type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20796
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20797
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21207
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21208
from: xbean
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20377
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20378
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21213
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21214
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20719
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20720
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21210
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21211
from: xbean
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20847
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20848
from: plexus-classworlds
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20380
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20381
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21216
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21217
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20722
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20723
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20844
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20845
from: plexus-classworlds
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20793
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20794
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21212
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: guava20
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20954
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-classworlds
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20951
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20953
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: objectweb-asm
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20950
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20956
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xbean
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20955
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20952
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: plexus-containers-container-default
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21214
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20381
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20845
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21211
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20378
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20797
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20794
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20720
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20723
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21208
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21217
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20848
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20795
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21215
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20721
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20379
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21209
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20846
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20713
type: software_Package
supplied by: SPDXRef-gnrtd20721
name: guava20
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Google Libraries for Java
software package version: 0:20.0-11.oe2403sp4
software home page: https://github.com/google/guava
description: Guava is a set of core libraries that includes new collection types ,immutable collections, a graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@14.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@13.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20840
type: software_Package
supplied by: SPDXRef-gnrtd20846
name: plexus-classworlds
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A framework require complex manipulation of Java's ClassLoaders
software package version: 0:2.5.2-10.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-classworlds
description: Plexus Classworlds is a framework for container developers who require complex manipulation of Java's ClassLoaders. Java's native ClassLoader mechanisms and classes can cause much headache and confusion for certain types of application developers. Projects which involve dynamic loading of components or otherwise represent a 'container' can benefit from the classloading control provided by Classworlds. Plexus Classworlds provides a richer set of semantics for class loading than Java's normal mechanisms, while still being able to provide a ClassLoader interface to integrate seamlessly with the Java environment.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/classworlds/classworlds@2.5.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20957
type: software_Package
supplied by: SPDXRef-gnrtd21209
name: xbean
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A plugin based server
software package version: 0:4.9-3.oe2403sp4
software home page: http://geronimo.apache.org/xbean/
description: The goal of XBean project is to created a plugin based server analogous to Eclipse being a plugin based IDE. XBean will be able to discover, download and install server plugins from an Internet based repository. In addition, we include support for multiple IoC systems, support for running with no IoC system, JMX without JMX code, lifecycle and class loader management, and a rock solid Spring integration.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-naming@4.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-reflect@4.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-telnet@4.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-classpath@4.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-finder@4.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-asm-util@4.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xbean/xbean-bundleutils@4.9
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20371
type: software_Package
supplied by: SPDXRef-gnrtd20379
name: objectweb-asm
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode manipulation and analysis framework
software package version: 0:8.0.1-1.oe2403sp4
software home page: http://asm.ow2.org/
description: ASM is an all purpose Java bytecode manipulation and analysis framework. It can be used to modify existing classes or dynamically generate classes, directly in binary form. Provided common transformations and analysis algorithms allow to easily assemble custom complex transformations and code analysis tools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-tree@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-util@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-analysis@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-commons@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-debug-all@8.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20789
type: software_Package
supplied by: SPDXRef-gnrtd20795
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20949
type: software_Package
supplied by: SPDXRef-gnrtd21215
name: plexus-containers-container-default
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Default Container from plexus-containers.
software package version: 0:1.7.1-7.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-containers
description: plexus-container-default is the IoC container itself.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-container-default@1.7.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/containers-component-api@1.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@18.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@14.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@11.0.2
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@14.0.1
external ref type: other