type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd21238
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21239
from: gpars
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20373
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20374
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21131
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21132
from: beust-jcommander
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21315
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: testng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21286
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21287
from: qdox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21145
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21146
from: glassfish-jsp-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20515
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20516
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21235
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21236
from: gpars
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20696
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20697
from: ant-junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20694
from: ant-junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20518
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20519
from: objectweb-asm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20163
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20164
from: ant-antlr
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21317
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: testng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21356
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: xstream
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20224
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20225
from: bsf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20941
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20942
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20219
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20220
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21327
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21328
from: xpp3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20132
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20133
from: ant-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20153
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20154
from: antlr-tool
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21354
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: xstream
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21283
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21284
from: qdox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21359
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21360
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21273
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21274
from: jline
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21324
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21325
from: xpp3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20370
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20371
from: jakarta-servlet
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20360
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20361
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20944
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20945
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20444
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10481
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21245
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21246
from: jakarta-server-pages-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21148
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21149
from: glassfish-jsp-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20160
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20161
from: ant-antlr
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21261
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21262
from: apache-ivy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21134
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21135
from: beust-jcommander
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21258
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21259
from: apache-ivy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21362
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21363
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20150
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20151
from: antlr-tool
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20442
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10481
from: junit
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17680
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd17681
from: jansi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20363
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20364
from: glassfish-servlet-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20221
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20222
from: bsf
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20216
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20217
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20129
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20130
from: ant-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21270
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21271
from: jline
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17683
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd17684
from: jansi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21248
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21249
from: jakarta-server-pages-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21137
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-jsp-api
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21136
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bsf
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21357
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-cli
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21252
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21278
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: qdox
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21151
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpars
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21319
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xpp3
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21330
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xstream
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21253
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-ivy
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21276
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: objectweb-asm
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21250
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-servlet
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21318
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-lib
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21329
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: antlr-tool
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21124
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21288
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-junit
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21264
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jline
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21277
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ant-antlr
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21358
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21125
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21251
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jansi
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21150
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-servlet-api
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21126
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: beust-jcommander
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21275
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: junit
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21289
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: testng
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21263
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21240
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-server-pages-api
from: groovy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21363
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD-3-Clause and EPL-1.0 and Public Domain and ANTLR-PD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21249
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20154
type: simplelicensing_LicenseExpression
simplelicensing license expression: public domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21239
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20161
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17684
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21287
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20697
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21135
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21271
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21360
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and BSD-3-Clause and EPL-1.0 and Public Domain and ANTLR-PD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21284
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20133
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21149
type: simplelicensing_LicenseExpression
simplelicensing license expression: (CDDL-1.1 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21236
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20225
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20694
