type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-25T18:05:22Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-25T18:05:22Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/x86_64-84db5858-aed1-4f99-8f83-e69532d65076-specv3/SPDXRef-gnrtd16534
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16535
from: netty
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5150
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5151
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5137)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5131
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5132
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5121)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5169
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5170
from: java-11-openjdk-headless (SPDXRef-gnrtd5153)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5223
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5224
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5210)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd263
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd264
from: python-pip-wheel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5134
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5135
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5121)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5185
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5186
from: java-11-openjdk-headless (SPDXRef-gnrtd5172)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5166
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5167
from: java-11-openjdk-headless (SPDXRef-gnrtd5153)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd272
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd273
from: python-setuptools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd260
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: python-pip-wheel
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5220
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5221
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5210)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5188
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5189
from: java-11-openjdk-headless (SPDXRef-gnrtd5172)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5118
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5119
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5092)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16537
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16538
from: netty
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd269
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd270
from: python-setuptools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5115
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5116
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5092)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5204
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5205
from: java-11-openjdk-headless (SPDXRef-gnrtd5191)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5147
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5148
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5137)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19955
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19956
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19952
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19953
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5207
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5208
from: java-11-openjdk-headless (SPDXRef-gnrtd5191)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19948
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python-pip-wheel
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19946
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5092)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19949
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python-setuptools
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19947
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5137)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19943
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5210)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19950
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5153)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19951
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: netty
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19944
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5191)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19942
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5172)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19945
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5121)
from: jython
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5189
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5132
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5170
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5151
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5167
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd273
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and (BSD or ASL 2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd264
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16538
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5116
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19953
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5205
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5186
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5224
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5135
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5119
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd270
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and (BSD or ASL 2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5208
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19956
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16535
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5221
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5148
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19954
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5168
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5187
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5117
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5133
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5149
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd262
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5206
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5222
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd271
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16536
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd258
type: software_Package
supplied by: SPDXRef-gnrtd262
software download location: NOASSERTION
summary: The pip wheel
software package version: 0:23.3.1-10.oe2403
software home page: http://www.pip-installer.org
description: A Python wheel of pip to use with venv
name: python-pip-wheel
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19941
type: software_Package
supplied by: SPDXRef-gnrtd19954
name: jython
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software download location: NOASSERTION
summary: A Java implementation of the Python language
software package version: 0:2.7.1-3.oe2403
software home page: http://www.jython.org/
description: Jython is an implementation of the high-level, dynamic, object-oriented language Python seamlessly integrated with the Java platform. The predecessor to Jython, JPython, is certified as 100% Pure Java. Jython is freely available for both commercial and non-commercial use and is distributed with source code. Jython is complementary to Java and is especially suited for the following tasks: Embedded scripting - Java programmers can add the Jython libraries to their system to allow end users to write simple or complicated scripts that add functionality to the application. Interactive experimentation - Jython provides an interactive interpreter that can be used to interact with Java packages or with running Java applications. This allows programmers to experiment and debug any Java system using Jython. Rapid application development - Python programs are typically 2-10X shorter than the equivalent Java program. This translates directly to increased programmer productivity. The seamless interaction between Python and Java allows developers to freely mix the two languages both during development and in shipping products.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.python/jython@2.7.1
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.python/jython-standalone@2.7.1
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5137
type: software_Package
supplied by: SPDXRef-gnrtd5149
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-1.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-1.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.422.b05-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5191
type: software_Package
supplied by: SPDXRef-gnrtd5206
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.24.8-1.oe2403?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.24.8-1.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.24.8-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5153
type: software_Package
supplied by: SPDXRef-gnrtd5168
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.27.6-1.oe2403?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.27.6-1.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.27.6-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5092
type: software_Package
supplied by: SPDXRef-gnrtd5117
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.452.b09-2.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.452.b09-2.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.452.b09-2.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd268
type: software_Package
supplied by: SPDXRef-gnrtd271
software download location: NOASSERTION
summary: Easily build and distribute Python packages
software package version: 0:68.0.0-2.oe2403
software home page: https://pypi.python.org/pypi/setuptools
description: Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. This package contains a python wheel of setuptools to use with venv.
name: python-setuptools
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5210
type: software_Package
supplied by: SPDXRef-gnrtd5222
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.462.b08-3.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.462.b08-3.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.462.b08-3.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16526
type: software_Package
supplied by: SPDXRef-gnrtd16536
name: netty
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/netty@4.1.13-22.oe2403?arch=x86_64&epoch=0&upstream=netty-4.1.13-22.oe2403.src.rpm
software download location: NOASSERTION
summary: Asynchronous event-driven network application Java framework
software package version: 0:4.1.13-22.oe2403
software home page: https://netty.io/
description: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-dns@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-socks@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-resolver-dns@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-native-kqueue@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-native-epoll@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-http2@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-smtp@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-memcache@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-handler@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-http@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-xml@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-buffer@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-all@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-stomp@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-sctp@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-resolver@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-haproxy@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-dev-tools@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-common@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-handler-proxy@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-redis@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-transport-native-unix-common@4.1.13.Final
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/io.netty/netty-codec-mqtt@4.1.13.Final
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5172
type: software_Package
supplied by: SPDXRef-gnrtd5187
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.25.9-3.oe2403?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.25.9-3.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.25.9-3.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5121
type: software_Package
supplied by: SPDXRef-gnrtd5133
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.432.b06-0.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-0.oe2403.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.432.b06-0.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1