type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd20869
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20870
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20071
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20072
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20044
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37589
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37590
from: glassfish-dtd-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111357
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd111358
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20992
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20993
from: qdox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20068
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20069
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20046
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20995
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20996
from: qdox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36037
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd36038
from: codemodel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36040
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd36041
from: codemodel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111340
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd111341
from: shrinkwrap-descriptors-impl-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110578
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd110579
from: saxon
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37592
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37593
from: glassfish-dtd-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25261
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd25262
from: shrinkwrap-descriptors
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111337
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd111338
from: shrinkwrap-descriptors-impl-base
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111360
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd111361
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25258
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd25259
from: shrinkwrap-descriptors
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20872
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20873
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110581
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd110582
from: saxon
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111345
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: saxon
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111356
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: shrinkwrap-descriptors-impl-base
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111352
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: codemodel
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111347
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111344
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: qdox
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111350
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-dtd-parser
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111355
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang3
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111348
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111349
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111351
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111346
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111353
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111354
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: shrinkwrap-descriptors
from: shrinkwrap-descriptors-metadata-parser
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110582
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.0 and MPLv1.1 and ASL 1.1 and UCD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25259
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111341
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20873
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36041
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25262
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111358
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20072
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20870
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111338
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37593
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20993
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110579
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.0 and MPLv1.1 and ASL 1.1 and UCD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37590
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 and GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36038
type: simplelicensing_LicenseExpression
simplelicensing license expression: CDDL-1.1 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20996
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20069
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111361
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20070
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20871
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111359
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20045
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111339
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110580
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25260
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20994
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37591
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36039
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37585
type: software_Package
supplied by: SPDXRef-gnrtd37591
name: glassfish-dtd-parser
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Library for parsing XML DTDs
software package version: 0:1.4-1.oe2403sp4
software home page: https://github.com/javaee/jaxb-dtd-parser
description: Library for parsing XML DTDs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20988
type: software_Package
supplied by: SPDXRef-gnrtd20994
name: qdox
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: High speed and small footprint parser
software package version: 0:2.0.3-1.oe2403sp4
software home page: https://github.com/paul-hammant/qdox
description: QDox is used by documentation tools and active code generators.It provides parser for fully extracting class/interface/method definitions.It is a high speed, small footprint parser.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/qdox/qdox@2.0.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.thoughtworks.qdox/qdox@2.0.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20683
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: maven-lib
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20864
type: software_Package
supplied by: SPDXRef-gnrtd20871
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110570
type: software_Package
supplied by: SPDXRef-gnrtd110580
name: saxon
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java XPath, XSLT 2.0 and XQuery implementation
software package version: 0:9.4.0.9-2.oe2403sp4
software home page: http://saxon.sourceforge.net/
description: Saxon HE is Saxonica's non-schema-aware implementation of the XPath 2.0, XSLT 2.0, and XQuery 1.0 specifications aligned with the W3C Candidate Recommendation published on 3 November 2005. It is a complete and conformant implementation, providing all the mandatory features of those specifications and nearly all the optional features.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.sf.saxon/saxon@9.4.0.9
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.sf.saxon/Saxon-HE@9.4.0.9
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111332
type: software_Package
supplied by: SPDXRef-gnrtd111339
name: shrinkwrap-descriptors-impl-base
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: ShrinkWrap Descriptors Implementation
software package version: 0:2.0.0-2.oe2403sp4
software home page: http://arquillian.org/modules/descriptors-shrinkwrap/
description: Implementation of the ShrinkWrap Descriptors Project.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.shrinkwrap.descriptors/shrinkwrap-descriptors-impl-base@2.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd111343
type: software_Package
supplied by: SPDXRef-gnrtd111359
name: shrinkwrap-descriptors-metadata-parser
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: ShrinkWrap Descriptors Metadata Parser
software package version: 0:2.0.0-2.oe2403sp4
software home page: http://arquillian.org/modules/descriptors-shrinkwrap/
description: XSD and DTD parser for the ShrinkWrap Descriptors.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.shrinkwrap.descriptors/shrinkwrap-descriptors-metadata-parser@2.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd25254
type: software_Package
supplied by: SPDXRef-gnrtd25260
name: shrinkwrap-descriptors
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: ShrinkWrap sub-project for creating Archive Descriptors
software package version: 0:2.0.0-2.oe2403sp4
software home page: http://arquillian.org/modules/descriptors-shrinkwrap/
description: ShrinkWrap sub-project for creating Archive Descriptors This package contains the ShrinkWrap Descriptors API Base. API Base for Client View of the ShrinkWrap Descriptors Project.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.shrinkwrap.descriptors/shrinkwrap-descriptors-api-base@2.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36033
type: software_Package
supplied by: SPDXRef-gnrtd36039
name: codemodel
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java library for code generators
software package version: 0:2.6-1.oe2403sp4
software home page: http://codemodel.java.net
description: CodeModel is a Java library for code generators; it provides a way to generate Java programs in a way much nicer than PrintStream.println(). This project is a spin-off from the JAXB RI for its schema compiler to generate Java source files.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun.codemodel/codemodel-annotation-compiler@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun.codemodel/codemodel@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20064
type: software_Package
supplied by: SPDXRef-gnrtd20070
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20040
type: software_Package
supplied by: SPDXRef-gnrtd20045
name: apache-commons-lang3
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Lang version 3.0
software package version: 0:3.18.0-1.oe2403sp4
software home page: https://commons.apache.org/proper/commons-lang/
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. The Commons Lang Component provides these extra methods. Lang provides a host of helper utilities for the java.lang API, notably String manipulation methods, basic numerical methods, object reflection, concurrency, creation and serialization and System properties. Additionally it contains basic enhancements to java.util.Date and a series of utilities dedicated to help with building methods, such as hashCode, toString and equals. Note that Lang 3.0 (and subsequent versions) use a different package (org.apache.commons.lang3) than the previous versions (org.apache.commons.lang), allowing it to be used at the same time as an earlier version.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang3@3.18.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0