type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-18T18:19:57Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-18T18:19:57Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/aarch64-862ca6fa-7809-4d26-a92a-451d237033e3-specv3/SPDXRef-gnrtd451
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd452
from: python-setuptools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5190
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5191
from: java-11-openjdk-headless (SPDXRef-gnrtd5174)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5223
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5224
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5212)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5171
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5172
from: java-11-openjdk-headless (SPDXRef-gnrtd5155)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5168
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5169
from: java-11-openjdk-headless (SPDXRef-gnrtd5155)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5209
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5210
from: java-11-openjdk-headless (SPDXRef-gnrtd5193)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd448
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd449
from: python-setuptools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5135
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5136
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5121)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19927
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19928
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5115
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5116
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5091)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5152
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5153
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5138)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd441
from: python-pip-wheel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5132
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5133
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5121)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5187
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5188
from: java-11-openjdk-headless (SPDXRef-gnrtd5174)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5118
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5119
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5091)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5149
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5150
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5138)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19924
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19925
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16599
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16600
from: netty
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5226
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5227
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5212)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16602
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16603
from: netty
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5206
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5207
from: java-11-openjdk-headless (SPDXRef-gnrtd5193)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd444
from: python-pip-wheel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19921
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5121)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19914
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python-setuptools
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19917
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5174)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19919
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5212)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19920
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5193)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19915
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: netty
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19922
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5091)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19923
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5138)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19918
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5155)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19916
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python-pip-wheel
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5188
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5191
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16603
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5119
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd449
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and (BSD or ASL 2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd444
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5227
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5136
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5133
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5153
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5224
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16600
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5116
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19928
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5172
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19925
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd452
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and (BSD or ASL 2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5207
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5150
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5169
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5210
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16601
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19926
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5134
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5117
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd450
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5208
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5189
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5225
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5170
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5151
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5174
type: software_Package
supplied by: SPDXRef-gnrtd5189
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.25.9-3.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5193
type: software_Package
supplied by: SPDXRef-gnrtd5208
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.24.8-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd447
type: software_Package
supplied by: SPDXRef-gnrtd450
software download location: NOASSERTION
summary: Easily build and distribute Python packages
software package version: 0:68.0.0-2.oe2403
software home page: https://pypi.python.org/pypi/setuptools
description: Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. This package contains a python wheel of setuptools to use with venv.
name: python-setuptools
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16591
type: software_Package
supplied by: SPDXRef-gnrtd16601
name: netty
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Asynchronous event-driven network application Java framework
software package version: 0:4.1.13-22.oe2403
software home page: https://netty.io/
description: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-memcache@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-resolver@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-haproxy@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-smtp@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-handler@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-sctp@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-http2@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-resolver-dns@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-native-epoll@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-mqtt@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-all@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-socks@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-native-unix-common@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-xml@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-handler-proxy@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-redis@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-buffer@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-dev-tools@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-dns@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-native-kqueue@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-common@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-http@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-stomp@4.1.13.Final
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5138
type: software_Package
supplied by: SPDXRef-gnrtd5151
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.422.b05-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5155
type: software_Package
supplied by: SPDXRef-gnrtd5170
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.27.6-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5091
type: software_Package
supplied by: SPDXRef-gnrtd5117
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.452.b09-2.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd438
type: software_Package
supplied by: SPDXRef-gnrtd442
software download location: NOASSERTION
summary: The pip wheel
software package version: 0:23.3.1-10.oe2403
software home page: http://www.pip-installer.org
description: A Python wheel of pip to use with venv
name: python-pip-wheel
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5121
type: software_Package
supplied by: SPDXRef-gnrtd5134
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.432.b06-0.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5212
type: software_Package
supplied by: SPDXRef-gnrtd5225
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.462.b08-3.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19913
type: software_Package
supplied by: SPDXRef-gnrtd19926
name: jython
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java implementation of the Python language
software package version: 0:2.7.1-3.oe2403
software home page: http://www.jython.org/
description: Jython is an implementation of the high-level, dynamic, object-oriented language Python seamlessly integrated with the Java platform. The predecessor to Jython, JPython, is certified as 100% Pure Java. Jython is freely available for both commercial and non-commercial use and is distributed with source code. Jython is complementary to Java and is especially suited for the following tasks: Embedded scripting - Java programmers can add the Jython libraries to their system to allow end users to write simple or complicated scripts that add functionality to the application. Interactive experimentation - Jython provides an interactive interpreter that can be used to interact with Java packages or with running Java applications. This allows programmers to experiment and debug any Java system using Jython. Rapid application development - Python programs are typically 2-10X shorter than the equivalent Java program. This translates directly to increased programmer productivity. The seamless interaction between Python and Java allows developers to freely mix the two languages both during development and in shipping products.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.python/jython@2.7.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.python/jython-standalone@2.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1