type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd60883
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60884
from: jetty-deploy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40257
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd40258
from: weld-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60986
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60987
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20904
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20905
from: cdi-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60792
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60793
from: jetty-javax-websocket-server-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60795
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60796
from: jetty-javax-websocket-server-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26827
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: tomcat
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20907
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20908
from: cdi-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26825
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: tomcat
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60641
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60642
from: jetty-websocket-common
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23579
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23580
from: glassfish-annotation-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60594
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60595
from: jetty-plus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60644
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60645
from: jetty-websocket-common
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23582
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23583
from: glassfish-annotation-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23494
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23495
from: jetty-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60591
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60592
from: jetty-plus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60989
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60990
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23497
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23498
from: jetty-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60886
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd60887
from: jetty-deploy
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40260
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40261
from: weld-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60985
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-websocket-common
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60975
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60974
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60984
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-util
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60979
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-javax-websocket-server-impl
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60976
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glassfish-annotation-api
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60981
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60978
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-deploy
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60982
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cdi-api
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60977
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60983
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: weld-core
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60980
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jetty-plus
from: jetty-cdi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60884
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20905
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23580
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-with-classpath-exception OR CDDL-1.1)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60592
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40258
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and (CDDL-1.0 or GPLv2 with exceptions) and LGPLv2+ and MIT and OFL-1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60595
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60887
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60987
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23498
type: simplelicensing_LicenseExpression
simplelicensing license expression: ((EPL-1.0 OR Apache-2.0) AND MIT)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23583
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-with-classpath-exception OR CDDL-1.1)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60645
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60793
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60642
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60990
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40261
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and (CDDL-1.0 or GPLv2 with exceptions) and LGPLv2+ and MIT and OFL-1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60796
type: simplelicensing_LicenseExpression
simplelicensing license expression: (EPL-1.0 OR Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23495
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND (EPL-1.0 OR Apache-2.0))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20908
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20906
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23581
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40259
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60988
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23496
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60593
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60885
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26826
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60643
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60794
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23575
type: software_Package
supplied by: SPDXRef-gnrtd23581
name: glassfish-annotation-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java(TM) Specification APIs
software package version: 0:1.2-17.oe2403sp4
software home page: http://glassfish.java.net/
description: This package is a general annotations API for the Java platform (JSR 250).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.annotation/javax.annotation-api@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60973
type: software_Package
supplied by: SPDXRef-gnrtd60988
name: jetty-cdi
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Jetty CDI Configuration
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains Jetty CDI Configuration.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-core@9.4.16.v20190411
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-websocket@9.4.16.v20190411
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-2@9.4.16.v20190411
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.cdi/cdi-servlet@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40223
type: software_Package
supplied by: SPDXRef-gnrtd40259
name: weld-core
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Reference Implementation for JSR-299: Contexts and Dependency Injection (CDI)
software package version: 0:2.3.5-4.oe2403sp4
software home page: http://weld.cdi-spec.org/
description: Weld is the reference implementation (RI) for JSR-299: Java Contexts and Dependency Injection for the Java EE platform (CDI). CDI is the Java standard for dependency injection and contextual lifecycle management, and integrates cleanly with the Java EE platform. Any Java EE 6-compliant application server provides support for JSR-299 (even the web profile).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core-test-common@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.servlet/weld-servlet-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.servlet/weld-servlet@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.probe/weld-probe-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.se/weld-se@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.environment/weld-environment-common@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld.se/weld-se-core@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core-impl@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core-jsf@2.3.5.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.jboss.weld/weld-core@2.3.5.Final
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60771
type: software_Package
supplied by: SPDXRef-gnrtd60794
name: jetty-javax-websocket-server-impl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: javax-websocket-server-impl module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains javax-websocket-server-impl module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.websocket/javax-websocket-server-impl@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60877
type: software_Package
supplied by: SPDXRef-gnrtd60885
name: jetty-deploy
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: deploy module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains deploy module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-deploy@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60575
type: software_Package
supplied by: SPDXRef-gnrtd60593
name: jetty-plus
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: plus module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains plus module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-plus@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20879
type: software_Package
supplied by: SPDXRef-gnrtd20906
name: cdi-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: API for CDI
software package version: 0:1.2-10.oe2403sp4
software home page: http://seamframework.org/Weld
description: Contexts and Dependency Injection for Java EE which is called APIs for JSR-299.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.enterprise/cdi-api@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd26815
type: software_Package
supplied by: SPDXRef-gnrtd26826
name: tomcat
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.118-1.oe2403sp4
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23490
type: software_Package
supplied by: SPDXRef-gnrtd23496
name: jetty-util
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: util module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains util module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty/jetty-util@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60625
type: software_Package
supplied by: SPDXRef-gnrtd60643
name: jetty-websocket-common
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: websocket-common module for Jetty
software package version: 0:9.4.16-8.oe2403sp4
software home page: http://www.eclipse.org/jetty/
description: Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains websocket-common module for Jetty.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.16.v20190411
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1