type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd23534
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23535
from: xmlbeans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20405
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20406
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20869
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20870
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21914
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21915
from: bsh
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23454
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23455
from: bea-stax-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22175
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22176
from: apache-commons-digester
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22172
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22173
from: apache-commons-digester
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2763
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2925
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23457
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23458
from: bea-stax-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20071
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20072
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23576
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23577
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23531
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23532
from: xmlbeans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23565
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23566
from: uimaj
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20075
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20076
from: bsf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20068
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20069
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22943
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22944
from: rhino
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20101
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20102
from: log4j12
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20402
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20403
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2928
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21917
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21918
from: bsh
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2760
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20078
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20079
from: bsf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23544
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1390
from: snowball-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23562
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23563
from: uimaj
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20098
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20099
from: log4j12
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22946
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22947
from: rhino
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23573
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23574
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20872
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20873
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23542
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1390
from: snowball-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23522
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bsf
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23546
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: uimaj
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23570
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: log4j12
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23524
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23536
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23568
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23525
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xmlbeans
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23572
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rhino
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23567
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23521
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bea-stax-api
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23569
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23545
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23523
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bsh
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23537
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: snowball-java
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23571
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-digester
from: uima-addons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20076
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23577
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20099
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22947
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20102
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20873
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20079
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20072
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20870
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20403
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21915
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD-3-Clause and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22176
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23458
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22173
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23574
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23535
type: simplelicensing_LicenseExpression
simplelicensing license expression: (CPL-1.0 AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23455
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23563
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23566
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21918
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD-3-Clause and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20069
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23532
type: simplelicensing_LicenseExpression
simplelicensing license expression: (CPL-1.0 AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22944
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1390
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-2-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23533
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20070
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20871
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22174
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23575
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20077
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20100
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23456
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23543
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22945
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21916
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20404
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23564
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20092
type: software_Package
supplied by: SPDXRef-gnrtd20100
name: log4j12
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A logging library for Java
software package version: 0:1.2.17-26.oe2403sp4
software home page: http://logging.apache.org/log4j/1.2/
description: With log4j it is possible to enable logging at runtime without modifying the application binary.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.14
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.13
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.15
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/log4j/log4j@1.2.16
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2629
type: software_Package
supplied by: SPDXRef-gnrtd2761
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23520
type: software_Package
supplied by: SPDXRef-gnrtd23575
name: uima-addons
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache UIMA Addons components
software package version: 0:2.3.1-1.oe2403sp4
software home page: http://uima.apache.org/sandbox.html
description: UIMA Addons is a collection of Annotators extracted for sandbox for official distribution. It also provides Simple Server and Pear packaging tools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/WhitespaceTokenizer@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/OpenCalaisAnnotator@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/PearPackagingAntTask@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/AlchemyAPIAnnotator@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/RegularExpressionAnnotator@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/ConceptMapper@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/BSFAnnotator@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/SimpleServer@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/DictionaryAnnotator@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/Tagger@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/FsVariables@2.3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/SnowballAnnotator@2.3.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20061