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20516
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20371
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20220
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10481
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20151
type: simplelicensing_LicenseExpression
simplelicensing license expression: public domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21259
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20374
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21262
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20942
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21274
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21328
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20519
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21325
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17681
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21146
type: simplelicensing_LicenseExpression
simplelicensing license expression: (CDDL-1.1 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20222
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20217
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21246
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-2.0 or GPLv2 with exceptions) and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20361
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20364
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((GPL-2.0-with-classpath-exception OR CDDL-1.1) AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21132
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20130
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20945
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20164
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20131
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20372
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20152
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21285
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20943
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21326
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20223
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21316
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21247
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20695
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20162
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20517
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20443
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21147
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21133
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17682
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21237
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20218
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21361
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20362
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21272
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21260
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21355
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20207
type: software_Package
supplied by: SPDXRef-gnrtd20223
name: bsf
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Bean Scripting Framework
software package version: 0:2.4.0-32.oe2403sp4
software home page: http://commons.apache.org/bsf/
description: Bean Scripting Framework (BSF) is a set of Java classes which provides scripting language support within Java applications, and access to Java objects and methods from scripting languages. The two primary components of BSF are the BSFManager and the BSFEngine. The BSFManager handles all scripting execution engines running under its control, and maintains the object registry that permits scripts access to Java objects. By creating an instance of the BSFManager class, a Java application can gain access to scripting services. The BSFEngine provides an interface that must be implemented for a language to be used by BSF. This interface provides an abstraction of the scripting language's capabilities that permits generic handling of script execution and object registration within the execution context of the scripting language engine. An application can instantiate a single BSFManager, and execute several different scripting languages identically via the BSFEngine interface. Furthermore, all of the scripting languages handled by the BSFManager are aware of the objects registered with that BSFManager, and the execution state of those scripting languages is maintained for the lifetime of the BSFManager.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/bsf/bsf@2.4.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.bsf/bsf@2.4.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20366
type: software_Package
supplied by: SPDXRef-gnrtd20372
name: jakarta-servlet
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Server-side API for handling HTTP requests and responses
software package version: 0:5.0.0-4.oe2403sp4
software home page: https://github.com/eclipse-ee4j/servlet-api
description: Jakarta Servlet defines a server-side API for handling HTTP requests and responses.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@5.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@5.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21127
type: software_Package
supplied by: SPDXRef-gnrtd21133
name: beust-jcommander
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java framework for parsing command line parameters
software package version: 0:1.78-1.oe2403sp4
software home page: http://jcommander.org/
description: JCommander is a very small Java framework that makes it trivial to parse command line parameters.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.beust/jcommander@1.78
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21320
type: software_Package
supplied by: SPDXRef-gnrtd21326
name: xpp3
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Xml Pull Parser 3rd Edition
software package version: 0:1.1.4-22.oe2403sp4
software home page: http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/index.html
description: MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs such as Hotspot in JDK 1.4+.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xpp3/xpp3_xpath@1.1.4c
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xpp3/xpp3_min@1.1.4c
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/xpp3/xpp3@1.1.4c
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20125
type: software_Package
supplied by: SPDXRef-gnrtd20131
name: ant-lib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Core part of Apache Ant that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/ant/ant-launcher@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-nodeps@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-launcher@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/ant/ant@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-bootstrap@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21331
type: software_Package
supplied by: SPDXRef-gnrtd21355
name: xstream
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java XML serialization library
software package version: 0:1.4.20-2.oe2403sp4
software home page: http://x-stream.github.io/
description: XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for large object graphs or systems with high message throughput. No information is duplicated that can be obtained via reflection. This results in XML that is easier to read for humans and more compact than native Java serialization. XStream serializes internal fields, including private and final. Supports non-public and inner classes. Classes are not required to have default constructor. Duplicate references encountered in the object-model will be maintained. Supports circular references. By implementing an interface, XStream can serialize directly to/from any tree structure (not just XML). Strategies can be registered allowing customization of how particular types are represented as XML. When an exception occurs due to malformed XML, detailed diagnostics are provided to help isolate and fix the problem.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.thoughtworks.xstream/xstream@1.4.20
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20144
type: software_Package
supplied by: SPDXRef-gnrtd20152
name: antlr-tool
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A parser generator that uses LL(*) for parsing
software package version: 0:2.7.7-60.oe2403sp4
software home page: http://www.antlr2.org/
description: ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/antlr/antlr@2.7.7
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/antlr/antlrall@2.7.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20212
type: software_Package
supplied by: SPDXRef-gnrtd20218
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21138
type: software_Package
supplied by: SPDXRef-gnrtd21147
name: glassfish-jsp-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Glassfish J2EE JSP API specification
software package version: 0:2.3.3-3.oe2403sp4
software home page: https://github.com/javaee/javaee-jsp-api
description: This project provides a container independent specification of JSP 2.2.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/jsp-api@2.3.4.SNAPSHOT
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.4.SNAPSHOT
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20509
type: software_Package
supplied by: SPDXRef-gnrtd20517
name: objectweb-asm
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java bytecode manipulation and analysis framework
software package version: 0:8.0.1-1.oe2403sp4
software home page: http://asm.ow2.org/
