type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd21729
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21730
from: jakarta-commons-httpclient
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21716
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21717
from: fontbox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14968
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd14969
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21719
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21720
from: fontbox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4146
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4147
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21781
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21782
from: batik
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21794
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21795
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14971
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd14972
from: java-11-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21778
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21779
from: batik
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20379
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20380
from: xalan-j2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20382
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20383
from: xalan-j2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21073
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21074
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21766
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21767
from: xmlgraphics-commons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21752
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21753
from: avalon-framework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4149
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4150
from: java-1.8.0-openjdk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21076
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21077
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20340
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20341
from: xml-commons-apis
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21732
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21733
from: jakarta-commons-httpclient
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21749
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21750
from: avalon-framework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20216
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20217
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20343
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20344
from: xml-commons-apis
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20219
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20220
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21769
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21770
from: xmlgraphics-commons
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21791
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21792
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21722
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-commons-httpclient
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21756
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21786
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21757
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: batik
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21784
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21788
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21734
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: avalon-framework
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21783
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xmlgraphics-commons
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21790
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21721
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21785
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xml-commons-apis
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21754
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xalan-j2
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21789
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21787
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21710
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fontbox
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21755
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: fop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20220
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20341
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and W3C and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21753
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21792
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and Apache-2.0 and MIT and Apache-1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20380
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and W3C
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21770
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14969
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21077
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21717
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20217
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4150
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20383
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and W3C
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21767
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21733
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and (ASL 2.0 or LGPLv2+)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21795
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and Apache-2.0 and MIT and Apache-1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21750
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21730
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and (ASL 2.0 or LGPLv2+)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21779
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MPL-1.1 AND GPL-2.0-or-later AND W3C AND Apache-2.0 AND Apache-1.1)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4147
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21720
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14972
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21074
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21782
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MPL-1.1 AND GPL-2.0-or-later AND W3C AND Apache-2.0 AND Apache-1.1)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20344
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and W3C and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14970
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21731
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21075
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20381
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4148
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20342
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21751
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21768
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21793
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21718
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20218
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21780
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21068
type: software_Package
supplied by: SPDXRef-gnrtd21075
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20212
type: software_Package
supplied by: SPDXRef-gnrtd20218
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21735
type: software_Package
supplied by: SPDXRef-gnrtd21751
name: avalon-framework
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java components interfaces
software package version: 0:4.3-25.oe2403sp4
software home page: http://avalon.apache.org/
description: Apache Avalon provided Java software for component and container programming and pioneered the use of design patterns such as Inversion of Control (IoC) and Separation of Concerns (SoC).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/avalon-framework/avalon-framework-impl@4.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/avalon-framework/avalon-framework-api@4.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.avalon.framework/avalon-framework-impl@4.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21758
type: software_Package
supplied by: SPDXRef-gnrtd21780
name: batik
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Batik is an inline templating engine for CoffeeScript
software package version: 0:1.17-1.oe2403sp4
software home page: https://xmlgraphics.apache.org/batik/
description: Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-svgrasterizer@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-xml@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-ext@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-extension@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-css@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-constants@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-awt-util@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-transcoder@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-script@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-ttf2svg@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-svg-dom@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-all@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-rasterizer@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-gvt@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-squiggle@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-svggen@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-dom@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-squiggle-ext@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-codec@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-slideshow@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-util@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-svgpp@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-svgbrowser@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-bridge@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-gui-util@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-anim@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-rasterizer-ext@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-parser@1.17
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/batik-swing@1.17
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21723
type: software_Package
supplied by: SPDXRef-gnrtd21731
name: jakarta-commons-httpclient
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Implement the client side of HTTP standards
software package version: 1:3.1-30.oe2403sp4
software home page: http://jakarta.apache.org/commons/httpclient/
description: The Hyper-Text Transfer Protocol (HTTP) is perhaps the most significant protocol used on the Internet today. Web services, network-enabled appliances and the growth of network computing continue to expand the role of the HTTP protocol beyond user-driven web browsers, while increasing the number of applications that require HTTP support. Designed for extension while providing robust support for the base HTTP protocol, the HttpComponents may be of interest to anyone building HTTP-aware client and server applications such as web browsers, web spiders, HTTP proxies, web service transport libraries, or systems that leverage or extend the HTTP protocol for distributed communication.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-httpclient/commons-httpclient@3.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-httpclient@3.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21760
type: software_Package
supplied by: SPDXRef-gnrtd21768
name: xmlgraphics-commons
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library that consists of several reusable components
software package version: 0:2.2-4.oe2403sp4
software home page: http://xmlgraphics.apache.org/
description: Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D implementations that let you generate PDF & PostScript files, and much more. The Apache™ XML Graphics Commons project is part of the Apache™ Software Foundation, which is a wider community of users and developers of open source projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21711
type: software_Package
supplied by: SPDXRef-gnrtd21718
name: fontbox
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache FontBox
software package version: 0:2.0.29-2.oe2403sp4
software home page: http://pdfbox.apache.org/
description: FontBox is a Java library used to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.pdfbox/fontbox@2.0.29
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4062
type: software_Package
supplied by: SPDXRef-gnrtd4148
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8.
name: java-1.8.0-openjdk
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd14943
type: software_Package
supplied by: SPDXRef-gnrtd14970
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment.
name: java-11-openjdk
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21709
type: software_Package
supplied by: SPDXRef-gnrtd21793
name: fop
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Formatter for printing XSL-driven XML Files
software package version: 0:2.2-9.oe2403sp4
software home page: https://xmlgraphics.apache.org/fop
description: FOP (Formatting Objects Processor) is a print formatter driven by XSL formatting objects (XSL-FO) and an output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PS, PCL, AFP, XML (area tree representation), Print, AWT and PNG, and to a lesser extent, RTF and TXT. The primary output target is PDF.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.xmlgraphics/fop@2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20336
type: software_Package
supplied by: SPDXRef-gnrtd20342
name: xml-commons-apis
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: APIs for XML related code
software package version: 0:1.4.01-29.oe2403sp4
software home page: http://xml.apache.org/commons/
description: xml-commons-apis is designed to organize and have common packaging for the various externally-defined \ standards code relating to XML - things like the DOM, SAX, and JAXP interfaces.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xerces/dom3-xml-apis@1.3.04
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xml-apis/xml-apis@2.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xml-apis/xml-apis-ext@1.3.04
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20327
type: software_Package
supplied by: SPDXRef-gnrtd20381
name: xalan-j2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java XSLT processor
software package version: 0:2.7.2-1.oe2403sp4
software home page: http://xalan.apache.org/
description: Xalan is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements the W3C Recommendations for XSL Transformations (XSLT) and the XML Path Language (XPath). It can be used from the command line, in an applet or a servlet, or as a module in other program.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xalan/serializer@2.7.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xalan/xalan@2.7.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1