type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd5836
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5837
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20870
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20871
from: maven-wagon-provider-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21029
from: maven-resolver-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21044
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21045
from: maven-resolver-spi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20191
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21013
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21014
from: google-guice
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20927
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20928
from: plexus-classworlds
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21005
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21006
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32967
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32968
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20844
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20845
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32913
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32914
from: xmvn-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20915
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20916
from: plexus-containers-component-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32950
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32951
from: xmvn-connector-aether
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21057
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21058
from: maven-resolver-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20859
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20860
from: plexus-cipher
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32925
from: xmvn-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20193
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21025
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21026
from: maven-resolver-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21054
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21055
from: maven-resolver-impl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20941
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20942
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32953
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32954
from: xmvn-connector-aether
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20856
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20857
from: plexus-cipher
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20944
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20945
from: apache-commons-cli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17831
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd17832
from: atinject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32928
from: xmvn-core
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21010
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21011
from: google-guice
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21041
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21042
from: maven-resolver-spi
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20867
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20868
from: maven-wagon-provider-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20957
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20958
from: plexus-sec-dispatcher
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5833
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5834
from: slf4j
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20933
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd10481
from: sisu-inject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20954
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20955
from: plexus-sec-dispatcher
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20930
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20931
from: plexus-classworlds
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20964
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd20965
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20847
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20848
from: plexus-utils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32916
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32917
from: xmvn-api
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21088
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21089
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20967
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20968
from: plexus-interpolation
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21008
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21009
from: guava20
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21085
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21086
from: maven-lib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21033
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd21034
from: maven-resolver-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17828
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd17829
from: atinject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21030
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd21031
from: maven-resolver-util
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20935
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd10481
from: sisu-inject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32970
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32971
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20918
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd20919
from: plexus-containers-component-annotations
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32932
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-util
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32958
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32941
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-sec-dispatcher
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32943
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xmvn-connector-aether
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32963
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32965
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: guava20
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32934
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-cipher
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32960
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-api
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32940
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-interpolation
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32933
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-wagon-provider-api
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32939
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-containers-component-annotations
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32964
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: google-guice
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32936
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sisu-inject
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32959
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xmvn-api
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32938
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-cli
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32962
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-spi
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32961
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-resolver-impl
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32955
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang3
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32937
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: slf4j
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32956
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xmvn-core
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32935
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-classworlds
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32957
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: atinject
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32942
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: plexus-utils
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32966
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: maven-lib
from: xmvn-minimal
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21026
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20848
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21014
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5837
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20958
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20871
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20968
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21034
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20860
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21006
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17832
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20916
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21042
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21009
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and CC0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21029
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20919
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17829
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20845
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21055
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32954
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21031
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32914
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5834
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd10481
type: simplelicensing_LicenseExpression
simplelicensing license expression: EPL-1.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21058
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20931
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and Plexus
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21045
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20942
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32968
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21086
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20955
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21089
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20965
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0 and ASL 1.1 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32971
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21011
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20857
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32951
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32917
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20868
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20945
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20858
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21056
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20934
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20846
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20943
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20869
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32952
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17830
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32969
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21007
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20929
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20917
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20966
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21032
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32915
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20956
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20192
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21087
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21043
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5835
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21012
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32931
type: software_Package
supplied by: SPDXRef-gnrtd32969
software download location: NOASSERTION
summary: A simplified version of xmvn
software package version: 0:3.0.0-25.oe2403sp4
software home page: https://fedora-java.github.io/xmvn/
description: This package provides minimal version of XMvn, but can't use remote repositories.
