type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd21617
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21618
from: velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22284
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22285
from: apache-commons-beanutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23237
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd23238
from: apache-commons-validator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21614
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21615
from: velocity
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20269
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20270
from: jakarta-oro
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22327
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22328
from: apache-commons-chain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4108
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4109
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164764
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22322
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22323
from: apache-commons-digester
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22324
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22325
from: apache-commons-chain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4055
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4056
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3810
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20484
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20482
from: dom4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21595
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21596
from: apache-commons-collections
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20266
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20267
from: jakarta-oro
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21592
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21593
from: apache-commons-collections
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4052
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4053
from: java-11-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20481
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20482
from: dom4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3808
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd242
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113855
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd113856
from: struts
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23234
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd23235
from: apache-commons-validator
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20216
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20217
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164766
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22287
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd22288
from: apache-commons-beanutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22319
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd22320
from: apache-commons-digester
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20219
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20220
from: apache-commons-logging
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113852
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd113853
from: struts
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4111
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4112
from: java-1.8.0-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164762
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-chain
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164759
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164754
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164753
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jakarta-oro
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164758
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164761
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: struts
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164760
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-beanutils
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164752
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dom4j
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164755
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-collections
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164763
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: velocity
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164757
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-logging
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164751
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-validator
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164756
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-digester
from: velocity-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22285
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22323
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4053
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20220
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22288
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22325
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21593
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4109
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20482
type: simplelicensing_LicenseExpression
simplelicensing license expression: Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4112
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20270
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20267
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20217
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21596
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4056
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113856
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd242
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21618
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21615
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22320
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23238
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113853
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23235
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22328
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113854
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4054
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22286
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164765
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20268
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4110
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21594
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21616
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23236
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20218
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20483
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22326
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22321
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3809
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4093
type: software_Package
supplied by: SPDXRef-gnrtd4110
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164750
type: software_Package
supplied by: SPDXRef-gnrtd164765
name: velocity-tools
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Collection of useful tools for Velocity template engine
software package version: 0:2.0-4.oe2403sp4
software home page: http://velocity.apache.org/tools/releases/2.0/
description: The VelocityTools project is a collection of useful Java classes (aka tools), as well as infrastructure to easily, automatically and transparently make these tools available to Velocity templates. Project include easy integration of Velocity into the view-layer of web applications (via the VelocityViewTag and VelocityViewServlet) and integration with Struts 1.x applications.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/velocity-tools/velocity-tools-view@2.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/velocity-tools/velocity-tools@2.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/velocity-tools/velocity-tools-generic@2.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.velocity/velocity-tools@2.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.velocity/velocity-tools-generic@2.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.velocity/velocity-tools-view@2.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3807
type: software_Package
supplied by: SPDXRef-gnrtd3809
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20212
type: software_Package
supplied by: SPDXRef-gnrtd20218
name: apache-commons-logging
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Logging
software package version: 0:1.2-17.oe2403sp4
software home page: http://commons.apache.org/logging
description: The commons-logging package provides a simple, component-oriented interface (org.apache.commons.logging.Log) and a wrapper for the logging system. The user can choose which system to use. A few basic implementations are also provided to allow users to use the package independently. commons-logging was heavily influenced by Avalon's Logkit and Log4J. The commons-logging abstraction is meant to minimize the differences between the two, and to allow a developer to not tie himself to a particular logging implementation.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-adapters@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/apache/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-api@1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-logging@1.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-logging/commons-logging-adapters@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd23226
type: software_Package
supplied by: SPDXRef-gnrtd23236
name: apache-commons-validator
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Validator
software package version: 0:1.7-1.oe2403sp4
software home page: http://commons.apache.org/validator/
