type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd21842
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21843
from: maven-doxia-sitetools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24916
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd24917
from: maven-invoker
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24919
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd24920
from: maven-invoker
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24925
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd24926
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22687
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22688
from: maven-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20847
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20848
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20870
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20871
from: maven-wagon-provider-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21088
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21089
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22690
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22691
from: maven-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21564
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21565
from: maven-reporting-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22112
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: plexus-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21085
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21086
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21493
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21494
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22007
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: maven-common-artifact-filters
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20193
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22114
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: plexus-archiver
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22022
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22023
from: maven-artifact-transfer
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20191
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22025
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22026
from: maven-artifact-transfer
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22009
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: maven-common-artifact-filters
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21073
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21074
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24899
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: plexus-interactivity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21283
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21284
from: qdox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24897
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: plexus-interactivity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21845
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21846
from: maven-doxia-sitetools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21490
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21491
from: httpcomponents-client
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20844
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20845
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24928
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd24929
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21517
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21518
from: maven-doxia-sink-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21076
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21077
from: apache-commons-io
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22809
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22810
from: plexus-languages
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21286
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21287
from: qdox
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20867
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20868
from: maven-wagon-provider-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21561
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21562
from: maven-reporting-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21514
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21515
from: maven-doxia-sink-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22806
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22807
from: plexus-languages
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24905
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-reporting-api
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24908
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-io
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24921
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-doxia-sitetools
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24909
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-invoker
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24878
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interactivity
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24902
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-wagon-provider-api
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24876
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-languages
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24906
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang3
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24901
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-archiver
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24875
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-archiver
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24900
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24922
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-doxia-sink-api
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24907
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24874
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24903
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24924
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: qdox
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24877
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24904
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpcomponents-client
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24873
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-artifact-transfer
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24923
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-common-artifact-filters
from: maven-javadoc-plugin
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21089
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21518
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21287
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24920
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21494
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24917
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20848
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21284
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21843
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22810
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20845
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20871
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21491
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21077
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22688
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21846
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21562
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22026
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22691
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22023
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24929
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21515
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21086
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20868
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21565
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22807
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21074
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24926
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21075
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22113
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21516
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24918
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20192
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21087
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22024
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20869
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24927
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21492
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20846
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21285
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22689
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22808
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22008
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21563
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21844
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24898
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22074
type: software_Package
supplied by: SPDXRef-gnrtd22113
name: plexus-archiver
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Archiver Components
software package version: 0:4.2.7-2.oe2403sp4
software home page: http://codehaus-plexus.github.io/plexus-archiver
description: The Plexus project provides a full software stack for creating and executing software projects. It provides a number of pre-built components for common tasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more. However, Plexus is also able to reuse your existing components written for other IoC frameworks such as Spring, Avalon and Pico Container unmodified, as well as allowing you to reuse your existing code inside the Plexus Container. Plexus comes with an application server that can run your applications, making it trivial to build a standalone executable distribution with common features such as service execution if needed. However, Plexus applications can be run in any environment by embedding the container in an existing application, including Java EE applications or web applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21279
type: software_Package
supplied by: SPDXRef-gnrtd21285
name: qdox
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: High speed and small footprint parser
software package version: 0:2.0.3-1.oe2403sp4
software home page: https://github.com/paul-hammant/qdox
description: QDox is used by documentation tools and active code generators.It provides parser for fully extracting class/interface/method definitions.It is a high speed, small footprint parser.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.thoughtworks.qdox/qdox@2.0.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/qdox/qdox@2.0.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20862
type: software_Package
supplied by: SPDXRef-gnrtd20869
name: maven-wagon-provider-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: the maven-wagon provider-api module
software package version: 0:3.1.0-3.oe2403sp4
software home page: http://maven.apache.org/wagon
description: the maven-wagon provider-api module.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24879
type: software_Package
supplied by: SPDXRef-gnrtd24898
name: plexus-interactivity
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interactivity Handler Component
software package version: 0:1.0-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interactivity
description: The Plexus project provides a full software stack for creating and executing software projects. It provides a number of pre-built components for common tasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more. However, Plexus is also able to reuse your existing components written for other IoC frameworks such as Spring, Avalon and Pico Container unmodified, as well as allowing you to reuse your existing code inside the Plexus Container. Plexus comes with an application server that can run your applications, making it trivial to build a standalone executable distribution with common features such as service execution if needed. However, Plexus applications can be run in any environment by embedding the container in an existing application, including Java EE applications or web applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interactivity-jline@1.0.alpha.6
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.0.alpha.6
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24872
type: software_Package
supplied by: SPDXRef-gnrtd24927
name: maven-javadoc-plugin
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven Javadoc Plugin
software package version: 0:3.0.1-3.oe2403sp4
software home page: http://maven.apache.org/plugins/maven-javadoc-plugin
description: Generate plugins used by javadocs for the specified project.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.plugins/maven-javadoc-plugin@3.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22676
type: software_Package
supplied by: SPDXRef-gnrtd22689
name: maven-archiver
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven Archiver
software package version: 0:3.5.2-1.oe2403sp4
software home page: https://maven.apache.org/shared/maven-archiver/
description: Provides utility methods for creating JARs and other archive files from a Maven project.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-archiver@3.5.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22001
type: software_Package
supplied by: SPDXRef-gnrtd22008
name: maven-common-artifact-filters
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Maven Common Artifact Filters
software package version: 0:3.0.1-7.oe2403sp4
software home page: https://maven.apache.org/shared/
description: A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.0.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21068
type: software_Package
supplied by: SPDXRef-gnrtd21075
name: apache-commons-io
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of utilities for developing IO functionality.
