type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd5836
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5837
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33236
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd33237
from: jnr-unixsocket
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26019
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: bouncycastle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40025
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40026
from: glassfish-hk2-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21008
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21009
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22083
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22084
from: apache-commons-compress
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40029
from: glassfish-hk2-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21493
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21494
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26742
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd26743
from: jackson-databind
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33239
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd33240
from: jnr-unixsocket
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21480
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21481
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22080
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22081
from: apache-commons-compress
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20541
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20542
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40385
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40386
from: jackson-datatype-guava
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40413
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40414
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21073
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21074
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20544
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20545
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26017
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: bouncycastle
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21005
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21006
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21490
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21491
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40382
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40383
from: jackson-datatype-guava
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40405
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40406
from: jackson-jaxrs-json-provider
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21076
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21077
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5833
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5834
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40371
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40372
from: jersey
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40368
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40369
from: jersey
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26745
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd26746
from: jackson-databind
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21483
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21484
from: httpcomponents-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40408
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40409
from: jackson-jaxrs-json-provider
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40410
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40411
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40038
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40035
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-compress
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40031
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: guava20
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40373
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jackson-databind
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40034
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-core
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40040
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40006
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-hk2-api
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40039
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40387
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jackson-jaxrs-json-provider
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40041
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bouncycastle
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40033
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-client
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40374
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jackson-datatype-guava
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40037
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40042
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jersey
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40032
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: slf4j
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40036
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40030
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jnr-unixsocket
from: docker-client-java
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40026
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-2.0 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22084
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5834
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21009
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40372
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40029
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-2.0 or GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21494
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21484
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5837
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21491
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21077
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20545
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21006
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21481
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40369
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26743
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33240
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26746
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40386
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22081
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40411
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40383
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33237
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40414
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40409
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40406
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20542
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21074
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21075
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40370
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40412
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40384
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21007
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20543
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33238
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5835
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21492
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26018
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40407
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22082
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26744
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21482
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21476
type: software_Package
supplied by: SPDXRef-gnrtd21482
name: httpcomponents-core
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Set of low level Java HTTP transport components for HTTP services
software package version: 0:4.4.15-1.oe2403sp4
software home page: http://hc.apache.org/
description: HttpCore is a set of low level HTTP transport components that can be used to build custom client and server side HTTP services with a minimal footprint. HttpCore supports two I/O models: blocking I/O model based on the classic Java I/O and non-blocking, event driven I/O model based on Java NIO.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpcore@4.4.15
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26727
type: software_Package
supplied by: SPDXRef-gnrtd26744
name: jackson-databind
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: General data-binding package for Jackson (2.x)
software package version: 0:2.9.8-10.oe2403sp4
software home page: https://github.com/FasterXML/jackson-databind/
description: The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40043
type: software_Package
supplied by: SPDXRef-gnrtd40370
name: jersey
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: JAX-RS (JSR 311) production quality Reference Implementation
software package version: 0:2.29.1-3.oe2403sp4
software home page: https://github.com/eclipse-ee4j/jersey