type: software_Package
supplied by: SPDXRef-gnrtd20077
name: bsf
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Bean Scripting Framework
software package version: 0:2.4.0-32.oe2403sp4
software home page: http://commons.apache.org/bsf/
description: Bean Scripting Framework (BSF) is a set of Java classes which provides scripting language support within Java applications, and access to Java objects and methods from scripting languages. The two primary components of BSF are the BSFManager and the BSFEngine. The BSFManager handles all scripting execution engines running under its control, and maintains the object registry that permits scripts access to Java objects. By creating an instance of the BSFManager class, a Java application can gain access to scripting services. The BSFEngine provides an interface that must be implemented for a language to be used by BSF. This interface provides an abstraction of the scripting language's capabilities that permits generic handling of script execution and object registration within the execution context of the scripting language engine. An application can instantiate a single BSFManager, and execute several different scripting languages identically via the BSFEngine interface. Furthermore, all of the scripting languages handled by the BSFManager are aware of the objects registered with that BSFManager, and the execution state of those scripting languages is maintained for the lifetime of the BSFManager.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.bsf/bsf@2.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/bsf/bsf@2.4.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22166
type: software_Package
supplied by: SPDXRef-gnrtd22174
name: apache-commons-digester
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: XML to Java object mapping module
software package version: 0:2.1-1.oe2403sp4
software home page: http://commons.apache.org/digester/
description: Many projects read XML configuration files to provide initialization of various Java objects within the system. There are several ways of doing this, and the Digester component was designed to provide a common implementation that can be used in many different projects
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-digester/commons-digester@2.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-digester@2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20864
type: software_Package
supplied by: SPDXRef-gnrtd20871
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21906
type: software_Package
supplied by: SPDXRef-gnrtd21916
name: bsh
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java scripting environment (command-line version)
software package version: 0:2.0-16.b6.oe2403sp4
software home page: http://www.beanshell.org/
description: BeanShell is a small, embeddable, Java source interpreter with object scripting language features, written in Java. BeanShell executes standard Java statements and expressions, in addition to obvious scripting commands and syntax. You can also script objects as simple method closures like those in Perl and JavaScript(tm).bsh starts the command-line version of BeanShell.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.beanshell/bsh@2.0b6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache-extras.beanshell/bsh@2.0b6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/bsh/bsh-bsf@2.0b6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/bsh/bsh@2.0b6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2834
type: software_Package
supplied by: SPDXRef-gnrtd2926
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23547
type: software_Package
supplied by: SPDXRef-gnrtd23564
name: uimaj
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache UIMA is an implementation of the OASIS-UIMA specifications
software package version: 0:2.8.1-1.oe2403sp4
software home page: http://uima.apache.org/
description: Apache UIMA is an implementation of the OASIS-UIMA specifications. OASIS UIMA Committee: <http://www.oasis-open.org/committees/uima/>. Unstructured Information Management applications are software systems that analyze large volumes of unstructured information in order to discover knowledge that is relevant to an end user. An example UIM application might ingest plain text and identify entities, such as persons, places, organizations; or relations, such as works-for or located-at.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-component-test-util@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-test-util@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-cpe@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-document-annotation@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-json@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/jVinci@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-bootstrap@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-tools@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-adapter-vinci@2.8.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.uima/uimaj-core@2.8.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22935
type: software_Package
supplied by: SPDXRef-gnrtd22945
name: rhino
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Open-source implementation of JavaScript written entirely in Java
software package version: 0:1.7.7.1-8.oe2403sp4
software home page: http://www.mozilla.org/rhino/
description: Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users. It is embedded in J2SE 6 as the default Java scripting engine.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/rhino/js@1.7.7.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.mozilla/rhino@1.7.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23538
type: software_Package
supplied by: SPDXRef-gnrtd23543
name: snowball-java
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java stemming algorithm library
software package version: 0:0-2.oe2403sp4
software home page: http://snowball.tartarus.org
description: Snowball is a small string processing language designed for creating stemming algorithms for use in Information Retrieval. This package contains all you need to include the snowball stemming algorithms into a Java project of your own. If you use this, you don't need to use the snowball compiler, or worry about the internals of the stemmers in any way.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.tartarus/snowball@0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20398
type: software_Package
supplied by: SPDXRef-gnrtd20404
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23450
type: software_Package
supplied by: SPDXRef-gnrtd23456
name: bea-stax-api
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: API of the bea-stax
software package version: 0:1.2.0-18.oe2403sp4
software home page: https://repo1.maven.org/
description: API of the bea-stax.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.xml.stream/stax-api@1.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/stax/stax-api@1.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20064
type: software_Package
supplied by: SPDXRef-gnrtd20070
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23526
type: software_Package
supplied by: SPDXRef-gnrtd23533
name: xmlbeans
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: XML-Java binding tool
software package version: 0:2.6.0-2.oe2403sp4
software home page: http://xmlbeans.apache.org/
description: XMLBeans is a tool that allows you to access the full power of XML in a Java friendly way. It is an XML-Java binding tool. The idea is that you can take advantage the richness and features of XML and XML Schema and have these features mapped as naturally as possible to the equivalent Java language and typing constructs. XMLBeans uses XML Schema to compile Java interfaces and classes that you can then use to access and modify XML instance data. Using XMLBeans is similar to using any other Java interface/class, you will see things like getFoo or setFoo just as you would expect when working with Java. While a major use of XMLBeans is to access your XML instance data with strongly typed Java classes there are also API's that allow you access to the full XML infoset (XMLBeans keeps full XML Infoset fidelity) as well as to allow you to reflect into the XML schema itself through an XML Schema Object model.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlbeans/xmlbeans-xmlpublic@2.6.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlbeans/xmlbeans-xpath@2.6.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlbeans/xmlbeans@2.6.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0