type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd21969
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21970
from: maven-artifact-transfer
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20869
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20870
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21807
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21808
from: jdom2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21808
from: jdom2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20377
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20378
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59800
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd59801
from: jdependency
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59797
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd59798
from: jdependency
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60797
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21972
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21973
from: maven-artifact-transfer
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20719
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20720
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20380
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20381
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21945
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21946
from: maven-dependency-tree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20722
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20723
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21942
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21943
from: maven-dependency-tree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60794
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20872
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20873
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60789
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jdom2
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60790
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jdependency
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60788
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact-transfer
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60787
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-dependency-tree
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60791
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60781
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60782
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: guava20
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60786
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60783
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60785
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: objectweb-asm
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60792
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60784
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: maven-shade-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20381
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21973
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20378
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20873
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59801
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20870
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21970
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20720
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21946
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59798
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20723
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21808
type: simplelicensing_LicenseExpression
simplelicensing license expression: Saxpath
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21943
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20871
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20721
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21971
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21944
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20379
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59799
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20713
type: software_Package
supplied by: SPDXRef-gnrtd20721
name: guava20
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Google Libraries for Java
software package version: 0:20.0-11.oe2403sp4
software home page: https://github.com/google/guava
description: Guava is a set of core libraries that includes new collection types ,immutable collections, a graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@13.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21803
type: software_Package
supplied by: SPDXRef-gnrtd21809
name: jdom2
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Classes representing the components of an XML document
software package version: 0:2.0.6-16.oe2403sp4
software home page: http://www.jdom.org/
description: JDOM is an in-memory representation of an XML document. XML consists of elements (which have attributes), text data, 'entity' references, processing instructions, and comments. XML documents can also have a DocType declaration, Comments, and Processing Instructions before the root element.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jdom/jdom2-junit@2.0.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jdom/jdom2-contrib@2.0.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jdom/jdom2@2.0.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20864
type: software_Package
supplied by: SPDXRef-gnrtd20871
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20371
type: software_Package
supplied by: SPDXRef-gnrtd20379
name: objectweb-asm
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode manipulation and analysis framework
software package version: 0:8.0.1-1.oe2403sp4
software home page: http://asm.ow2.org/
description: ASM is an all purpose Java bytecode manipulation and analysis framework. It can be used to modify existing classes or dynamically generate classes, directly in binary form. Provided common transformations and analysis algorithms allow to easily assemble custom complex transformations and code analysis tools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-tree@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-util@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-analysis@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-commons@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-debug-all@8.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21958
type: software_Package
supplied by: SPDXRef-gnrtd21971
name: maven-artifact-transfer
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Transfer
software package version: 1:0.9.0-7.oe2403sp4
software home page: http://maven.apache.org/shared/maven-artifact-transfer
description: An API to either install or deploy artifacts with Maven 3.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.9.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21936
type: software_Package
supplied by: SPDXRef-gnrtd21944
name: maven-dependency-tree
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven dependency tree artifact
software package version: 0:3.0-8.oe2403sp4
software home page: http://maven.apache.org/
description: Apache Maven dependency tree artifact. Originally part of maven-shared.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59791
type: software_Package
supplied by: SPDXRef-gnrtd59799
name: jdependency
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API to analyse class dependencies
software package version: 0:1.2-4.oe2403sp4
software home page: http://github.com/tcurdt/jdependency
description: jdependency is library that helps analyzing class level dependencies, clashes and missing classes.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.vafer/jdependency@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60780
type: software_Package
supplied by: SPDXRef-gnrtd60795
name: maven-shade-plugin
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: This plugin make package access to artifact in an uber-jar
software package version: 0:3.1.1-3.oe2403sp4
software home page: http://maven.apache.org/plugins/maven-shade-plugin
description: This plugin provides thr capability to package thr artifact in an uber-jar, including its dependencies and to shade - i.e rename - package of some of the dependencies.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.plugins/maven-shade-plugin@3.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@18.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@14.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@14.0.1
external ref type: other