well beyond the realm of web sites; for example, it can generate SQL and PostScript and XML from templates. It can be used either as a standalone utility for generating source code and reports, or as an integrated component of other systems. Velocity also provides template services for the Turbine web application framework. Velocity+Turbine provides a template service that will allow web applications to be developed according to a true MVC model.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.velocity/velocity@1.7
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/velocity/velocity@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22619
type: software_Package
supplied by: SPDXRef-gnrtd22666
name: maven-remote-resources-plugin
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven Remote Resources Plugin
software package version: 0:1.5-5.oe2403sp4
software home page: http://maven.apache.org/plugins/maven-remote-resources-plugin/
description: This plugin is used to retrieve JARs of resources from remote repositories, process those resources, and incorporate them into JARs you build with Maven. A very common use-case is the need to package certain resources in a consistent way across your organization. For example at Apache, it is required that every JAR produced contains a copy of the Apache license and a notice file that references all used software in a given project.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.plugins/maven-remote-resources-plugin@1.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21948
type: software_Package
supplied by: SPDXRef-gnrtd21955
name: maven-common-artifact-filters
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven Common Artifact Filters
software package version: 0:3.0.1-7.oe2403sp4
software home page: https://maven.apache.org/shared/
description: A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20935
type: software_Package
supplied by: SPDXRef-gnrtd20942
name: maven-model
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven model artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven model artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@2.0.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@2.0.7
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@2.0.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@2.2.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@2.0.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22459
type: software_Package
supplied by: SPDXRef-gnrtd22470
name: maven-filtering
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A shared component for all plugins that needs to filter resources
software package version: 0:3.1.1-8.oe2403sp4
software home page: http://maven.apache.org/shared/maven-filtering/index.html
description: This component has been built from the filtering process/code in Maven Resources Plugin. The goal is to provide a shared component for all plugins that needs to filter resources.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-filtering@3.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21247
type: software_Package
supplied by: SPDXRef-gnrtd21257
name: maven-settings
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven settings artifact
software package version: 0:2.2.1-60.oe2403sp4
software home page: http://maven.apache.org
description: Compatibility Maven settings artifact
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@2.2.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@2.0.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@2.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@2.0.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@2.0.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22651
type: software_Package
supplied by: SPDXRef-gnrtd22658
name: maven-artifact-resolver
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A component for plugins to easily resolve project dependencies
software package version: 1:1.0-21.oe2403sp4
software home page: http://maven.apache.org/shared/maven-artifact-resolver
description: maven-artifact-resolver provides a component for plugins to easily resolve project dependencies.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-artifact-resolver@1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0