name: xmvn-minimal
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20999
type: software_Package
supplied by: SPDXRef-gnrtd21007
name: guava20
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Google Libraries for Java
software package version: 0:20.0-11.oe2403sp4
software home page: https://github.com/google/guava
description: Guava is a set of core libraries that includes new collection types ,immutable collections, a graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@12.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@19.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@14.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.collections/google-collections@18.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@12.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@13.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@16.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@13.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@17.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-testlib@12.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@11.0.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava-jdk5@20.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@10.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@15.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.guava/guava@12.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20960
type: software_Package
supplied by: SPDXRef-gnrtd20966
name: plexus-interpolation
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Interpolation API
software package version: 0:1.26-2.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-interpolation
description: Plexus interpolator is the outgrowth of multiple iterations of development focused on providing a more modular, flexible interpolation framework for the expression language style commonly seen in Maven, Plexus, and other related projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20852
type: software_Package
supplied by: SPDXRef-gnrtd20858
name: plexus-cipher
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Cipher: encryption/decryption Component
software package version: 0:1.7-16.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-cipher
description: Plexus Cipher: encryption/decryption Component.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.plexus/plexus-cipher@1.7
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5829
type: software_Package
supplied by: SPDXRef-gnrtd5835
name: slf4j
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Simple Logging Facade for Java(SLF4J)
software package version: 0:1.7.25-8.oe2403sp4
software home page: http://www.slf4j.org/
description: The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the desired logging framework at deployment time.Before you start using SLF4J, we highly recommend that you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the addition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on the class path, then SLF4J will default to a no-operation implementation. In case you wish to migrate your Java source files to SLF4J, consider our migrator tool which can migrate your project to use the SLF4J API in just a few minutes. In case an externally-maintained component you depend on uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have a look at SLF4J's binary-support for legacy APIs.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-api@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-nop@1.7.25
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.slf4j/slf4j-simple@1.7.25
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20850
type: software_Package
supplied by: SPDXRef-gnrtd21087
name: maven-lib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Core part of Maven
software package version: 1:3.6.3-2.oe2403sp4
software home page: http://maven.apache.org/
description: Core part of Apache Maven that can be used as a library.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-embedder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-plugin-api@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-artifact@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-builder-support@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-aether-provider@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-settings@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-core@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-compat@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model-builder@3.6.3
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven/maven-model@3.6.3
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20187
type: software_Package
supplied by: SPDXRef-gnrtd20192
name: apache-commons-lang3
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Lang version 3.0
software package version: 0:3.18.0-1.oe2403sp4
software home page: https://commons.apache.org/proper/commons-lang/
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. The Commons Lang Component provides these extra methods. Lang provides a host of helper utilities for the java.lang API, notably String manipulation methods, basic numerical methods, object reflection, concurrency, creation and serialization and System properties. Additionally it contains basic enhancements to java.util.Date and a series of utilities dedicated to help with building methods, such as hashCode, toString and equals. Note that Lang 3.0 (and subsequent versions) use a different package (org.apache.commons.lang3) than the previous versions (org.apache.commons.lang), allowing it to be used at the same time as an earlier version.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang3@3.18.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20923
type: software_Package
supplied by: SPDXRef-gnrtd20929
name: plexus-classworlds
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: A framework require complex manipulation of Java's ClassLoaders
software package version: 0:2.5.2-10.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-classworlds
description: Plexus Classworlds is a framework for container developers who require complex manipulation of Java's ClassLoaders. Java's native ClassLoader mechanisms and classes can cause much headache and confusion for certain types of application developers. Projects which involve dynamic loading of components or otherwise represent a 'container' can benefit from the classloading control provided by Classworlds. Plexus Classworlds provides a richer set of semantics for class loading than Java's normal mechanisms, while still being able to provide a ClassLoader interface to integrate seamlessly with the Java environment.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/classworlds/classworlds@2.5.2
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20877
type: software_Package
supplied by: SPDXRef-gnrtd20934
name: sisu-inject
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: inject package for sisu
software package version: 1:0.3.5-1.oe2403sp4
software home page: https://eclipse.org/sisu
description: inject package for sisu
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.sisu/sisu-inject-plexus@0.3.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd17824
type: software_Package
supplied by: SPDXRef-gnrtd17830
name: atinject
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Java API for JSR-330 Dependency Injection
software package version: 0:1-31.oe2403sp4
software home page: https://github.com/svn2github/atinject/
description: AtInject is the Java API build by the JSR-330.It's a set of API aiming to standardize an extensible dependency injection paradigm, as those provided by Guice, Spring or Plexus projects.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/javax.inject/javax.inject@1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21016