software package version: 1:2.15.1-1.oe2403sp4
software home page: http://commons.apache.org/proper/commons-io
description: Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-io/commons-io@2.15.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-io@2.15.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24910
type: software_Package
supplied by: SPDXRef-gnrtd24918
name: maven-invoker
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Fires a Maven build in a new JVM
software package version: 0:2.2-10.oe2403sp4
software home page: http://maven.apache.org/shared/maven-invoker/
description: This API is concerned with firing a Maven build in a new JVM. It accomplishes its task by building up a conventional Maven command line from options given in the current request, along with those global options specified in the invoker itself. Once it has the command line, the invoker will execute it, and capture the resulting exit code or any exception thrown to signal a failure to execute. Input/output control can be specified using an InputStream and up to two InvocationOutputHandlers.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-invoker@2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21473
type: software_Package
supplied by: SPDXRef-gnrtd21492
name: httpcomponents-client
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A library of components for building client side HTTP services
software package version: 0:4.5.5-7.oe2403sp4
software home page: http://hc.apache.org/
description: HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by httpcomponents HttpCore,which provides reusable components for HTTP state management, HTTP connection management, and client-side authentication. HttpComponents Client is almost equalto Commons HttpClient 3.x. Users of Commons HttpClient strongly support it.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpclient@4.5.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.httpcomponents/httpmime@4.5.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21556
type: software_Package
supplied by: SPDXRef-gnrtd21563
name: maven-reporting-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: API to manage report generation
software package version: 0:3.0-17.oe2403sp4
software home page: http://maven.apache.org/shared/maven-reporting-api
description: API to manage report generation. Maven-reporting-api is included in Maven 2.x core distribution, but moved to shared components to achieve report decoupling from Maven 3 core. This is a replacement package for maven-shared-reporting-api
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-reporting-api@3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21553
type: software_Package
supplied by: SPDXRef-gnrtd21844
name: maven-doxia-sitetools
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Doxia content generation framework
software package version: 0:1.7.5-5.oe2403sp4
software home page: https://maven.apache.org/doxia/
description: Doxia is a content generation framework which aims to provide its users with powerful techniques for generating static and dynamic content: Doxia can be used in web-based publishing context to generate static sites, in addition to being incorporated into dynamic content generation systems like blogs, wikis and content management systems.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-doxia-tools@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.7.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-doc-renderer@1.7.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20850
type: software_Package
supplied by: SPDXRef-gnrtd21087
name: maven-lib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22800
type: software_Package
supplied by: SPDXRef-gnrtd22808
name: plexus-languages
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Languages
software package version: 0:0.9.10-4.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-languages
description: Plexus Languages maintains shared language features.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-java@0.9.10
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20187
type: software_Package
supplied by: SPDXRef-gnrtd20192
name: apache-commons-lang3
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Lang version 3.0
software package version: 0:3.18.0-1.oe2403sp4
software home page: https://commons.apache.org/proper/commons-lang/
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. The Commons Lang Component provides these extra methods. Lang provides a host of helper utilities for the java.lang API, notably String manipulation methods, basic numerical methods, object reflection, concurrency, creation and serialization and System properties. Additionally it contains basic enhancements to java.util.Date and a series of utilities dedicated to help with building methods, such as hashCode, toString and equals. Note that Lang 3.0 (and subsequent versions) use a different package (org.apache.commons.lang3) than the previous versions (org.apache.commons.lang), allowing it to be used at the same time as an earlier version.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang3@3.18.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21499
type: software_Package
supplied by: SPDXRef-gnrtd21516
name: maven-doxia-sink-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Sink-api module for maven-doxia
software package version: 0:1.7-13.oe2403sp4
software home page: http://maven.apache.org/doxia/
description: This package provides Sink-api module for maven-doxia.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20840
type: software_Package
supplied by: SPDXRef-gnrtd20846
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22011
type: software_Package
supplied by: SPDXRef-gnrtd22024
name: maven-artifact-transfer
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Transfer
software package version: 1:0.9.0-7.oe2403sp4
software home page: http://maven.apache.org/shared/maven-artifact-transfer
description: An API to either install or deploy artifacts with Maven 3.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.9.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1