type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd20526
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20527
from: findbugs-bcel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5808
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14968
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd14969
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20554
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20555
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2060
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2061
from: perl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20529
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20530
from: findbugs-bcel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20515
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20516
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20503
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20504
from: jFormatString
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4146
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4147
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20442
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10481
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20518
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20519
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14971
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd14972
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20541
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20542
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20484
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20482
from: dom4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20496
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20494
from: jcip-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20551
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20552
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17886
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd17887
from: jsr-305
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20544
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20545
from: apache-commons-lang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20481
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20482
from: dom4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20493
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20494
from: jcip-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20444
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10481
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4149
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4150
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20476
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20477
from: jaxen
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17883
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd17884
from: jsr-305
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd588
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd589
from: perl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2063
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2064
from: perl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd591
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd592
from: perl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20479
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20480
from: jaxen
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20506
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20507
from: jFormatString
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5806
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20520
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: findbugs-bcel
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20487
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jcip-annotations
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20485
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jsr-305
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20534
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20533
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20486
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20466
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dom4j
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20548
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20531
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: junit
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20550
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: perl-libs
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20497
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jFormatString
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20535
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jaxen
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20465
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20508
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: objectweb-asm
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20546
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-tools
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20549
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20536
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20547
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: perl
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20532
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: findbugs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20519
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20507
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20555
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20480
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2061
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20477
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10481
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2064
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20482
type: simplelicensing_LicenseExpression
simplelicensing license expression: Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14969
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20545
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4150
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20527
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20504
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 with exceptions
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17884
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND CC-BY-2.5)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20494
type: simplelicensing_LicenseExpression
simplelicensing license expression: CC-BY-2.5
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4147
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd592
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17887
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND CC-BY-2.5)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20516
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20552
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14972
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20542
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd589
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20530
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14970
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd590
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20443
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5807
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20553
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4148
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2062
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20543
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20505
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17885
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20478
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20495
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20483
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20528
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20517
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20472
type: software_Package
supplied by: SPDXRef-gnrtd20478
name: jaxen
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: An XPath engine written in Java
software package version: 0:1.2.0-3.oe2403sp4
software home page: https://github.com/jaxen-xpath/jaxen
description: Jaxen is an open source XPath library written in Java. It is adaptable to many different object models and also possible to write adapters that treat non-XML trees
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jaxen/jaxen@1.2.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20467
type: software_Package
supplied by: SPDXRef-gnrtd20483
name: dom4j
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Flexible XML framework for Java
software package version: 0:2.0.0-9.oe2403sp4
software home page: https://dom4j.github.io/
description: dom4j is an easy to use, open source library for working with XML, XPath and XSLT on the Java platform using the Java Collections Framework and with full support for DOM, SAX and JAXP.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.dom4j/dom4j@2.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/dom4j/dom4j@2.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20521
type: software_Package
supplied by: SPDXRef-gnrtd20528
name: findbugs-bcel
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Library for FindBugs provides Byte Code
software package version: 0:6.0-0.13.20140707svn1547656.oe2403sp4
software home page: http://commons.apache.org/proper/commons-bcel/
description: This is a Byte Code Engineering Library (BCEL) provided for FindBugs 3.0.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/bcel@6.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/bcel-findbugs@6.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20488
type: software_Package
supplied by: SPDXRef-gnrtd20495
name: jcip-annotations
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java Concurrency in Practice
software package version: 0:1-26.20060626.oe2403sp4
software home page: http://www.jcip.net/
description: This package provides class, field, and method level annotations for describing thread-safety policies. These annotations are relatively unintrusive and beneficial to both users and maintainers. Users can see immediately whether a class is thread-safe, and maintainers can see immediately whether thread-safety guarantees must be preserved.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.jcip/jcip-annotations@1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd561
type: software_Package
supplied by: SPDXRef-gnrtd2062
software download location: NOASSERTION
summary: A highly capable, feature-rich programming language
software package version: 4:5.38.0-12.oe2403sp4
software home page: https://www.perl.org/
description: Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.
name: perl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/perl@5.38.0-12.oe2403sp4?arch=x86_64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20509
type: software_Package
supplied by: SPDXRef-gnrtd20517
name: objectweb-asm
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode manipulation and analysis framework
software package version: 0:8.0.1-1.oe2403sp4
software home page: http://asm.ow2.org/
description: ASM is an all purpose Java bytecode manipulation and analysis framework. It can be used to modify existing classes or dynamically generate classes, directly in binary form. Provided common transformations and analysis algorithms allow to easily assemble custom complex transformations and code analysis tools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-commons@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-debug-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-analysis@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-tree@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-util@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm@8.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20498
type: software_Package
supplied by: SPDXRef-gnrtd20505
name: jFormatString
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A checker for Java format string when compile-time
software package version: 0:0-0.31.20131227gitf159b88.oe2403sp4
software home page: http://code.google.com/p/j-format-string/
description: A checker for Java format string when compile-time.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/jFormatString@2.0.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20429
type: software_Package
supplied by: SPDXRef-gnrtd20443
name: junit
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java package for unit testing frameworks
software package version: 1:4.13.2-2.oe2403sp4
software home page: http://www.junit.org/
description: JUnit is a simple framework to write repeatable tests. It is an instance of the xUnit architecture for unit testing frameworks.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit@4.13.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit-dep@4.13.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20537
type: software_Package
supplied by: SPDXRef-gnrtd20543
name: apache-commons-lang
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides a host of helper utilities for the java.lang API
software package version: 0:2.6-24.oe2403sp4
software home page: http://commons.apache.org/lang
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-lang/commons-lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/lang/lang@2.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang@2.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5800
type: software_Package
supplied by: SPDXRef-gnrtd5807
name: javapackages-tools
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Support for Java packaging with macros and scripts
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-tools package contains macros and scripts to support Java packaging.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/sun.jdk/jconsole@SYSTEM
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.sun/tools@SYSTEM
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20464
type: software_Package
supplied by: SPDXRef-gnrtd20553
name: findbugs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Find Bugs in Java Programs
software package version: 0:3.0.1-18.oe2403sp4
software home page: http://findbugs.sourceforge.net/
description: Findbugs is a program which uses static analysis to look for bugs in Java code.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.sourceforge.findbugs/annotations@3.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/findbugs@3.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/annotations@3.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17879
type: software_Package
supplied by: SPDXRef-gnrtd17885
name: jsr-305
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Correctness annotations for Java code
software package version: 0:3.0.2-2.oe2403sp4
software home page: https://code.google.com/p/jsr-305
description: This package contains reference implementations, test cases, and other documents for Java Specification Request 305: Annotations for Software Defect Detection.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jsr-305/ri@3.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.code.findbugs/jsr305@3.0.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd565
type: software_Package
supplied by: SPDXRef-gnrtd590
software download location: NOASSERTION
summary: The libraries for the perl
software package version: 4:5.38.0-12.oe2403sp4
software home page: https://www.perl.org/
description: This package is the shared library for perl.
name: perl-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/perl-libs@5.38.0-12.oe2403sp4?arch=x86_64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4062
type: software_Package
supplied by: SPDXRef-gnrtd4148
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8.
name: java-1.8.0-openjdk
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14943
type: software_Package
supplied by: SPDXRef-gnrtd14970
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment.
name: java-11-openjdk
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1