type: software_Package
supplied by: SPDXRef-gnrtd21032
name: maven-resolver-util
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Utilities
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: A collection of utility classes to ease usage of the repository system.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-util@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20948
type: software_Package
supplied by: SPDXRef-gnrtd20956
name: plexus-sec-dispatcher
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Security Dispatcher Component
software package version: 0:1.4-26.oe2403sp4
software home page: https://github.com/EuroLinux/els-tests-plexus-sec-dispatcher
description: Plexus Security Dispatcher Component.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21036
type: software_Package
supplied by: SPDXRef-gnrtd21043
name: maven-resolver-spi
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver SPI
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: The service provider interface for repository system implementations and repository connectors.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-spi@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20862
type: software_Package
supplied by: SPDXRef-gnrtd20869
name: maven-wagon-provider-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: the maven-wagon provider-api module
software package version: 0:3.1.0-3.oe2403sp4
software home page: http://maven.apache.org/wagon
description: the maven-wagon provider-api module.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32920
type: software_Package
supplied by: SPDXRef-gnrtd32926
name: xmvn-core
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides XMvn Core
software package version: 0:3.0.0-25.oe2403sp4
software home page: https://fedora-java.github.io/xmvn/
description: XMvn Core module implements the essential functionality of XMvn such as resolution of artifacts from system repository. XMvn core is needed by all other modules.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fedoraproject.xmvn/xmvn-core@3.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20911
type: software_Package
supplied by: SPDXRef-gnrtd20917
name: plexus-containers-component-annotations
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Component API from plexus-containers
software package version: 0:1.7.1-7.oe2403sp4
software home page: https://github.com/codehaus-plexus/plexus-containers
description: plexus-component-annotations provides the Java 5 annotations for plexus components.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32909
type: software_Package
supplied by: SPDXRef-gnrtd32915
name: xmvn-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides XMvn API
software package version: 0:3.0.0-25.oe2403sp4
software home page: https://fedora-java.github.io/xmvn/
description: This module contains public interface for functionality implemented by XMvn Core.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fedoraproject.xmvn/xmvn-api@3.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21047
type: software_Package
supplied by: SPDXRef-gnrtd21056
name: maven-resolver-impl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver Implementation
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: An implementation of the repository system.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-impl@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32944
type: software_Package
supplied by: SPDXRef-gnrtd32952
name: xmvn-connector-aether
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provides XMvn Connector for Maven Resolver
software package version: 0:3.0.0-25.oe2403sp4
software home page: https://fedora-java.github.io/xmvn/
description: XMvn Connector for Eclipse Aether provides integration of Eclipse Aether with XMvn. It provides an adapter which allows XMvn resolver to be used as Aether workspace reader.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.fedoraproject.xmvn/xmvn-connector-aether@3.0.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20937
type: software_Package
supplied by: SPDXRef-gnrtd20943
name: apache-commons-cli
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: CLI Library provides an API for Java
software package version: 0:1.4-7.oe2403sp4
software home page: http://commons.apache.org/cli/
description: The Apache Commons CLI library provides an API for parsing command line options passed to programs. It's also able to print help messages detailing the options available for a command line tool.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/commons-cli/commons-cli@1.4
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-cli@1.4
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21021
type: software_Package
supplied by: SPDXRef-gnrtd21027
name: maven-resolver-api
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Maven Artifact Resolver API
software package version: 1:1.1.1-4.oe2403sp4
software home page: http://maven.apache.org/resolver/
description: The application programming interface for the repository system.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.1.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.aether/aether-api@1.1.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20983
type: software_Package
supplied by: SPDXRef-gnrtd21012
name: google-guice
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: An open source, Java-based dependency injection framework
software package version: 0:4.1-13.oe2403sp4
software home page: https://github.com/google/guice
description: Google's Guice is a Java-based dependency injection framework, which means approximately nothing to people who aren't familiar with it. Google's Guice is a way to build a graph of dependencies so you can instantiate complex objects made of simpler parts.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/com.google.inject/guice@4.1.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.sonatype.sisu/sisu-guice@4.1.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd20840
type: software_Package
supplied by: SPDXRef-gnrtd20846
name: plexus-utils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software download location: NOASSERTION
summary: Plexus Common Utilities
software package version: 0:3.3.0-1.oe2403sp4
software home page: https://codehaus-plexus.github.io/plexus-utils/
description: A collection of various utility classes to ease working with strings, files, command lines, XML and more.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/plexus/plexus-utils@3.3.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@18.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@20.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@10.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@10.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@12.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@10.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@12.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-jdk5@10.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@14.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@17.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@15.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@11.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@14.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@13.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava@16.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.guava/guava-testlib@19.0
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@16.0.1
external ref type: other

type: ExternalRef
comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
locator: pkg:maven/com.google.collections/google-collections@13.0.1
external ref type: other