type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd22221
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22222
from: plexus-build-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5836
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5837
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5808
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5795
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5796
from: java-1.8.0-openjdk-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5792
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5793
from: java-1.8.0-openjdk-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4146
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4147
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22759
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22760
from: osgi-annotation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22765
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22766
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22729
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22730
from: osgi-compendium
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4149
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4150
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21165
from: osgi-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22768
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22769
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20129
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20130
from: ant-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22732
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22733
from: osgi-compendium
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20132
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20133
from: ant-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22218
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22219
from: plexus-build-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21162
from: osgi-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5806
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5833
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5834
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22762
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22763
from: osgi-annotation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22750
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-slowdebug
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22753
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-lib
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22754
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: osgi-annotation
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22751
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22743
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22746
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22749
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-tools
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22764
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: osgi-compendium
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22748
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22747
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: slf4j
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22752
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: osgi-core
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22745
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-build-api
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22744
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: aqute-bnd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5793
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5834
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22222
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5837
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22730
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22219
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5796
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21165
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21162
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20133
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4150
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22760
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22766
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22763
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20130
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22733
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4147
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22769
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22767
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20131
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22761
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5807
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22220
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4148
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22731
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5835
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5794
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22742
type: software_Package
supplied by: SPDXRef-gnrtd22767
name: aqute-bnd
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: BND Tool
software package version: 0:3.5.0-11.oe2403sp4
software home page: https://github.com/bndtools/bnd/
description: Bnd is the engine behind a number of popular software development tools that support OSGi. It can be found in several maven plugins, ant, gradle, and of course Eclipse (bndtools). It actively seeks other build tool vendors to use bnd to improve the quality of the generated OSGi metadata.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/bnd-shared-maven-lib@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/bnd-baseline-maven-plugin@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/bndlib@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/aQute.libg@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/bnd-maven-plugin@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute/bndlib@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/bnd@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute.bnd/biz.aQute.bnd@3.5.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/biz.aQute/bnd@3.5.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5775
type: software_Package
supplied by: SPDXRef-gnrtd5794
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8 with full debug on
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8. This package has full debug on. Install only in need and remove asap.
name: java-1.8.0-openjdk-slowdebug
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-slowdebug@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22725
type: software_Package
supplied by: SPDXRef-gnrtd22731
name: osgi-compendium
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Interfaces and Classes for use in compiling OSGi bundles
software package version: 0:7.0.0-1.oe2403sp4
software home page: http://www.osgi.org
description: OSGi Compendium, Interfaces and Classes for use in compiling bundles.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.osgi/osgi.cmpn@7.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21157
type: software_Package
supplied by: SPDXRef-gnrtd21163
name: osgi-core
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: OSGi Core API
software package version: 0:7.0.0-1.oe2403sp4
software home page: https://www.osgi.org
description: OSGi Core, Interfaces and Classes for use in compiling bundles.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.osgi/osgi.core@7.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20125
type: software_Package
supplied by: SPDXRef-gnrtd20131
name: ant-lib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Core part of Apache Ant that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/ant/ant-launcher@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-nodeps@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-launcher@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/ant/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-bootstrap@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5829
type: software_Package
supplied by: SPDXRef-gnrtd5835
name: slf4j
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Simple Logging Facade for Java(SLF4J)
software package version: 0:1.7.25-8.oe2403sp4
software home page: http://www.slf4j.org/
description: The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the desired logging framework at deployment time.Before you start using SLF4J, we highly recommend that you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the addition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on the class path, then SLF4J will default to a no-operation implementation. In case you wish to migrate your Java source files to SLF4J, consider our migrator tool which can migrate your project to use the SLF4J API in just a few minutes. In case an externally-maintained component you depend on uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have a look at SLF4J's binary-support for legacy APIs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-api@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-nop@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-simple@1.7.25
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5800
type: software_Package
supplied by: SPDXRef-gnrtd5807
name: javapackages-tools
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Support for Java packaging with macros and scripts
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-tools package contains macros and scripts to support Java packaging.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/sun.jdk/jconsole@SYSTEM
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun/tools@SYSTEM
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22755
type: software_Package
supplied by: SPDXRef-gnrtd22761
name: osgi-annotation
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Annotations for use in compiling OSGi bundles
software package version: 0:7.0.0-1.oe2403sp4
software home page: http://www.osgi.org/
description: Annotations for use in compiling OSGi bundles. This package is not normally needed at run-time.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.osgi/org.osgi.annotation@7.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.osgi/osgi.annotation@7.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4062
type: software_Package
supplied by: SPDXRef-gnrtd4148
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8.
name: java-1.8.0-openjdk
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22211
type: software_Package
supplied by: SPDXRef-gnrtd22220
name: plexus-build-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Build API
software package version: 0:0.0.7-24.oe2403sp4
software home page: https://github.com/sonatype/sisu-build-api
description: Plexus Build API
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1