type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd26694
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: protobuf-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25954
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd25955
from: geronimo-jta
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20296
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: hamcrest
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20584
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20582
from: junit5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23755
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23756
from: protobuf2-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23038
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23039
from: javassist
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20581
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20582
from: junit5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5835
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5836
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32307
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32308
from: c3p0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26692
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: protobuf-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5832
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5833
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76997
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd76998
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23041
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23042
from: javassist
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25957
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd25958
from: geronimo-jta
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23752
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23753
from: protobuf2-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32304
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32305
from: c3p0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74642
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd74643
from: maven-surefire-provider-junit5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20294
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: hamcrest
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74639
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd74640
from: maven-surefire-provider-junit5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd77000
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd77001
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76995
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javassist
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76992
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76985
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-surefire-provider-junit5
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76993
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76996
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: junit5
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76990
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: geronimo-jta
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76991
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: hamcrest
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76986
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: protobuf-java
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76988
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: c3p0
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76987
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: protobuf2-java
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76989
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: slf4j
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76994
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: mysql-connector-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20582
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd77001
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76998
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23753
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25958
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23756
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25955
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32305
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR LGPL-2.1-only)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74643
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CPL
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5833
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5836
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23039
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.1 or LGPLv2+ or ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23042
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.1 or LGPLv2+ or ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74640
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CPL
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32308
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR LGPL-2.1-only)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23040
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74641
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23754
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20295
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20583
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25956
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5834
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26693
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32306
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76999
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20556
type: software_Package
supplied by: SPDXRef-gnrtd20583
name: junit5
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java regression testing framework
software package version: 0:5.4.0-1.oe2403sp4
software home page: http://junit.org/junit5/
description: JUnit is a popular regression testing framework for Java platform.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.platform/junit-platform-commons@1.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.platform/junit-platform-suite-api@1.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.platform/junit-platform-launcher@1.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.jupiter/junit-jupiter-api@5.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.jupiter/junit-jupiter-migrationsupport@5.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.platform/junit-platform-reporting@1.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.platform/junit-platform-engine@1.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.jupiter/junit-jupiter-params@5.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.vintage/junit-vintage-engine@5.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.junit.platform/junit-platform-runner@1.4.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32290
type: software_Package
supplied by: SPDXRef-gnrtd32306
name: c3p0
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: This is the JDBC DataSources/Resource Pools
software package version: 0:0.9.5.4-4.oe2403sp4
software home page: https://github.com/swaldman/c3p0
description: c3p0 is a JDBC driver for extending traditional libraries (DriverManager-based libraries) with JNDI bindable data sources (including data sources), as described in the jdbc3 specification and jdbc2 standard extensions. They implement connections and statement pools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.mchange/c3p0@0.9.5.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/c3p0/c3p0@0.9.5.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20290
type: software_Package
supplied by: SPDXRef-gnrtd20295
name: hamcrest
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Library of matcher objects for building test expressions
software package version: 0:2.2-1.oe2403sp4
software home page: https://github.com/hamcrest/JavaHamcrest
description: Provides a library of matcher objects (also known as constraints or predicates) allowing 'match' rules to be defined declaratively, to be used in other frameworks. Typical scenarios include testing frameworks, mocking libraries and UI validation rules.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.hamcrest/hamcrest@2.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.hamcrest/hamcrest-all@2.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.hamcrest/hamcrest-library@2.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.hamcrest/hamcrest-core@2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26688
type: software_Package
supplied by: SPDXRef-gnrtd26693
name: protobuf-java
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java Protocol Buffers runtime library
software package version: 0:25.1-13.oe2403sp4
software home page: https://github.com/protocolbuffers/protobuf
description: This package contains Java Protocol Buffers runtime library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.protobuf/protobuf-java@3.25.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23033
type: software_Package
supplied by: SPDXRef-gnrtd23040
name: javassist
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode engineering toolkit
software package version: 0:3.18.1-10.oe2403sp4
software home page: http://www.csg.is.titech.ac.jp/~chiba/javassist/
description: Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java; it enables Java programs to define a new class at runtime and to modify a class file when the JVM loads it. Unlike other similar bytecode editors, Javassist provides two levels of API: source level and bytecode level. If the users use the source- level API, they can edit a class file without knowledge of the specifications of the Java bytecode. The whole API is designed with only the vocabulary of the Java language. You can even specify inserted bytecode in the form of source text; Javassist compiles it on the fly. On the other hand, the bytecode-level API allows the users to directly edit a class file as other editors.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.javassist/javassist@3.18.1.GA
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javassist/javassist@3.18.1.GA
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76984
type: software_Package
supplied by: SPDXRef-gnrtd76999
name: mysql-connector-java
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Official JDBC driver for MySQL
software package version: 1:8.0.33-1.oe2403sp4
software home page: http://dev.mysql.com/downloads/connector/j/
description: MySQL Connector/J is a native Java driver that converts JDBC (Java Database Connectivity) calls into the network protocol used by the MySQL database. It lets developers working with the Java programming language easily build programs and applets that interact with MySQL and connect all corporate data, even in a heterogeneous environment. MySQL Connector/J is a Type IV JDBC driver and has a complete JDBC feature set that supports the capabilities of MySQL.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/mysql/mysql-connector-java@8.0.33
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74633
type: software_Package
supplied by: SPDXRef-gnrtd74641
name: maven-surefire-provider-junit5
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: JUnit 5 provider for Maven Surefire
software package version: 0:2.22.0-7.oe2403sp4
software home page: http://maven.apache.org/surefire/
description: This package provides for Maven Surefire.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.surefire/surefire-junit-platform@2.22.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25948
type: software_Package
supplied by: SPDXRef-gnrtd25956
name: geronimo-jta
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: J2EE JTA v1.1 API
software package version: 0:1.1.1-26.oe2403sp4
software home page: http://geronimo.apache.org/
description: Java Transaction API (JTA) specifies standard Java interfaces between a transaction manager and the parties involved in a distributed transaction system: the resource manager, the application server, and the transactional applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.transaction@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.transaction/jta@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23748
type: software_Package
supplied by: SPDXRef-gnrtd23754
name: protobuf2-java
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java Protocol Buffers runtime library
software package version: 0:2.5.0-6.oe2403sp4
software home page: http://code.google.com/p/protobuf/
description: This package contains Java Protocol Buffers runtime library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.protobuf/protobuf-java@2.5.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5828
type: software_Package
supplied by: SPDXRef-gnrtd5834
name: slf4j
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Simple Logging Facade for Java(SLF4J)
software package version: 0:1.7.25-8.oe2403sp4
software home page: http://www.slf4j.org/
description: The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the desired logging framework at deployment time.Before you start using SLF4J, we highly recommend that you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the addition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on the class path, then SLF4J will default to a no-operation implementation. In case you wish to migrate your Java source files to SLF4J, consider our migrator tool which can migrate your project to use the SLF4J API in just a few minutes. In case an externally-maintained component you depend on uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have a look at SLF4J's binary-support for legacy APIs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-api@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-nop@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-simple@1.7.25
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0