description: Jersey is the open source JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.rx/jersey-rx-client-rxjava@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-weld2-se@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.connectors/jersey-jdk-connector@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-jetty-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-simple-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.security/oauth1-signature@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-mustache@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.core/jersey-server@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-spring5@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-grizzly2-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-servlet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-jsp@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-freemarker@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-jdk-http@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-transaction@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-mvc-bean-validation@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-validation@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-json-processing@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-json-jettison@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-jaxb@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.security/oauth1-server@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.rx/jersey-rx-client-guava@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.media/jersey-media-sse@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.core/jersey-common@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-grizzly2-servlet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.ext/jersey-wadl-doclet@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.security/oauth2-client@2.29.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.jersey.containers/jersey-container-jetty-servlet@2.29.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40375
type: software_Package
supplied by: SPDXRef-gnrtd40384
name: jackson-datatype-guava
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Add-on module for Jackson which handles Guava data-types
software package version: 0:2.9.8-1.oe2403sp4
software home page: https://github.com/FasterXML/jackson-datatypes-collections
description: Add-on datatype-support module for Jackson that handles Guava types (currently mostly just collection ones).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.9.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33217
type: software_Package
supplied by: SPDXRef-gnrtd33238
name: jnr-unixsocket
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Unix sockets for Java
software package version: 0:0.38.19-1.oe2403sp4
software home page: https://github.com/jnr/jnr-unixsocket
description: Unix sockets for Java.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.github.jnr/jnr-unixsocket@0.38.19
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21068
type: software_Package
supplied by: SPDXRef-gnrtd21075
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26010
type: software_Package
supplied by: SPDXRef-gnrtd26018
name: bouncycastle
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java implementation of cryptographic algorithms
software package version: 0:1.67-2.oe2403sp4
software home page: http://www.bouncycastle.org
description: The package is organised so that it contains a light-weight API suitable for use in any environment (including the newly released J2ME) with the additional infrastructure to conform the algorithms to the JCE framework.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk16@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bctls-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpkix-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcmail-jdk15on@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcpg-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk15@1.67
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.bouncycastle/bcprov-jdk16@1.67
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22076
type: software_Package
supplied by: SPDXRef-gnrtd22082
name: apache-commons-compress
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java API for working with compressed files and archivers
software package version: 0:1.21-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-compress/
description: The Apache Commons Compress library defines an API for working with ar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files. In version 1.14 read-only support for Brotli decompression has been added, but it has been removed from this package.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons/commons-compress@1.21
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-compress@1.21
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-compress/commons-compress@1.21
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20999
type: software_Package
supplied by: SPDXRef-gnrtd21007
name: guava20
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Google Libraries for Java
software package version: 0:20.0-11.oe2403sp4
software home page: https://github.com/google/guava
description: Guava is a set of core libraries that includes new collection types ,immutable collections, a graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@12.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@12.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@13.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@12.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21473
type: software_Package
supplied by: SPDXRef-gnrtd21492
name: httpcomponents-client
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of components for building client side HTTP services
software package version: 0:4.5.5-7.oe2403sp4
software home page: http://hc.apache.org/
description: HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by httpcomponents HttpCore,which provides reusable components for HTTP state management, HTTP connection management, and client-side authentication. HttpComponents Client is almost equalto Commons HttpClient 3.x. Users of Commons HttpClient strongly support it.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpclient@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpmime@4.5.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5829
type: software_Package
supplied by: SPDXRef-gnrtd5835
name: slf4j
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Simple Logging Facade for Java(SLF4J)
software package version: 0:1.7.25-8.oe2403sp4
software home page: http://www.slf4j.org/
description: The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the desired logging framework at deployment time.Before you start using SLF4J, we highly recommend that you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the addition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on the class path, then SLF4J will default to a no-operation implementation. In case you wish to migrate your Java source files to SLF4J, consider our migrator tool which can migrate your project to use the SLF4J API in just a few minutes. In case an externally-maintained component you depend on uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have a look at SLF4J's binary-support for legacy APIs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-api@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-nop@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-simple@1.7.25
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20537
type: software_Package
supplied by: SPDXRef-gnrtd20543
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40007
type: software_Package
supplied by: SPDXRef-gnrtd40027
name: glassfish-hk2-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: HK2 API module
software package version: 0:2.5.0-5.oe2403sp4
software home page: https://github.com/eclipse-ee4j/glassfish-hk2/
description: Hundred Kilobytes Kernel API module.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.glassfish.hk2/hk2-api@2.5.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40388
type: software_Package
supplied by: SPDXRef-gnrtd40407
name: jackson-jaxrs-json-provider
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jackson-JAXRS-JSON
software package version: 0:2.9.8-1.oe2403sp4
software home page: https://github.com/FasterXML/jackson-jaxrs-providers
description: Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.9.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40005
type: software_Package
supplied by: SPDXRef-gnrtd40412
name: docker-client-java
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Docker Client
software package version: 0:8.11.7-2.oe2403sp4
software home page: https://github.com/spotify/docker-client
description: The Docker Client is a Java API library for accessing a Docker daemon.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.spotify/docker-client@8.11.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.core/jersey-client@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.security/oauth1-client@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.ext/jersey-proxy-client@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.connectors/jersey-jetty-connector@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.ext/jersey-metainf-services@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-ban-custom-hk2-binding@2.29.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@18.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@10.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@10.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@14.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@13.0.1
external ref type: other