type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-01T18:24:47Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-01T18:24:47Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/aarch64-224b8f23-2de7-48af-ba35-9b56e9cd81b1-specv3/SPDXRef-gnrtd16041
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16030)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18646
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd18647
from: java-latest-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5307
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1201
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5305
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: apache-commons-lang3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16043
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16030)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19888
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19889
from: jss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16011
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16000)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16026
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16015)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18649
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd18650
from: java-latest-openjdk-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16028
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16015)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16058
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16045)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16056
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16045)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47278
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd47279
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15996
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd15985)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15998
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd15985)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16013
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1201
from: tomcat (SPDXRef-gnrtd16000)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47281
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd47282
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19885
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19886
from: jss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47272
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd16045)
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47276
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd16015)
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47277
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: apache-commons-lang3
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47274
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd15985)
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47275
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd16030)
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47270
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-latest-openjdk-headless
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47271
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jss
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47273
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd16000)
from: tomcatjss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18647
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1201
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18650
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19889
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.1 or GPLv2+ or LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19886
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv1.1 or GPLv2+ or LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47279
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47282
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47280
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18648
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15997
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5306
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16042
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19887
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16027
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16012
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16057
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16030
type: software_Package
supplied by: SPDXRef-gnrtd16042
name: tomcat
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.118-1.oe2403
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18633
type: software_Package
supplied by: SPDXRef-gnrtd18648
name: java-latest-openjdk-headless
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 23
software package version: 1:23.0.1.11-1.oe2403
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 23 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5297
type: software_Package
supplied by: SPDXRef-gnrtd5306
name: apache-commons-lang3
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Commons Lang version 3.0
software package version: 0:3.18.0-1.oe2403
software home page: https://commons.apache.org/proper/commons-lang/
description: The standard Java libraries fail to provide enough methods for manipulation of its core classes. The Commons Lang Component provides these extra methods. Lang provides a host of helper utilities for the java.lang API, notably String manipulation methods, basic numerical methods, object reflection, concurrency, creation and serialization and System properties. Additionally it contains basic enhancements to java.util.Date and a series of utilities dedicated to help with building methods, such as hashCode, toString and equals. Note that Lang 3.0 (and subsequent versions) use a different package (org.apache.commons.lang3) than the previous versions (org.apache.commons.lang), allowing it to be used at the same time as an earlier version.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.commons/commons-lang3@3.18.0
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16015
type: software_Package
supplied by: SPDXRef-gnrtd16027
name: tomcat
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.96-2.oe2403
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.96
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.96
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15985
type: software_Package
supplied by: SPDXRef-gnrtd15997
name: tomcat
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.117-1.oe2403
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.117
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47269
type: software_Package
supplied by: SPDXRef-gnrtd47280
software download location: NOASSERTION
summary: Apache Tomcat of JSS Connector
software package version: 0:8.2.0-2.oe2403
software home page: http://www.dogtagpki.org/wiki/TomcatJSS
description: Apache Tomcat of JSS Connector.
name: tomcatjss
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19877
type: software_Package
supplied by: SPDXRef-gnrtd19887
software download location: NOASSERTION
summary: Java Security Services
software package version: 0:5.4.2-2.oe2403
software home page: http://www.dogtagpki.org/wiki/JSS
description: JSS offers a implementation for java-based applications to use native NSS.
name: jss
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16000
type: software_Package
supplied by: SPDXRef-gnrtd16012
name: tomcat
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.115-1.oe2403
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.115
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16045
type: software_Package
supplied by: SPDXRef-gnrtd16057
name: tomcat
software source info: acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.100-1.oe2403
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1