description: A common issue when receiving data either electronically or from user input is verifying the integrity of the data. This work is repetitive and becomes even more complicated when different sets of validation rules need to be applied to the same set of data based on locale for example. Error messages may also vary by locale. This package attempts to address some of these issues and speed development and maintenance of validation rules.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-validator@1.7
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-validator/commons-validator@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20467
type: software_Package
supplied by: SPDXRef-gnrtd20483
name: dom4j
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Flexible XML framework for Java
software package version: 0:2.0.0-9.oe2403sp4
software home page: https://dom4j.github.io/
description: dom4j is an easy to use, open source library for working with XML, XPath and XSLT on the Java platform using the Java Collections Framework and with full support for DOM, SAX and JAXP.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.dom4j/dom4j@2.0.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/dom4j/dom4j@2.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21608
type: software_Package
supplied by: SPDXRef-gnrtd21616
name: velocity
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java-based template engine
software package version: 0:1.7-26.oe2403sp4
software home page: http://velocity.apache.org/
description: Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the Model-View-Controller (MVC) model, meaning that web page designers can focus solely on creating a site that looks good, and programmers can focus solely on writing top-notch code. Velocity separates Java code from the web pages, making the web site more maintainable over the long run and providing a viable alternative to Java Server Pages (JSPs) or PHP. Velocity's capabilities reach well beyond the realm of web sites; for example, it can generate SQL and PostScript and XML from templates. It can be used either as a standalone utility for generating source code and reports, or as an integrated component of other systems. Velocity also provides template services for the Turbine web application framework. Velocity+Turbine provides a template service that will allow web applications to be developed according to a true MVC model.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/velocity/velocity@1.7
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.velocity/velocity@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22278
type: software_Package
supplied by: SPDXRef-gnrtd22286
name: apache-commons-beanutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java utility methods for accessing and modifying the properties of arbitrary JavaBeans
software package version: 0:1.9.4-4.oe2403sp4
software home page: http://commons.apache.org/beanutils
description: The scope of this package is to create a package of Java utility methods for accessing and modifying the properties of arbitrary JavaBeans. No dependencies outside of the JDK are required, so the use of this package is very lightweight.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-beanutils/commons-beanutils-core@1.9.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-beanutils@1.9.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-beanutils-bean-collections@1.9.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-beanutils-core@1.9.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-beanutils/commons-beanutils-bean-collections@1.9.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-beanutils/commons-beanutils@1.9.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22313
type: software_Package
supplied by: SPDXRef-gnrtd22321
name: apache-commons-digester
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: XML to Java object mapping module
software package version: 0:2.1-1.oe2403sp4
software home page: http://commons.apache.org/digester/
description: Many projects read XML configuration files to provide initialization of various Java objects within the system. There are several ways of doing this, and the Digester component was designed to provide a common implementation that can be used in many different projects
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-digester/commons-digester@2.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-digester@2.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20262
type: software_Package
supplied by: SPDXRef-gnrtd20268
name: jakarta-oro
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide compatible regular expressions
software package version: 0:2.0.8-26.oe2403sp4
software home page: http://jakarta.apache.org/oro
description: The Jakarta-ORO Java classes are a set of text-processing Java classes that provide Perl5 compatible regular expressions, AWK-like regular expressions, glob expressions, and utility classes for performing substitutions, splits, filtering filenames, etc. This library is the successor to the OROMatcher, AwkTools, PerlTools, and TextTools libraries originally from ORO, Inc. Despite little activity in the form of new development initiatives, issue reports, questions, and suggestions are responded to quickly.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/oro/oro@2.0.8
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21588
type: software_Package
supplied by: SPDXRef-gnrtd21594
name: apache-commons-collections
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A series of new interfaces,implementations and utilities provided for Java Collections
software package version: 0:3.2.2-11.oe2403sp4
software home page: http://commons.apache.org/collections/
description: The Java Collections Framework was a major addition in JDK 1.2. It added many powerful data structures that accelerate development of most significant Java applications. Since that time it has become the recognised standard for collection handling in Java. Commons-Collections seek to build upon the JDK classes by providing new interfaces, implementations and utilities. There are many features, including: - Bag interface for collections that have a number of copies of each object - BidiMap interface for maps that can be looked up from value to key as well and key to value - MapIterator interface to provide simple and quick iteration over maps - Transforming decorators that alter each object as it is added to the collection - Composite collections that make multiple collections look like one - Ordered maps and sets that retain the order elements are added in, including an LRU based map - Reference map that allows keys and/or values to be garbage collected under close control - Many comparator implementations - Many iterator implementations - Adapter classes from array and enumerations to collections - Utilities to test or create typical set-theory properties of collections such as union, intersection, and closure
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-collections/commons-collections@3.2.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4035
type: software_Package
supplied by: SPDXRef-gnrtd4054
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113838
type: software_Package
supplied by: SPDXRef-gnrtd113854
name: struts
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Web application framework
software package version: 0:1.3.10-1.oe2403sp4
software home page: http://struts.apache.org/
description: Welcome to the Struts Framework! The goal of this project is to provide an open source framework useful in building web applications with Java Servlet and JavaServer Pages (JSP) technology. Struts encourages application architectures based on the Model-View-Controller (MVC) design paradigm, colloquially known as Model 2 in discussions on various servlet and JSP related mailing lists. Struts includes the following primary areas of functionality: A controller servlet that dispatches requests to appropriate Action classes provided by the application developer. JSP custom tag libraries, and associated support in the controller servlet, that assists developers in creating interactive form-based applications. Utility classes to support XML parsing, automatic population of JavaBeans properties based on the Java reflection APIs, and internationalization of prompts and messages.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-core@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-tiles@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-mailreader-dao@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-extras@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-el@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-taglib@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-scripting@1.3.10
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.struts/struts-faces@1.3.10
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd22296
type: software_Package
supplied by: SPDXRef-gnrtd22326
name: apache-commons-chain
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: An implementation of the GoF Chain of Responsibility pattern
software package version: 0:1.2-2.oe2403sp4
software home page: http://commons.apache.org/chain/
description: A popular technique for organizing the execution of complex processing flows is the "Chain of Responsibility" pattern, as described (among many other places) in the classic "Gang of Four" design patterns book. Although the fundamental API contracts required to implement this design pattern are extremely simple, it is useful to have a base API that facilitates using the pattern, and (more importantly) encouraging composition of command implementations from multiple diverse sources. Towards that end, the Chain API models a computation as a series of "commands" that can be combined into a "chain". The API for a command consists of a single method (execute()), which is passed a "context" parameter containing the dynamic state of the computation, and whose return value is a boolean that determines whether or not processing for the current chain has been completed (true), or whether processing should be delegated to the next command in the chain (false).
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-chain/commons-chain@1.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1