description: ASM is an all purpose Java bytecode manipulation and analysis framework. It can be used to modify existing classes or dynamically generate classes, directly in binary form. Provided common transformations and analysis algorithms allow to easily assemble custom complex transformations and code analysis tools.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-commons@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-debug-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-all@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-analysis@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-tree@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm-util@8.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.ow2.asm/asm@8.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21241
type: software_Package
supplied by: SPDXRef-gnrtd21247
name: jakarta-server-pages-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jakarta Server Pages (JSP) API
software package version: 0:2.3.6-1.oe2403sp4
software home page: https://github.com/eclipse-ee4j/jsp-api
description: Jakarta Server Pages provides a container-independent implementation of the JSP API. This package contains the API only.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/jsp-api@2.3.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@2.3.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet.jsp/jsp-api@2.3.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21123
type: software_Package
supplied by: SPDXRef-gnrtd21361
name: groovy
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Dynamic language for the Java Platform
software package version: 0:2.4.8-13.oe2403sp4
software home page: http://groovy-lang.org
description: Groovy is an agile and dynamic language for the Java Virtual Machine, built upon Java with features inspired by languages like Python, Ruby and Smalltalk.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-sql@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-jmx@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-jsr223@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-swing@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-test@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-nio@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-groovydoc@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-testng@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-servlet@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-groovysh@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-docgenerator@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-xml@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-all@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-bsf@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-json@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-templates@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-console@2.4.8
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.groovy/groovy-ant@2.4.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21254
type: software_Package
supplied by: SPDXRef-gnrtd21260
name: apache-ivy
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java-based dependency manager
software package version: 0:2.4.0-18.oe2403sp4
software home page: https://ant.apache.org/ivy/
description: Apache Ivy is a popular dependency manager focusing on flexibility and simplicity.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jayasoft/ivy@2.4.0.local.20260613184204
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ivy/ivy@2.4.0.local.20260613184204
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21152
type: software_Package
supplied by: SPDXRef-gnrtd21237
name: gpars
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Groovy Parallel Systems
software package version: 0:1.2.1-13.oe2403sp4
software home page: https://github.com/GPars/GPars
description: The GPars framework (http://www.gpars.org) offers Java developers intuitive and safe ways to handle Java or Groovy tasks concurrently. Leveraging the enormous flexibility of the Groovy programing language and building on proven Java technologies, we aim to make concurrent programming for multi-core hardware intuitive, robust and enjoyable.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.gpars/gpars@1.2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20142
type: software_Package
supplied by: SPDXRef-gnrtd20162
name: ant-antlr
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Optional antlr tasks for ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Optional antlr tasks for ant.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-antlr@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20429
type: software_Package
supplied by: SPDXRef-gnrtd20443
name: junit
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java package for unit testing frameworks
software package version: 1:4.13.2-2.oe2403sp4
software home page: http://www.junit.org/
description: JUnit is a simple framework to write repeatable tests. It is an instance of the xUnit architecture for unit testing frameworks.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit@4.13.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/junit/junit-dep@4.13.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21290
type: software_Package
supplied by: SPDXRef-gnrtd21316
name: testng
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java-based testing framework
software package version: 0:6.14.3-7.oe2403sp4
software home page: http://testng.org/
description: TestNG is a testing framework inspired from JUnit and NUnit but introducing some new functionality that make it more powerful and easier to use, such as: * Annotations. * Run your tests in arbitrarily big thread pools with various policies available (all methods in their own thread, one thread per test class, etc...). * Test that your code is multithread safe. * Flexible test configuration. * Support for data-driven testing (with @DataProvider). * Support for parameters. * Powerful execution model (no more TestSuite). * Supported by a variety of tools and plug-ins (Eclipse, IDEA, Maven, etc...). * Embeds BeanShell for further flexibility. * Default JDK functions for runtime and logging (no dependencies). * Dependent methods for application server testing.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.testng/testng@6.14.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21279
type: software_Package
supplied by: SPDXRef-gnrtd21285
name: qdox
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: High speed and small footprint parser
software package version: 0:2.0.3-1.oe2403sp4
software home page: https://github.com/paul-hammant/qdox
description: QDox is used by documentation tools and active code generators.It provides parser for fully extracting class/interface/method definitions.It is a high speed, small footprint parser.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.thoughtworks.qdox/qdox@2.0.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/qdox/qdox@2.0.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20937
type: software_Package
supplied by: SPDXRef-gnrtd20943
name: apache-commons-cli
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: CLI Library provides an API for Java
software package version: 0:1.4-7.oe2403sp4
software home page: http://commons.apache.org/cli/
description: The Apache Commons CLI library provides an API for parsing command line options passed to programs. It's also able to print help messages detailing the options available for a command line tool.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-cli/commons-cli@1.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-cli@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21265
type: software_Package
supplied by: SPDXRef-gnrtd21272
name: jline
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java library for handling console input
software package version: 0:2.14.6-4.oe2403sp4
software home page: https://github.com/jline/jline2
description: JLine is a Java library for handling console input. It is similar in functionality to BSD editline and GNU readline. People familiar with the readline/editline capabilities for modern shells (such as bash and tcsh) will find most of the command editing features of JLine to be familiar.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/jline/jline@2.14.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20356
type: software_Package
supplied by: SPDXRef-gnrtd20362
name: glassfish-servlet-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: API of Java Servlet
software package version: 0:3.1.0-17.oe2403sp4
software home page: http://servlet-spec.java.net
description: Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform. It is the foundation web specification in the Java Enterprise Platform. Developers can build web applications using the Servlet API to interact with the request/response workflow. This package provides some classes and interfaces which define and describe the contracts between a servlet class and the runtime environment provided for an instance of such a class.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/javax.servlet-api@3.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.servlet/servlet-api@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17655
type: software_Package
supplied by: SPDXRef-gnrtd17682
name: jansi
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jansi is a java library for generating and interpreting ANSI escape sequences
software package version: 0:1.17.1-2.oe2403sp4
software home page: http://fusesource.github.io/jansi/
description: Jansi is a small ASl 2.0 licensed Java library that allows you to use ANSI escape sequences to format your console output which works even on windows.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fusesource.jansi/jansi@1.17.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20686
type: software_Package
supplied by: SPDXRef-gnrtd20695
name: ant-junit
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Optional junit tasks for ant
software package version: 0:1.10.12-1.oe2403sp4
software home page: https://ant.apache.org/
description: Optional junit tasks for ant.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-junit@1.10.12
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.ant/ant-junit4@1.10.12
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0